Cert End User - 证书类型标识：最终用户证书 —— 用于证书登录、VPN 接入与 TLS 双向认证

Go back Parent node: PKI Certificate System - 公钥基础设施（PKI）证书系统子树 —— 证书策略、类型标识、私有扩展、EKU、属性与协议 (1.3.6.1.4.1.59719.5)

Technical information

Dot notation:	`1.3.6.1.4.1.59719.5.800`
ASN.1 notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) pki-certificate-system(5) cert-end-user(800) }`
OID-IRI notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/PKICertificateSystem/CertEndUser`
WEID notation:	`weid:P-1A2V-5-M8-1`
DER encoding:	`06:0B:2B:06:01:04:01:83:D2:47:05:86:20`

Description

English:
Certificate type identifier for end-user certificates, used for identity authentication of users or clients, supporting certificate-based login, Virtual Private Network (VPN) access and mutual Transport Layer Security (TLS) authentication.
Status: registered but unused. No end-user certificate has been issued with this type identifier; when used, map it to the end-user certificate policy (1.3.6.1.4.1.59719.5.1.800) and bind the certificate to a unique user identity. The unused state shall be re-verified at each revision of this file.
Recommendation: define the revocation workflow for user departure and device loss before deployment, and monitor authentication failures in the authentication and authorization area (1.3.6.1.4.1.59719.6.2).
See also: 1.3.6.1.4.1.59719.5.1.800, 1.3.6.1.4.1.59719.5.3.2, 1.3.6.1.4.1.59719.6.2.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
最终用户证书的证书类型标识，用于用户或客户端的身份认证，支撑证书登录、虚拟专用网络（Virtual Private Network，VPN）接入与传输层安全（Transport Layer Security，TLS）双向认证。
状态：已注册但未使用。尚未以本类型标识签发任何最终用户证书；使用时应映射到最终用户证书策略（1.3.6.1.4.1.59719.5.1.800），并将证书与唯一用户身份绑定。本文件每次修订时须重新核验该未使用状态。
建议：部署前应定义用户离职、设备丢失场景的吊销流程，并在认证授权区（1.3.6.1.4.1.59719.6.2）监控认证失败情况。
关联节点：1.3.6.1.4.1.59719.5.1.800、1.3.6.1.4.1.59719.5.3.2、1.3.6.1.4.1.59719.6.2。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

ID	Base36	ASN.1 IDs (comma sep.)	IRI IDs (comma sep.)	RA	Comment	Created	Updated
No items available

Alternative Identifiers

Identifier	Description
aid:D276000186B200054278A5EC091046BE (No PIX allowed)	OIDplus Information Object Application Identifier (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-9a03f0228e3c	OIDplus Information Object Custom UUID (RFC 9562)
guid:c03c97d7-a184-3a5a-84bb-821fb6e3f382	Name based version 3 / MD5 UUID with namespace UUID_NAMEBASED_NS_OID
guid:d9a3d550-1de4-5da2-9f32-56c6ddac3dcc	Name based version 5 / SHA1 UUID with namespace UUID_NAMEBASED_NS_OID
mac:32-51-09-10-46-BE	OIDplus Information Object MAC address, Unicast (AAI)
mac:33-51-09-10-46-BE	OIDplus Information Object MAC address, Multicast (AAI)
weid:P-1A2V-5-M8-1	WEID notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=152061630	OIDplus Information Object X.500 DN