Object identifiers

The tree of arcs

Each line is an identifier of the catalog, nested under the nearest arc the catalog holds. Lines that open a page are arcs with their own table or identifiers with notes.

• 0.4.0.1862.1.1 id-etsi-qcs-QcCompliance a qualified certificate statement

  Dotted notation

  0.4.0.1862.1.1

  DER encoding

  060604008e460101

  Category

  a qualified certificate statement

  Also known as

  QcCompliance

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 412-5 §4.2.1
• 0.4.0.1862.1.2 id-etsi-qcs-QcLimitValue a qualified certificate statement

  Dotted notation

  0.4.0.1862.1.2

  DER encoding

  060604008e460102

  Category

  a qualified certificate statement

  Also known as

  QcLimitValue

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 412-5 §4.3.2
• 0.4.0.1862.1.3 id-etsi-qcs-QcRetentionPeriod a qualified certificate statement

  Dotted notation

  0.4.0.1862.1.3

  DER encoding

  060604008e460103

  Category

  a qualified certificate statement

  Also known as

  QcRetentionPeriod

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 412-5 §4.3.3
• 0.4.0.1862.1.4 id-etsi-qcs-QcSSCD a qualified certificate statement

  Dotted notation

  0.4.0.1862.1.4

  DER encoding

  060604008e460104

  Category

  a qualified certificate statement

  Also known as

  QcSSCD, QcQSCD

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 412-5 §4.2.2
• 0.4.0.1862.1.5 id-etsi-qcs-QcPDS a qualified certificate statement

  Dotted notation

  0.4.0.1862.1.5

  DER encoding

  060604008e460105

  Category

  a qualified certificate statement

  Also known as

  QcPDS

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 412-5 §4.3.4
• 0.4.0.1862.1.6 id-etsi-qcs-QcType a qualified certificate statementPage
  • 0.4.0.1862.1.6.1 id-etsi-qct-esign a qualified certificate statement
  • 0.4.0.1862.1.6.2 id-etsi-qct-eseal a qualified certificate statement
  • 0.4.0.1862.1.6.3 id-etsi-qct-web a qualified certificate statement
• 0.4.0.1862.1.7 id-etsi-qcs-QcCClegislation a qualified certificate statement

  Dotted notation

  0.4.0.1862.1.7

  DER encoding

  060604008e460107

  Category

  a qualified certificate statement

  Also known as

  QcCClegislation

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 412-5 §4.2.4
• 0.4.0.2042.1.1 ncp a certificate policy

  Dotted notation

  0.4.0.2042.1.1

  DER encoding

  060604008f7a0101

  Category

  a certificate policy

  Also known as

  ETSI NCP, Normalized Certificate Policy

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 411-1 §5.3
• 0.4.0.2042.1.2 ncpplus a certificate policy

  Dotted notation

  0.4.0.2042.1.2

  DER encoding

  060604008f7a0102

  Category

  a certificate policy

  Also known as

  ETSI NCP+

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 411-1 §5.3
• 0.4.0.2042.1.3 lcp a certificate policy

  Dotted notation

  0.4.0.2042.1.3

  DER encoding

  060604008f7a0103

  Category

  a certificate policy

  Also known as

  ETSI LCP, Lightweight Certificate Policy

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 411-1 §5.3
• 0.4.0.2042.1.4 evcp a certificate policy

  Dotted notation

  0.4.0.2042.1.4

  DER encoding

  060604008f7a0104

  Category

  a certificate policy

  Also known as

  ETSI EVCP

  EV policy of

  HARICA

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 411-1 §5.3
• 0.4.0.2042.1.6 dvcp a certificate policy

  Dotted notation

  0.4.0.2042.1.6

  DER encoding

  060604008f7a0106

  Category

  a certificate policy

  Also known as

  ETSI DVCP

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 411-1 §5.3
• 0.4.0.2042.1.7 ovcp a certificate policy

  Dotted notation

  0.4.0.2042.1.7

  DER encoding

  060604008f7a0107

  Category

  a certificate policy

  Also known as

  ETSI OVCP

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 411-1 §5.3
• 0.4.0.2042.1.8 ivcp a certificate policy

  Dotted notation

  0.4.0.2042.1.8

  DER encoding

  060604008f7a0108

  Category

  a certificate policy

  Also known as

  ETSI IVCP

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 411-1 §5.3
• 0.4.0.19495.2 id-etsi-psd2-qcStatement a qualified certificate statement

  Dotted notation

  0.4.0.19495.2

  DER encoding

  0606040081982702

  Category

  a qualified certificate statement

  Also known as

  PSD2 QCStatement

  Listed by

  the ecdsa.com catalog

  • ETSI TS 119 495 §5.1
• 0.4.0.194112.1.0 qcp-natural a certificate policy

  Dotted notation

  0.4.0.194112.1.0

  DER encoding

  060704008bec400100

  Category

  a certificate policy

  Also known as

  QCP-n

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 411-2 §5.3
• 0.4.0.194112.1.1 qcp-legal a certificate policy

  Dotted notation

  0.4.0.194112.1.1

  DER encoding

  060704008bec400101

  Category

  a certificate policy

  Also known as

  QCP-l

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 411-2 §5.3
• 0.4.0.194112.1.2 qcp-natural-qscd a certificate policy

  Dotted notation

  0.4.0.194112.1.2

  DER encoding

  060704008bec400102

  Category

  a certificate policy

  Also known as

  QCP-n-qscd

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 411-2 §5.3
• 0.4.0.194112.1.3 qcp-legal-qscd a certificate policy

  Dotted notation

  0.4.0.194112.1.3

  DER encoding

  060704008bec400103

  Category

  a certificate policy

  Also known as

  QCP-l-qscd

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 411-2 §5.3
• 0.4.0.194112.1.4 qcp-web a certificate policy

  Dotted notation

  0.4.0.194112.1.4

  DER encoding

  060704008bec400104

  Category

  a certificate policy

  Also known as

  QCP-w, QWAC policy

  EV policy of

  Netlock

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 411-2 §5.3
• 0.4.0.194112.1.5 qncp-w a certificate policy

  Dotted notation

  0.4.0.194112.1.5

  DER encoding

  060704008bec400105

  Category

  a certificate policy

  Also known as

  QNCP-w

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 411-2 §5.3
• 0.4.0.194112.1.6 qncp-w-gen a certificate policy

  Dotted notation

  0.4.0.194112.1.6

  DER encoding

  060704008bec400106

  Category

  a certificate policy

  Also known as

  QNCP-w-gen

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 411-2 §5.3
• 0.4.0.194121.1.1 id-etsi-qcs-semanticsId-Natural a qualified certificate statement

  Dotted notation

  0.4.0.194121.1.1

  DER encoding

  060704008bec490101

  Category

  a qualified certificate statement

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 412-1 §5.1
• 0.4.0.194121.1.2 id-etsi-qcs-semanticsId-Legal a qualified certificate statement

  Dotted notation

  0.4.0.194121.1.2

  DER encoding

  060704008bec490102

  Category

  a qualified certificate statement

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 412-1 §5.1
• 0.4.0.194121.1.3 id-etsi-qcs-semanticsId-eIDASNatural a qualified certificate statement

