Cert OCSP Signer - 证书类型标识：OCSP 响应签名证书 —— 由 OCSP 响应服务签署吊销状态响应，须携带 OCSP 签名 EKU

Go back Parent node: PKI Certificate System - 公钥基础设施（PKI）证书系统子树 —— 证书策略、类型标识、私有扩展、EKU、属性与协议 (1.3.6.1.4.1.59719.5)

Technical information

Dot notation:	`1.3.6.1.4.1.59719.5.600`
ASN.1 notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) pki-certificate-system(5) cert-ocsp-signer(600) }`
OID-IRI notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/PKICertificateSystem/CertOcspSigner`
WEID notation:	`weid:P-1A2V-5-GO-4`
DER encoding:	`06:0B:2B:06:01:04:01:83:D2:47:05:84:58`

Description

English:
Certificate type identifier for Online Certificate Status Protocol (OCSP) response signing certificates, used by the OCSP responder to sign revocation status responses; it shall carry the OCSP signing extended key usage.
Status: registered but unused. No OCSP responder certificate has been issued with this type identifier; when used, map it to the OCSP signing policy (1.3.6.1.4.1.59719.5.1.600). The unused state shall be re-verified at each revision of this file.
Recommendation: keep responder certificates short lived and monitor them with the certificate alarm subtree (1.3.6.1.4.1.59719.0.3); an expired responder certificate makes revocation checking fail broadly.
See also: 1.3.6.1.4.1.59719.5.1.600, 1.3.6.1.4.1.59719.0.3.40, 1.3.6.1.4.1.59719.6.1.6.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
在线证书状态协议（Online Certificate Status Protocol，OCSP）响应签名证书的证书类型标识，由 OCSP 响应服务用于签署吊销状态响应，应携带 OCSP 签名扩展密钥用法。
状态：已注册但未使用。尚未以本类型标识签发任何响应签名证书；使用时应映射到 OCSP 签名策略（1.3.6.1.4.1.59719.5.1.600）。本文件每次修订时须重新核验该未使用状态。
建议：响应证书应采用较短有效期，并用证书告警子树（1.3.6.1.4.1.59719.0.3）监控；响应证书过期会导致吊销校验大面积失败。
关联节点：1.3.6.1.4.1.59719.5.1.600、1.3.6.1.4.1.59719.0.3.40、1.3.6.1.4.1.59719.6.1.6。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

ID	Base36	ASN.1 IDs (comma sep.)	IRI IDs (comma sep.)	RA	Comment	Created	Updated
No items available

Alternative Identifiers

Identifier	Description
aid:D276000186B200054278A5EC2EBEB59E (No PIX allowed)	OIDplus Information Object Application Identifier (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-d1d8ba289b62	OIDplus Information Object Custom UUID (RFC 9562)
guid:ee009ed9-205d-36ea-a6c7-3df9382292a6	Name based version 3 / MD5 UUID with namespace UUID_NAMEBASED_NS_OID
guid:ace6ca4d-3d61-5f96-9f1b-36bab078d0a5	Name based version 5 / SHA1 UUID with namespace UUID_NAMEBASED_NS_OID
mac:82-14-2E-BE-B5-9E	OIDplus Information Object MAC address, Unicast (AAI)
mac:83-14-2E-BE-B5-9E	OIDplus Information Object MAC address, Multicast (AAI)
weid:P-1A2V-5-GO-4	WEID notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=784250270	OIDplus Information Object X.500 DN