Policy DV SSL - 域名验证（DV）SSL 证书策略 —— 仅核验域名所有权，不核验组织身份

Go back Parent node: Cert Policy - 证书策略（CP）子树 —— 规定所签发证书的适用范围、安全要求与签发/续期/吊销/审计约束 (1.3.6.1.4.1.59719.5.1)

Technical information

Dot notation:	`1.3.6.1.4.1.59719.5.1.100`
ASN.1 notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) pki-certificate-system(5) cert-policy(1) policy-dv-ssl(100) }`
OID-IRI notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/PKICertificateSystem/CertPolicy/PolicyDvSsl`
WEID notation:	`weid:P-1A2V-5-1-2S-4`
DER encoding:	`06:0B:2B:06:01:04:01:83:D2:47:05:01:64`

Description

English:
Domain Validated (DV) Secure Sockets Layer (SSL) certificate policy. This policy defines the configuration rules for DV SSL certificates, which only verify the ownership of the domain name without validating the identity of the organization, and applies to issuing and managing DV SSL certificates for encrypted website communication.
Recommended handling: confirm Domain Name System (DNS) ownership control before application, complete domain control validation as required, and monitor the certificate validity period to avoid expiration.
Status: registered but unused. No certificate has been issued under this policy; when activated, keep the validity period short and enable automatic renewal. The unused state shall be re-verified at each revision of this file.
Recommendation: DV certificates provide encryption but not organizational identity assurance; state this limitation in the CPS and do not use DV certificates for scenarios that require subject identity assurance.
See also: 1.3.6.1.4.1.59719.5.1.100.1, 1.3.6.1.4.1.59719.5.100, 1.3.6.1.4.1.59719.0.3.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
域名验证（Domain Validated，DV）安全套接层（Secure Sockets Layer，SSL）证书策略。本策略定义 DV SSL 证书的配置规则，该类证书仅验证域名所有权、不核验组织身份，用于签发和管理网站加密通信所用的 DV SSL 证书。
处理建议：申请前确认域名系统（Domain Name System，DNS）控制权，按要求完成域名控制权验证，监控证书有效期防止证书过期。
状态：已注册但未使用。尚未按本策略签发任何证书；启用时应采用较短有效期并开启自动续期。本文件每次修订时须重新核验该未使用状态。
建议：DV 证书提供加密但不提供组织身份保证，应在 CPS 中载明该限制，不得用于需要主体身份保证的场景。
关联节点：1.3.6.1.4.1.59719.5.1.100.1、1.3.6.1.4.1.59719.5.100、1.3.6.1.4.1.59719.0.3。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

ID	Base36	ASN.1 IDs (comma sep.)	IRI IDs (comma sep.)	RA	Comment	Created	Updated
1	1	policy-dv-ssl-v1	PolicyDvSslV1	tsingyao

Alternative Identifiers

Identifier	Description
aid:D276000186B200054278A5EC55A15D23 (No PIX allowed)	OIDplus Information Object Application Identifier (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-a9b1bad8037d	OIDplus Information Object Custom UUID (RFC 9562)
guid:ac78eee8-99b3-3b0c-8c37-616f1e6fd919	Name based version 3 / MD5 UUID with namespace UUID_NAMEBASED_NS_OID
guid:67fea994-658e-59c6-9493-a91204915398	Name based version 5 / SHA1 UUID with namespace UUID_NAMEBASED_NS_OID
mac:62-37-55-A1-5D-23	OIDplus Information Object MAC address, Unicast (AAI)
mac:63-37-55-A1-5D-23	OIDplus Information Object MAC address, Multicast (AAI)
weid:P-1A2V-5-1-2S-4	WEID notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=1436638499	OIDplus Information Object X.500 DN