  Dotted notation

  0.4.0.194121.1.3

  DER encoding

  060704008bec490103

  Category

  a qualified certificate statement

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 412-1 §5.1
• 0.4.0.194121.1.4 id-etsi-qcs-semanticsId-eIDASLegal a qualified certificate statement

  Dotted notation

  0.4.0.194121.1.4

  DER encoding

  060704008bec490104

  Category

  a qualified certificate statement

  Listed by

  the ecdsa.com catalog

  • ETSI EN 319 412-1 §5.1
• 0.9.2342.19200300.100.1.1 uid an attribute type

  Dotted notation

  0.9.2342.19200300.100.1.1

  DER encoding

  060a0992268993f22c640101

  Category

  an attribute type

  Also known as

  userId

  OpenSSL short name

  UID

  OpenSSL long name

  userId

  Listed by

  the ecdsa.com catalog

  • RFC 4519
• 0.9.2342.19200300.100.1.3 mail an attribute type

  Dotted notation

  0.9.2342.19200300.100.1.3

  DER encoding

  060a0992268993f22c640103

  Category

  an attribute type

  Also known as

  rfc822Mailbox

  OpenSSL short name

  mail

  OpenSSL long name

  rfc822Mailbox

  Listed by

  the ecdsa.com catalog

  • RFC 4524 §2.16
• 0.9.2342.19200300.100.1.25 domainComponent an attribute type

  Dotted notation

  0.9.2342.19200300.100.1.25

  DER encoding

  060a0992268993f22c640119

  Category

  an attribute type

  Also known as

  DC, dc

  OpenSSL short name

  DC

  OpenSSL long name

  domainComponent

  Listed by

  the ecdsa.com catalog

  • RFC 4519
  • RFC 5280 §A.1
• 1.2.156.10197.1.104.2 sm4-cbc a symmetric cipher

  Dotted notation

  1.2.156.10197.1.104.2

  DER encoding

  06082a811ccf55016802

  Category

  a symmetric cipher

  Also known as

  SM4-CBC

  OpenSSL short name

  SM4-CBC

  OpenSSL long name

  sm4-cbc

  Listed by

  the ecdsa.com catalog

  • GM/T 0006-2012
• 1.2.156.10197.1.104.8 sm4-gcm a symmetric cipher

  Dotted notation

  1.2.156.10197.1.104.8

  DER encoding

  06082a811ccf55016808

  Category

  a symmetric cipher

  Also known as

  SM4-GCM

  OpenSSL short name

  SM4-GCM

  OpenSSL long name

  sm4-gcm

  Listed by

  the ecdsa.com catalog

  • GM/T 0006-2012
• 1.2.156.10197.1.104.9 sm4-ccm a symmetric cipher

  Dotted notation

  1.2.156.10197.1.104.9

  DER encoding

  06082a811ccf55016809

  Category

  a symmetric cipher

  Also known as

  SM4-CCM

  OpenSSL short name

  SM4-CCM

  OpenSSL long name

  sm4-ccm

  Listed by

  the ecdsa.com catalog

  • GM/T 0006-2012
• 1.2.156.10197.1.301 sm2 named elliptic-curve domain parameters

  Dotted notation

  1.2.156.10197.1.301

  DER encoding

  06082a811ccf5501822d

  Category

  named elliptic-curve domain parameters

  Also known as

  sm2p256v1, SM2, curveSM2

  OpenSSL short name

  SM2

  OpenSSL long name

  sm2

  Curve

  SM2

  Listed by

  the ecdsa.com catalog

  • GM/T 0006-2012
• 1.2.156.10197.1.401 sm3 a hash function

  Dotted notation

  1.2.156.10197.1.401

  DER encoding

  06082a811ccf55018311

  Category

  a hash function

  Also known as

  SM3

  OpenSSL short name

  SM3

  OpenSSL long name

  sm3

  Listed by

  the ecdsa.com catalog

  • GM/T 0006-2012
  • 1.2.156.10197.1.401.3.1 hmacWithSM3 a message authentication code

    Dotted notation

    1.2.156.10197.1.401.3.1

    DER encoding

    060a2a811ccf550183110301

    Category

    a message authentication code

    OpenSSL long name

    hmacWithSM3

    Parent

    1.2.156.10197.1.401 sm3

    Listed by

    the ecdsa.com catalog

    • GM/T 0006-2012
• 1.2.156.10197.1.501 SM2-with-SM3 a signature algorithm

  Dotted notation

  1.2.156.10197.1.501

  DER encoding

  06082a811ccf55018375

  Category

  a signature algorithm

  Also known as

  sm2sign-with-sm3, SM2-SM3

  OpenSSL short name

  SM2-SM3

  OpenSSL long name

  SM2-with-SM3

  Curve

  SM2

  Listed by

  the ecdsa.com catalog

  • GM/T 0006-2012
• 1.2.156.10197.1.504 sm3WithRSAEncryption a signature algorithm

  Dotted notation

  1.2.156.10197.1.504

  DER encoding

  06082a811ccf55018378

  Category

  a signature algorithm

  Also known as

  RSA-SM3

  OpenSSL short name

  RSA-SM3

  OpenSSL long name

  sm3WithRSAEncryption

  Listed by

  the ecdsa.com catalog

  • GM/T 0006-2012
• 1.2.156.112559.1.1.6.1 Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) a certificate policy

  Dotted notation

  1.2.156.112559.1.1.6.1

  DER encoding

  060a2a811c86ef2f01010601

  Category

  a certificate policy

  EV policy of

  Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA))

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.2.156.112559.1.1.7.1 Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) a certificate policy

  Dotted notation

  1.2.156.112559.1.1.7.1

  DER encoding

  060a2a811c86ef2f01010701

  Category

  a certificate policy

  EV policy of

  Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA))

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.2.156.112570.1.1.3 Shanghai Electronic Certification Authority Co., Ltd. a certificate policy

  Dotted notation

  1.2.156.112570.1.1.3

  DER encoding

  06092a811c86ef3a010103

  Category

  a certificate policy

  EV policy of

  Shanghai Electronic Certification Authority Co., Ltd.

