Policy Auto Issue V1 - 证书自动签发策略第 1 版 —— 基线版本，仅通过域名控制权校验、不核验组织或个人身份

Zurückkehren Übergeordnet: Policy Auto Issue - 证书自动签发策略 —— 定义 CA 免人工审核自动签发证书的条件、核验要求与审计要求 (1.3.6.1.4.1.59719.5.1.1)

Technische Informationen

Punkt-Notation:	`1.3.6.1.4.1.59719.5.1.1.1`
ASN.1-Notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) pki-certificate-system(5) cert-policy(1) policy-auto-issue(1) policy-auto-issue-v1(1) }`
OID-IRI-Notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/PKICertificateSystem/CertPolicy/PolicyAutoIssue/PolicyAutoIssueV1`
WEID-Notation:	`weid:P-1A2V-5-1-1-1-9`
DER-Kodierung:	`06:0C:2B:06:01:04:01:83:D2:47:05:01:01:01`

Beschreibung

English:
Version 1 of the automatic certificate issuance policy. Baseline version applicable to automatically issued certificates that pass domain control validation only, without organization or individual identity validation.
Recommended scope: internal and low-risk scenarios only; do not use for externally trusted services, financial transactions or code signing, because the subject identity is not verified.
Status: registered but unused. No certificate has been issued under this policy version; when activated, cap the validity period (for example 90 days or shorter) and require periodic revalidation. The unused state shall be re-verified at each revision of this file.
Recommendation: state the reliance limitation in the CPS and consider marking the issued certificates with a private extension (1.3.6.1.4.1.59719.5.2) so that relying parties can recognise the validation level.
See also: 1.3.6.1.4.1.59719.5.1.1, 1.3.6.1.4.1.59719.5.2, 1.3.6.1.4.1.59719.5.100.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
证书自动签发策略第 1 版。基线版本，适用于仅通过域名控制权校验、未核验组织或个人身份的自动签发证书。
建议适用范围：仅限内部与低风险场景；不得用于对外可信服务、金融交易或代码签名，因为主体身份未经验证。
状态：已注册但未使用。尚未按本策略版本签发任何证书；启用时应限制有效期上限（如 90 天或更短）并要求周期性重新核验。本文件每次修订时须重新核验该未使用状态。
建议：在 CPS 中载明信赖限制，并考虑用私有扩展（1.3.6.1.4.1.59719.5.2）标记所签发证书，使依赖方可识别验证等级。
关联节点：1.3.6.1.4.1.59719.5.1.1、1.3.6.1.4.1.59719.5.2、1.3.6.1.4.1.59719.5.100。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registrierungsstelle

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

Die Registrierungsstelle möchte ihre persönlichen Informationen nicht veröffentlichen.

Untergeordnete Objekte

ID	Base36	ASN.1 IDs (kommagetrennt)	IRI IDs (Kommagetrennt)	RA	Kommentar	Erstellt	Geändert
Keine Einträge vorhanden

Alternative Bezeichner

Bezeichner	Beschreibung
aid:D276000186B200054278A5EC2EECA1CE (Keine PIX erlaubt)	OIDplus Information Object Anwendungsbezeichner (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-bb04901fc5cb	OIDplus Information Object Custom UUID (RFC 9562)
guid:2e1856eb-ab82-340c-97ae-6d5dddf28810	Namensbasierte Version 3 / MD5 UUID mit Namensraum UUID_NAMEBASED_NS_OID
guid:38cc7ca4-82f8-591d-9007-62966e246be3	Namensbasierte Version 5 / SHA1 UUID mit Namensraum UUID_NAMEBASED_NS_OID
mac:B2-81-2E-EC-A1-CE	OIDplus Information Objekt Unicast MAC-Adresse (AAI)
mac:B3-81-2E-EC-A1-CE	OIDplus Information Objekt Multicast MAC-Adresse (AAI)
weid:P-1A2V-5-1-1-1-9	WEID-Notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=787259854	OIDplus Information Object X.500 DN