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.2.250.1.177.1.18.2.2 Certigna a certificate policy

  Dotted notation

  1.2.250.1.177.1.18.2.2

  DER encoding

  060a2a817a01813101120202

  Category

  a certificate policy

  EV policy of

  Certigna

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.2.250.1.223.101.256.1 FRP256v1 named elliptic-curve domain parameters

  Dotted notation

  1.2.250.1.223.101.256.1

  DER encoding

  060a2a817a01815f65820001

  Category

  named elliptic-curve domain parameters

  Also known as

  frp256v1, ANSSI FRP256v1

  Curve

  FRP256v1

  Listed by

  the ecdsa.com catalog

  • Avis relatif aux paramètres de courbes elliptiques définis par l'État français (JORF, 16 octobre 2011)
• 1.2.392.200011.61.1.1.1.2 id-camellia128-cbc a symmetric cipher

  Dotted notation

  1.2.392.200011.61.1.1.1.2

  DER encoding

  060b2a83088c9a4b3d01010102

  Category

  a symmetric cipher

  Also known as

  camellia-128-cbc

  OpenSSL short name

  CAMELLIA-128-CBC

  OpenSSL long name

  camellia-128-cbc

  Listed by

  the ecdsa.com catalog

  • RFC 3657 §2.1
• 1.2.392.200011.61.1.1.1.3 id-camellia192-cbc a symmetric cipher

  Dotted notation

  1.2.392.200011.61.1.1.1.3

  DER encoding

  060b2a83088c9a4b3d01010103

  Category

  a symmetric cipher

  Also known as

  camellia-192-cbc

  OpenSSL short name

  CAMELLIA-192-CBC

  OpenSSL long name

  camellia-192-cbc

  Listed by

  the ecdsa.com catalog

  • RFC 3657 §2.1
• 1.2.392.200011.61.1.1.1.4 id-camellia256-cbc a symmetric cipher

  Dotted notation

  1.2.392.200011.61.1.1.1.4

  DER encoding

  060b2a83088c9a4b3d01010104

  Category

  a symmetric cipher

  Also known as

  camellia-256-cbc

  OpenSSL short name

  CAMELLIA-256-CBC

  OpenSSL long name

  camellia-256-cbc

  Listed by

  the ecdsa.com catalog

  • RFC 3657 §2.1
• 1.2.392.200091.100.721.1 SECOM Trust Systems CO., LTD. a certificate policy

  Dotted notation

  1.2.392.200091.100.721.1

  DER encoding

  060a2a83088c9b1b64855101

  Category

  a certificate policy

  EV policy of

  SECOM Trust Systems CO., LTD.

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.2.616.1.113527.2.5.1.1 Asseco Data Systems S.A. a certificate policy

  Dotted notation

  1.2.616.1.113527.2.5.1.1

  DER encoding

  060b2a84680186f67702050101

  Category

  a certificate policy

  EV policy of

  Asseco Data Systems S.A.

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.2.616.1.113527.2.5.1.7 Asseco Data Systems S.A. a certificate policy

  Dotted notation

  1.2.616.1.113527.2.5.1.7

  DER encoding

  060b2a84680186f67702050107

  Category

  a certificate policy

  EV policy of

  Asseco Data Systems S.A.

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.2.643.2.2.3 id-GostR3411-94-with-GostR3410-2001 a signature algorithm

  Dotted notation

  1.2.643.2.2.3

  DER encoding

  06062a8503020203

  Category

  a signature algorithm

  OpenSSL short name

  id-GostR3411-94-with-GostR3410-2001

  OpenSSL long name

  GOST R 34.11-94 with GOST R 34.10-2001

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • RFC 4357 §10.8
• 1.2.643.2.2.9 id-GostR3411-94 a hash function

  Dotted notation

  1.2.643.2.2.9

  DER encoding

  06062a8503020209

  Category

  a hash function

  Also known as

  GOST R 34.11-94

  OpenSSL short name

  md_gost94

  OpenSSL long name

  GOST R 34.11-94

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • RFC 4357 §10.4
• 1.2.643.2.2.19 id-GostR3410-2001 a public key type

  Dotted notation

  1.2.643.2.2.19

  DER encoding

  06062a8503020213

  Category

  a public key type

  Also known as

  GOST R 34.10-2001

  OpenSSL short name

  gost2001

  OpenSSL long name

  GOST R 34.10-2001

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • RFC 4357 §10.8
• 1.2.643.2.2.21 id-Gost28147-89 a symmetric cipher

  Dotted notation

  1.2.643.2.2.21

  DER encoding

  06062a8503020215

  Category

  a symmetric cipher

  Also known as

  GOST 28147-89

  OpenSSL short name

  gost89

  OpenSSL long name

  GOST 28147-89

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • RFC 4357 §10.2
• 1.2.643.2.2.35.1 id-GostR3410-2001-CryptoPro-A-ParamSet named elliptic-curve domain parameters

  Dotted notation

  1.2.643.2.2.35.1

  DER encoding

  06072a850302022301

  Category

  named elliptic-curve domain parameters

  Also known as

  CryptoPro-A

  OpenSSL short name

  id-GostR3410-2001-CryptoPro-A-ParamSet

  Curve

  GC256B

  Listed by

  the ecdsa.com catalog

  • RFC 4357 §10.8
  • RFC 9215 §4.2
• 1.2.643.2.2.35.2 id-GostR3410-2001-CryptoPro-B-ParamSet named elliptic-curve domain parameters

  Dotted notation

  1.2.643.2.2.35.2

  DER encoding

  06072a850302022302

  Category

  named elliptic-curve domain parameters

  Also known as

  CryptoPro-B

  OpenSSL short name

  id-GostR3410-2001-CryptoPro-B-ParamSet

  Curve

  GC256C

  Listed by

  the ecdsa.com catalog

  • RFC 4357 §10.8
  • RFC 9215 §4.2
• 1.2.643.2.2.35.3 id-GostR3410-2001-CryptoPro-C-ParamSet named elliptic-curve domain parameters

  Dotted notation

  1.2.643.2.2.35.3

  DER encoding

  06072a850302022303

  Category

  named elliptic-curve domain parameters

  Also known as

  CryptoPro-C

  OpenSSL short name

  id-GostR3410-2001-CryptoPro-C-ParamSet

  Curve

  GC256D

  Listed by

  the ecdsa.com catalog

  • RFC 4357 §10.8
  • RFC 9215 §4.2
• 1.2.643.2.2.36.0 id-GostR3410-2001-CryptoPro-XchA-ParamSet named elliptic-curve domain parameters

  Dotted notation

  1.2.643.2.2.36.0

  DER encoding

  06072a850302022400

  Category

  named elliptic-curve domain parameters

  Also known as

  CryptoPro-XchA

  OpenSSL short name

  id-GostR3410-2001-CryptoPro-XchA-ParamSet

  Curve

  GC256B

  Listed by

  the ecdsa.com catalog

  • RFC 4357 §10.8
  • RFC 9215 §4.2
• 1.2.643.2.2.36.1 id-GostR3410-2001-CryptoPro-XchB-ParamSet named elliptic-curve domain parameters

  Dotted notation

  1.2.643.2.2.36.1

  DER encoding

  06072a850302022401

  Category

  named elliptic-curve domain parameters

  Also known as

  CryptoPro-XchB

  OpenSSL short name

  id-GostR3410-2001-CryptoPro-XchB-ParamSet

  Curve

  GC256D

  Listed by

  the ecdsa.com catalog

  • RFC 4357 §10.8
  • RFC 9215 §4.2
• 1.2.643.7.1.1.1.1 id-tc26-gost3410-12-256 a public key type

  Dotted notation

  1.2.643.7.1.1.1.1

  DER encoding

  06082a85030701010101

  Category

  a public key type

  Also known as

  GOST R 34.10-2012 256-bit key, gost2012_256

  OpenSSL short name

  gost2012_256

  OpenSSL long name

  GOST R 34.10-2012 with 256 bit modulus

  Listed by

  the ecdsa.com catalog

  • RFC 9215 §4.1
• 1.2.643.7.1.1.1.2 id-tc26-gost3410-12-512 a public key type

  Dotted notation

  1.2.643.7.1.1.1.2

  DER encoding

  06082a85030701010102

  Category

  a public key type

  Also known as

  GOST R 34.10-2012 512-bit key, gost2012_512

  OpenSSL short name

  gost2012_512

  OpenSSL long name

  GOST R 34.10-2012 with 512 bit modulus

  Listed by

  the ecdsa.com catalog

  • RFC 9215 §4.1
• 1.2.643.7.1.1.2.2 id-tc26-gost3411-12-256 a hash function

  Dotted notation

  1.2.643.7.1.1.2.2

  DER encoding

  06082a85030701010202

  Category

  a hash function

  Also known as

  Streebog-256, GOST R 34.11-2012 256, md_gost12_256

  OpenSSL short name

  md_gost12_256

  OpenSSL long name

  GOST R 34.11-2012 with 256 bit hash

  Listed by

  the ecdsa.com catalog

  • RFC 9215 §3
• 1.2.643.7.1.1.2.3 id-tc26-gost3411-12-512 a hash function

  Dotted notation

  1.2.643.7.1.1.2.3

  DER encoding

  06082a85030701010203

  Category

  a hash function

  Also known as

  Streebog-512, GOST R 34.11-2012 512, md_gost12_512

  OpenSSL short name

  md_gost12_512

  OpenSSL long name

  GOST R 34.11-2012 with 512 bit hash

  Listed by

  the ecdsa.com catalog

  • RFC 9215 §3
• 1.2.643.7.1.1.3.2 id-tc26-signwithdigest-gost3410-12-256 a signature algorithm

  Dotted notation

  1.2.643.7.1.1.3.2

  DER encoding

  06082a85030701010302

  Category

  a signature algorithm

  Also known as

  id-tc26-signwithdigest-gost3410-2012-256

  OpenSSL short name

  id-tc26-signwithdigest-gost3410-2012-256

  OpenSSL long name

  GOST R 34.10-2012 with GOST R 34.11-2012 (256 bit)

  Listed by

  the ecdsa.com catalog

  • RFC 9215 §2
• 1.2.643.7.1.1.3.3 id-tc26-signwithdigest-gost3410-12-512 a signature algorithm

  Dotted notation

  1.2.643.7.1.1.3.3

  DER encoding

  06082a85030701010303

  Category

  a signature algorithm

  Also known as

  id-tc26-signwithdigest-gost3410-2012-512

  OpenSSL short name

  id-tc26-signwithdigest-gost3410-2012-512

  OpenSSL long name

  GOST R 34.10-2012 with GOST R 34.11-2012 (512 bit)

  Listed by

  the ecdsa.com catalog

  • RFC 9215 §2
• 1.2.643.7.1.2.1.1.1 id-tc26-gost-3410-2012-256-paramSetA named elliptic-curve domain parameters

  Dotted notation

  1.2.643.7.1.2.1.1.1

  DER encoding

  06092a8503070102010101

  Category

  named elliptic-curve domain parameters

  Also known as

  GC256A

  OpenSSL short name

  id-tc26-gost-3410-2012-256-paramSetA

  OpenSSL long name

  GOST R 34.10-2012 (256 bit) ParamSet A

  Curve

  GC256A

  Listed by

  the ecdsa.com catalog

  • RFC 7836 §5.2.1
  • RFC 9215 §A
• 1.2.643.7.1.2.1.1.2 id-tc26-gost-3410-2012-256-paramSetB named elliptic-curve domain parameters

  Dotted notation

  1.2.643.7.1.2.1.1.2

  DER encoding

  06092a8503070102010102

  Category

  named elliptic-curve domain parameters

  Also known as

  GC256B

  OpenSSL short name

  id-tc26-gost-3410-2012-256-paramSetB

  OpenSSL long name

  GOST R 34.10-2012 (256 bit) ParamSet B

  Curve

  GC256B

  Listed by

  the ecdsa.com catalog

  • RFC 9215 §A
• 1.2.643.7.1.2.1.1.3 id-tc26-gost-3410-2012-256-paramSetC named elliptic-curve domain parameters

  Dotted notation

  1.2.643.7.1.2.1.1.3

  DER encoding

  06092a8503070102010103

  Category

  named elliptic-curve domain parameters

  Also known as

  GC256C

  OpenSSL short name

  id-tc26-gost-3410-2012-256-paramSetC

  OpenSSL long name

  GOST R 34.10-2012 (256 bit) ParamSet C

  Curve

  GC256C

  Listed by

  the ecdsa.com catalog

  • RFC 9215 §A
• 1.2.643.7.1.2.1.1.4 id-tc26-gost-3410-2012-256-paramSetD named elliptic-curve domain parameters

  Dotted notation

  1.2.643.7.1.2.1.1.4

  DER encoding

  06092a8503070102010104

  Category

  named elliptic-curve domain parameters

  Also known as

  GC256D

  OpenSSL short name

  id-tc26-gost-3410-2012-256-paramSetD

  OpenSSL long name

  GOST R 34.10-2012 (256 bit) ParamSet D

  Curve

  GC256D

  Listed by

  the ecdsa.com catalog

  • RFC 9215 §A
• 1.2.643.7.1.2.1.2.1 id-tc26-gost-3410-12-512-paramSetA named elliptic-curve domain parameters

  Dotted notation

  1.2.643.7.1.2.1.2.1

  DER encoding

  06092a8503070102010201

  Category

  named elliptic-curve domain parameters

  Also known as

  GC512A, id-tc26-gost-3410-2012-512-paramSetA

  OpenSSL short name

  id-tc26-gost-3410-2012-512-paramSetA

  OpenSSL long name

  GOST R 34.10-2012 (512 bit) ParamSet A

  Curve

  GC512A

  Listed by

  the ecdsa.com catalog

  • RFC 7836 §5.1.1
  • RFC 9215 §A
• 1.2.643.7.1.2.1.2.2 id-tc26-gost-3410-12-512-paramSetB named elliptic-curve domain parameters

  Dotted notation

  1.2.643.7.1.2.1.2.2

  DER encoding

  06092a8503070102010202

  Category

  named elliptic-curve domain parameters

  Also known as

  GC512B, id-tc26-gost-3410-2012-512-paramSetB

  OpenSSL short name

  id-tc26-gost-3410-2012-512-paramSetB

  OpenSSL long name

  GOST R 34.10-2012 (512 bit) ParamSet B

  Curve

  GC512B

  Listed by

  the ecdsa.com catalog

  • RFC 7836 §5.1.1
  • RFC 9215 §A
• 1.2.643.7.1.2.1.2.3 id-tc26-gost-3410-2012-512-paramSetC named elliptic-curve domain parameters

  Dotted notation

  1.2.643.7.1.2.1.2.3

  DER encoding

  06092a8503070102010203

  Category

  named elliptic-curve domain parameters

  Also known as

  GC512C

  OpenSSL short name

  id-tc26-gost-3410-2012-512-paramSetC

  OpenSSL long name

  GOST R 34.10-2012 (512 bit) ParamSet C

  Curve

  GC512C

  Listed by

  the ecdsa.com catalog

  • RFC 7836 §5.2.1
  • RFC 9215 §A
• 1.2.840.10040.4.1 id-dsa a public key type

  Dotted notation

  1.2.840.10040.4.1

  DER encoding

  06072a8648ce380401

  Category

  a public key type

  Also known as

  DSA public key

  OpenSSL short name

  DSA

  OpenSSL long name

  dsaEncryption

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • RFC 3279 §2.3.2
• 1.2.840.10040.4.3 id-dsa-with-sha1 a signature algorithm

  Dotted notation

  1.2.840.10040.4.3

  DER encoding

  06072a8648ce380403

  Category

  a signature algorithm

  OpenSSL short name

  DSA-SHA1

  OpenSSL long name

  dsaWithSHA1

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • RFC 3279 §2.2.2
• 1.2.840.10045 ansi-X9-62 an arc that groups other identifiersPage
  • 1.2.840.10045.1.1 prime-field named elliptic-curve domain parameters
  • 1.2.840.10045.1.2 characteristic-two-field named elliptic-curve domain parametersPage
    • 1.2.840.10045.1.2.3.1 gnBasis named elliptic-curve domain parameters
    • 1.2.840.10045.1.2.3.2 tpBasis named elliptic-curve domain parameters
    • 1.2.840.10045.1.2.3.3 ppBasis named elliptic-curve domain parameters
  • 1.2.840.10045.2.1 id-ecPublicKey a public key typePage
  • 1.2.840.10045.3.0 c-TwoCurve an arc that groups other identifiersPage
    • 1.2.840.10045.3.0.1 c2pnb163v1 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.2 c2pnb163v2 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.3 c2pnb163v3 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.4 c2pnb176w1 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.5 c2tnb191v1 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.6 c2tnb191v2 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.7 c2tnb191v3 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.8 c2onb191v4 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.9 c2onb191v5 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.10 c2pnb208w1 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.11 c2tnb239v1 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.12 c2tnb239v2 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.13 c2tnb239v3 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.14 c2onb239v4 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.15 c2onb239v5 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.16 c2pnb272w1 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.17 c2pnb304w1 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.18 c2tnb359v1 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.19 c2pnb368w1 named elliptic-curve domain parameters
    • 1.2.840.10045.3.0.20 c2tnb431r1 named elliptic-curve domain parameters
  • 1.2.840.10045.3.1 primeCurve an arc that groups other identifiersPage
    • 1.2.840.10045.3.1.1 prime192v1 named elliptic-curve domain parameters
    • 1.2.840.10045.3.1.2 prime192v2 named elliptic-curve domain parameters
    • 1.2.840.10045.3.1.3 prime192v3 named elliptic-curve domain parameters
    • 1.2.840.10045.3.1.4 prime239v1 named elliptic-curve domain parameters
    • 1.2.840.10045.3.1.5 prime239v2 named elliptic-curve domain parameters
    • 1.2.840.10045.3.1.6 prime239v3 named elliptic-curve domain parameters
    • 1.2.840.10045.3.1.7 prime256v1 named elliptic-curve domain parametersPage
  • 1.2.840.10045.4.1 ecdsa-with-SHA1 a signature algorithm
  • 1.2.840.10045.4.3 ecdsa-with-SHA2 an arc that groups other identifiersPage
    • 1.2.840.10045.4.3.1 ecdsa-with-SHA224 a signature algorithm
    • 1.2.840.10045.4.3.2 ecdsa-with-SHA256 a signature algorithmPage
    • 1.2.840.10045.4.3.3 ecdsa-with-SHA384 a signature algorithm
    • 1.2.840.10045.4.3.4 ecdsa-with-SHA512 a signature algorithm
• 1.2.840.10046.2.1 dhpublicnumber a public key type

  Dotted notation

  1.2.840.10046.2.1

  DER encoding

  06072a8648ce3e0201

  Category

  a public key type

  Also known as

  X9.42 Diffie-Hellman public key

  OpenSSL short name

  dhpublicnumber

  OpenSSL long name

  X9.42 DH

  Listed by

  the ecdsa.com catalog

  • RFC 3279 §2.3.3
• 1.2.840.113549 rsadsi an arc that groups other identifiersPage
  • 1.2.840.113549.1.1 pkcs-1 an arc that groups other identifiersPage
    • 1.2.840.113549.1.1.1 rsaEncryption a public key typePage
    • 1.2.840.113549.1.1.2 md2WithRSAEncryption a signature algorithm
    • 1.2.840.113549.1.1.3 md4WithRSAEncryption a signature algorithm
    • 1.2.840.113549.1.1.4 md5WithRSAEncryption a signature algorithm
    • 1.2.840.113549.1.1.5 sha1WithRSAEncryption a signature algorithm
    • 1.2.840.113549.1.1.7 id-RSAES-OAEP an asymmetric encryption scheme
    • 1.2.840.113549.1.1.8 id-mgf1 a mask generation function
    • 1.2.840.113549.1.1.9 id-pSpecified an asymmetric encryption scheme
    • 1.2.840.113549.1.1.10 id-RSASSA-PSS a signature algorithm
    • 1.2.840.113549.1.1.11 sha256WithRSAEncryption a signature algorithmPage
    • 1.2.840.113549.1.1.12 sha384WithRSAEncryption a signature algorithm
    • 1.2.840.113549.1.1.13 sha512WithRSAEncryption a signature algorithm
    • 1.2.840.113549.1.1.14 sha224WithRSAEncryption a signature algorithm
    • 1.2.840.113549.1.1.15 sha512-224WithRSAEncryption a signature algorithm
    • 1.2.840.113549.1.1.16 sha512-256WithRSAEncryption a signature algorithm
  • 1.2.840.113549.1.3.1 dhKeyAgreement a key agreement scheme
  • 1.2.840.113549.1.5 pkcs-5 an arc that groups other identifiersPage
    • 1.2.840.113549.1.5.1 pbeWithMD2AndDES-CBC a password-based encryption scheme
    • 1.2.840.113549.1.5.3 pbeWithMD5AndDES-CBC a password-based encryption scheme
    • 1.2.840.113549.1.5.4 pbeWithMD2AndRC2-CBC a password-based encryption scheme
    • 1.2.840.113549.1.5.6 pbeWithMD5AndRC2-CBC a password-based encryption scheme
    • 1.2.840.113549.1.5.10 pbeWithSHA1AndDES-CBC a password-based encryption scheme
    • 1.2.840.113549.1.5.11 pbeWithSHA1AndRC2-CBC a password-based encryption scheme
    • 1.2.840.113549.1.5.12 id-PBKDF2 a key derivation function
    • 1.2.840.113549.1.5.13 id-PBES2 a password-based encryption scheme
    • 1.2.840.113549.1.5.14 id-PBMAC1 a message authentication code
  • 1.2.840.113549.1.7 pkcs-7 an arc that groups other identifiersPage
    • 1.2.840.113549.1.7.1 id-data a CMS content type
    • 1.2.840.113549.1.7.2 id-signedData a CMS content type
    • 1.2.840.113549.1.7.3 id-envelopedData a CMS content type
    • 1.2.840.113549.1.7.4 signedAndEnvelopedData a CMS content type
    • 1.2.840.113549.1.7.5 id-digestedData a CMS content type
    • 1.2.840.113549.1.7.6 id-encryptedData a CMS content type
  • 1.2.840.113549.1.9 pkcs-9 an arc that groups other identifiersPage
    • 1.2.840.113549.1.9.1 emailAddress an attribute type
    • 1.2.840.113549.1.9.2 unstructuredName an attribute type
    • 1.2.840.113549.1.9.3 id-contentType a CMS signed or unsigned attribute
    • 1.2.840.113549.1.9.4 id-messageDigest a CMS signed or unsigned attribute
    • 1.2.840.113549.1.9.5 id-signingTime a CMS signed or unsigned attribute
    • 1.2.840.113549.1.9.6 id-countersignature a CMS signed or unsigned attribute
    • 1.2.840.113549.1.9.7 challengePassword an attribute type
    • 1.2.840.113549.1.9.8 unstructuredAddress an attribute type
    • 1.2.840.113549.1.9.13 pkcs-9-at-signingDescription a CMS signed or unsigned attribute
    • 1.2.840.113549.1.9.14 extensionRequest an attribute type
    • 1.2.840.113549.1.9.15 smimeCapabilities a CMS signed or unsigned attribute
    • 1.2.840.113549.1.9.16 id-smime an arc that groups other identifiersPage
      • 1.2.840.113549.1.9.16.1.0 id-ct-anyContentType a CMS content type
      • 1.2.840.113549.1.9.16.1.1 id-ct-receipt a CMS content type
      • 1.2.840.113549.1.9.16.1.2 id-ct-authData a CMS content type
      • 1.2.840.113549.1.9.16.1.4 id-ct-TSTInfo a CMS content type
      • 1.2.840.113549.1.9.16.1.6 id-ct-contentInfo a CMS content type
      • 1.2.840.113549.1.9.16.1.7 id-ct-DVCSRequestData a CMS content type
      • 1.2.840.113549.1.9.16.1.8 id-ct-DVCSResponseData a CMS content type
      • 1.2.840.113549.1.9.16.1.9 id-ct-compressedData a CMS content type
      • 1.2.840.113549.1.9.16.1.10 id-ct-scvp-certValRequest a CMS content type
      • 1.2.840.113549.1.9.16.1.11 id-ct-scvp-certValResponse a CMS content type
      • 1.2.840.113549.1.9.16.1.12 id-ct-scvp-valPolRequest a CMS content type
      • 1.2.840.113549.1.9.16.1.13 id-ct-scvp-valPolResponse a CMS content type
      • 1.2.840.113549.1.9.16.1.14 id-ct-attrCertEncAttrs a CMS content type
      • 1.2.840.113549.1.9.16.1.16 id-ct-firmwarePackage a CMS content type
      • 1.2.840.113549.1.9.16.1.17 id-ct-firmwareLoadReceipt a CMS content type
      • 1.2.840.113549.1.9.16.1.18 id-ct-firmwareLoadError a CMS content type
      • 1.2.840.113549.1.9.16.1.19 id-ct-contentCollection a CMS content type
      • 1.2.840.113549.1.9.16.1.20 id-ct-contentWithAttrs a CMS content type
      • 1.2.840.113549.1.9.16.1.21 id-ct-encKeyWithID a CMS content type
      • 1.2.840.113549.1.9.16.1.23 id-ct-authEnvelopedData a CMS content type
      • 1.2.840.113549.1.9.16.1.24 id-ct-routeOriginAuthz a CMS content type
      • 1.2.840.113549.1.9.16.1.25 id-ct-KP-sKeyPackage a CMS content type
      • 1.2.840.113549.1.9.16.1.26 id-ct-rpkiManifest a CMS content type
      • 1.2.840.113549.1.9.16.1.27 id-ct-asciiTextWithCRLF a CMS content type
      • 1.2.840.113549.1.9.16.1.28 id-ct-xml a CMS content type
      • 1.2.840.113549.1.9.16.1.29 id-ct-pdf a CMS content type
      • 1.2.840.113549.1.9.16.1.30 id-ct-postscript a CMS content type
      • 1.2.840.113549.1.9.16.1.31 id-ct-timestampedData a CMS content type
      • 1.2.840.113549.1.9.16.1.34 id-ct-trustAnchorList a CMS content type
      • 1.2.840.113549.1.9.16.1.35 id-ct-rpkiGhostbusters a CMS content type
      • 1.2.840.113549.1.9.16.1.36 id-ct-resourceTaggedAttest a CMS content type
      • 1.2.840.113549.1.9.16.1.37 id-ct-utf8TextWithCRLF a CMS content type
      • 1.2.840.113549.1.9.16.1.38 id-ct-htmlWithCRLF a CMS content type
      • 1.2.840.113549.1.9.16.1.39 id-ct-epub a CMS content type
      • 1.2.840.113549.1.9.16.1.40 id-ct-animaJSONVoucher a CMS content type
      • 1.2.840.113549.1.9.16.1.41 id-ct-mudtype a CMS content type
      • 1.2.840.113549.1.9.16.1.42 id-ct-sztpConveyedInfoXML a CMS content type
      • 1.2.840.113549.1.9.16.1.43 id-ct-sztpConveyedInfoJSON a CMS content type
      • 1.2.840.113549.1.9.16.1.44 id-ct-cbor a CMS content type
      • 1.2.840.113549.1.9.16.1.45 id-ct-cborSequence a CMS content type
      • 1.2.840.113549.1.9.16.1.47 id-ct-geofeedCSVwithCRLF a CMS content type
      • 1.2.840.113549.1.9.16.1.48 id-ct-signedChecklist a CMS content type
      • 1.2.840.113549.1.9.16.1.49 id-ct-ASPA a CMS content type
      • 1.2.840.113549.1.9.16.1.50 id-ct-signedTAL a CMS content type
      • 1.2.840.113549.1.9.16.1.51 id-ct-rpkiSignedPrefixList a CMS content type
      • 1.2.840.113549.1.9.16.1.52 id-ct-privateKeyInfo a CMS content type
      • 1.2.840.113549.1.9.16.1.53 id-ct-encrPrivateKeyInfo a CMS content type
      • 1.2.840.113549.1.9.16.1.54 id-ct-rpkiCanonicalCacheRepresentation a CMS content type
      • 1.2.840.113549.1.9.16.1.55 id-ct-rpkiErikIndex a CMS content type
      • 1.2.840.113549.1.9.16.1.56 id-ct-rpkiErikPartition a CMS content type
      • 1.2.840.113549.1.9.16.1.57 id-ct-prefixlenCSVwithCRLF a CMS content type
      • 1.2.840.113549.1.9.16.1.58 id-ct-CDR a CMS content type
      • 1.2.840.113549.1.9.16.1.59 id-ct-rpkiErikSegmentIndex a CMS content type
      • 1.2.840.113549.1.9.16.2.1 id-aa-receiptRequest a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.2 id-aa-securityLabel a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.3 id-aa-mlExpandHistory a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.4 id-aa-contentHint a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.5 id-aa-msgSigDigest a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.7 id-aa-contentIdentifier a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.9 id-aa-equivalentLabels a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.10 id-aa-contentReference a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.11 id-aa-encrypKeyPref a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.12 id-aa-signingCertificate a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.14 id-aa-signatureTimeStampToken a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.15 id-aa-ets-sigPolicyId a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.16 id-aa-ets-commitmentType a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.17 id-aa-ets-signerLocation a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.18 id-aa-ets-signerAttr a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.19 id-aa-ets-otherSigCert a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.20 id-aa-ets-contentTimestamp a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.21 id-aa-ets-CertificateRefs a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.22 id-aa-ets-RevocationRefs a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.23 id-aa-ets-certValues a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.24 id-aa-ets-revocationValues a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.25 id-aa-ets-escTimeStamp a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.26 id-aa-ets-certCRLTimestamp a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.27 id-aa-ets-archiveTimeStamp a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.28 id-aa-signatureType a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.29 id-aa-dvcs-dvc a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.30 id-aa-CEKReference a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.31 id-aa-CEKMaxDecrypts a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.32 id-aa-KEKDerivationAlg a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.34 id-aa-cmc-unsignedData a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.35 id-aa-firmwarePackageID a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.36 id-aa-targetHardwareIDs a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.37 id-aa-decryptKeyID a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.38 id-aa-implCryptoAlgs a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.39 id-aa-wrappedFirmwareKey a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.40 id-aa-communityIdentifiers a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.41 id-aa-fwPkgMessageDigest a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.42 id-aa-firmwarePackageInfo a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.43 id-aa-implCompressAlgs a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.44 id-aa-ets-attrCertificateRefs a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.45 id-aa-ets-attrRevocationRefs a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.46 id-aa-binarySigningTime a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.47 id-aa-signingCertificateV2 a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.48 id-aa-ets-archiveTimeStampV2 a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.49 id-aa-er-internal a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.50 id-aa-er-external a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.51 id-aa-multipleSignatures a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.52 id-aa-cmsAlgorithmProtect a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.53 id-aa-setKeyInformation a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.54 id-aa-asymmDecryptKeyID a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.55 id-aa-secureHeaderFieldsIdentifier a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.56 id-aa-otpChallenge a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.57 id-aa-revocationChallenge a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.58 id-aa-estIdentityLinking a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.59 id-aa-evidence a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.60 id-aa-relatedCertRequest a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.61 id-aa-certificationRequestInfoTemplate a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.2.62 id-aa-extensionReqTemplate a CMS signed or unsigned attribute
      • 1.2.840.113549.1.9.16.3.5 id-alg-ESDH a key agreement scheme
      • 1.2.840.113549.1.9.16.3.6 id-alg-CMS3DESwrap a key wrap algorithm
      • 1.2.840.113549.1.9.16.3.7 id-alg-CMSRC2wrap a key wrap algorithm
      • 1.2.840.113549.1.9.16.3.8 id-alg-zLibCompress a compression algorithm
      • 1.2.840.113549.1.9.16.3.9 id-alg-PWRI-KEK a key wrap algorithm
      • 1.2.840.113549.1.9.16.3.10 id-alg-SSDH a key agreement scheme
      • 1.2.840.113549.1.9.16.3.11 id-alg-HMACwith3DESwrap a key wrap algorithm
      • 1.2.840.113549.1.9.16.3.12 id-alg-HMACwithAESwrap a key wrap algorithm
      • 1.2.840.113549.1.9.16.3.13 id-alg-MD5-XOR-EXPERIMENT a symmetric cipher
      • 1.2.840.113549.1.9.16.3.14 id-alg-rsa-kem a key encapsulation mechanism
      • 1.2.840.113549.1.9.16.3.15 id-alg-authEnc-128 a symmetric cipher
      • 1.2.840.113549.1.9.16.3.16 id-alg-authEnc-256 a symmetric cipher
      • 1.2.840.113549.1.9.16.3.17 id-alg-hss-lms-hashsig a signature algorithm
      • 1.2.840.113549.1.9.16.3.18 id-alg-AEADChaCha20Poly1305 a symmetric cipher
      • 1.2.840.113549.1.9.16.3.19 dhSinglePass-stdDH-hkdf-sha256-scheme a key agreement scheme
      • 1.2.840.113549.1.9.16.3.20 dhSinglePass-stdDH-hkdf-sha384-scheme a key agreement scheme
      • 1.2.840.113549.1.9.16.3.21 dhSinglePass-stdDH-hkdf-sha512-scheme a key agreement scheme
      • 1.2.840.113549.1.9.16.3.22 id-alg-AES-SIV-CMAC-aead-256 a symmetric cipher
      • 1.2.840.113549.1.9.16.3.23 id-alg-AES-SIV-CMAC-aead-384 a symmetric cipher
      • 1.2.840.113549.1.9.16.3.24 id-alg-AES-SIV-CMAC-aead-512 a symmetric cipher
      • 1.2.840.113549.1.9.16.3.25 id-alg-AES-SIV-CMAC-wrap-256 a key wrap algorithm
      • 1.2.840.113549.1.9.16.3.26 id-alg-AES-SIV-CMAC-wrap-384 a key wrap algorithm
      • 1.2.840.113549.1.9.16.3.27 id-alg-AES-SIV-CMAC-wrap-512 a key wrap algorithm
      • 1.2.840.113549.1.9.16.3.28 id-alg-hkdf-with-sha256 a key derivation function
      • 1.2.840.113549.1.9.16.3.29 id-alg-hkdf-with-sha384 a key derivation function
      • 1.2.840.113549.1.9.16.3.30 id-alg-hkdf-with-sha512 a key derivation function
      • 1.2.840.113549.1.9.16.3.31 id-alg-cek-hkdf-sha256 a key derivation function
      • 1.2.840.113549.1.9.16.3.32 id-alg-hkdf-with-sha3-224 a key derivation function
      • 1.2.840.113549.1.9.16.3.33 id-alg-hkdf-with-sha3-256 a key derivation function
      • 1.2.840.113549.1.9.16.3.34 id-alg-hkdf-with-sha3-384 a key derivation function
      • 1.2.840.113549.1.9.16.3.35 id-alg-hkdf-with-sha3-512 a key derivation function
      • 1.2.840.113549.1.9.16.6.1 id-cti-ets-proofOfOrigin a signature commitment type
      • 1.2.840.113549.1.9.16.6.2 id-cti-ets-proofOfReceipt a signature commitment type
      • 1.2.840.113549.1.9.16.6.3 id-cti-ets-proofOfDelivery a signature commitment type
      • 1.2.840.113549.1.9.16.6.4 id-cti-ets-proofOfSender a signature commitment type
      • 1.2.840.113549.1.9.16.6.5 id-cti-ets-proofOfApproval a signature commitment type
      • 1.2.840.113549.1.9.16.6.6 id-cti-ets-proofOfCreation a signature commitment type
      • 1.2.840.113549.1.9.16.13.3 id-ori-kem a key encapsulation mechanism
    • 1.2.840.113549.1.9.20 friendlyName an attribute type
    • 1.2.840.113549.1.9.21 localKeyID an attribute type
    • 1.2.840.113549.1.9.22.1 x509Certificate a PKCS #12 certificate or CRL type
    • 1.2.840.113549.1.9.22.2 sdsiCertificate a PKCS #12 certificate or CRL type
    • 1.2.840.113549.1.9.23.1 x509CRL a PKCS #12 certificate or CRL type
    • 1.2.840.113549.1.9.25.1 pkcs-9-at-pkcs15Token an attribute type
    • 1.2.840.113549.1.9.25.2 pkcs-9-at-encryptedPrivateKeyInfo an attribute type
    • 1.2.840.113549.1.9.25.3 pkcs-9-at-randomNonce a CMS signed or unsigned attribute
    • 1.2.840.113549.1.9.25.4 pkcs-9-at-sequenceNumber a CMS signed or unsigned attribute
    • 1.2.840.113549.1.9.25.5 pkcs-9-at-pkcs7PDU an attribute type
    • 1.2.840.113549.1.9.52 id-aa-CMSAlgorithmProtection a CMS signed or unsigned attribute
  • 1.2.840.113549.1.12 pkcs-12 an arc that groups other identifiersPage
    • 1.2.840.113549.1.12.1.1 pbeWithSHAAnd128BitRC4 a password-based encryption scheme
    • 1.2.840.113549.1.12.1.2 pbeWithSHAAnd40BitRC4 a password-based encryption scheme
    • 1.2.840.113549.1.12.1.3 pbeWithSHAAnd3-KeyTripleDES-CBC a password-based encryption scheme
    • 1.2.840.113549.1.12.1.4 pbeWithSHAAnd2-KeyTripleDES-CBC a password-based encryption scheme
    • 1.2.840.113549.1.12.1.5 pbeWithSHAAnd128BitRC2-CBC a password-based encryption scheme
    • 1.2.840.113549.1.12.1.6 pbewithSHAAnd40BitRC2-CBC a password-based encryption scheme
    • 1.2.840.113549.1.12.10.1.1 keyBag a PKCS #12 bag type
    • 1.2.840.113549.1.12.10.1.2 pkcs8ShroudedKeyBag a PKCS #12 bag type
    • 1.2.840.113549.1.12.10.1.3 certBag a PKCS #12 bag type
    • 1.2.840.113549.1.12.10.1.4 crlBag a PKCS #12 bag type
    • 1.2.840.113549.1.12.10.1.5 secretBag a PKCS #12 bag type
    • 1.2.840.113549.1.12.10.1.6 safeContentsBag a PKCS #12 bag type
  • 1.2.840.113549.2.2 id-md2 a hash function
  • 1.2.840.113549.2.4 id-md4 a hash function
  • 1.2.840.113549.2.5 id-md5 a hash function
  • 1.2.840.113549.2.7 id-hmacWithSHA1 a message authentication code
  • 1.2.840.113549.2.8 id-hmacWithSHA224 a message authentication code
  • 1.2.840.113549.2.9 id-hmacWithSHA256 a message authentication code
  • 1.2.840.113549.2.10 id-hmacWithSHA384 a message authentication code
  • 1.2.840.113549.2.11 id-hmacWithSHA512 a message authentication code
  • 1.2.840.113549.2.12 id-hmacWithSHA512-224 a message authentication code
  • 1.2.840.113549.2.13 id-hmacWithSHA512-256 a message authentication code
  • 1.2.840.113549.3.2 rc2CBC a symmetric cipher
  • 1.2.840.113549.3.7 des-EDE3-CBC a symmetric cipher
• 1.2.840.113583.1.1.8 adbe-revocationInfoArchival a CMS signed or unsigned attribute

  Dotted notation

  1.2.840.113583.1.1.8

  DER encoding

  06092a864886f72f010108

  Category

  a CMS signed or unsigned attribute

  Also known as

  Adobe RevocationInfoArchival

  Listed by

  the ecdsa.com catalog

  • Adobe Acrobat Digital Signature Guide: OIDs and certificates
• 1.2.840.113583.1.1.9.1 adbe-timestamp a certificate or CRL extension

  Dotted notation

  1.2.840.113583.1.1.9.1

  DER encoding

  060a2a864886f72f01010901

  Category

  a certificate or CRL extension

  Also known as

  Adobe time-stamp extension

  Listed by

  the ecdsa.com catalog

  • Adobe Acrobat Digital Signature Guide: OIDs and certificates
• 1.2.840.113583.1.1.9.2 adbe-archiveRevInfo a certificate or CRL extension

  Dotted notation

  1.2.840.113583.1.1.9.2

  DER encoding

  060a2a864886f72f01010902

  Category

  a certificate or CRL extension

  Also known as

  Adobe archiveRevInfo extension

  Listed by

  the ecdsa.com catalog

  • Adobe Acrobat Digital Signature Guide: OIDs and certificates
• 1.2.840.113635.100.8.2 apple-anonymous-attestation-nonce a hardware or platform attestation field

  Dotted notation

  1.2.840.113635.100.8.2

  DER encoding

  06092a864886f763640802

  Category

  a hardware or platform attestation field

  Also known as

  Apple Anonymous Attestation

  Listed by

  the ecdsa.com catalog

  • W3C WebAuthn Level 3 §8.8
• 1.3.6.1.4.1.311 microsoft an arc that groups other identifiersPage
  • 1.3.6.1.4.1.311.2.1.4 SPC_INDIRECT_DATA_OBJID a CMS content type
  • 1.3.6.1.4.1.311.2.1.10 SPC_SP_AGENCY_INFO_OBJID a CMS signed or unsigned attribute
  • 1.3.6.1.4.1.311.2.1.11 SPC_STATEMENT_TYPE_OBJID a CMS signed or unsigned attribute
  • 1.3.6.1.4.1.311.2.1.12 SPC_SP_OPUS_INFO_OBJID a CMS signed or unsigned attribute
  • 1.3.6.1.4.1.311.2.1.14 SPC_CERT_EXTENSIONS_OBJID an attribute type
  • 1.3.6.1.4.1.311.2.1.15 SPC_PE_IMAGE_DATA_OBJID a CMS content type
  • 1.3.6.1.4.1.311.2.1.18 SPC_RAW_FILE_DATA_OBJID a CMS content type
  • 1.3.6.1.4.1.311.2.1.19 SPC_STRUCTURED_STORAGE_DATA_OBJID a CMS content type
  • 1.3.6.1.4.1.311.2.1.20 SPC_JAVA_CLASS_DATA_OBJID a CMS content type
  • 1.3.6.1.4.1.311.2.1.21 SPC_INDIVIDUAL_SP_KEY_PURPOSE_OBJID an extended key usage
  • 1.3.6.1.4.1.311.2.1.22 SPC_COMMERCIAL_SP_KEY_PURPOSE_OBJID an extended key usage
  • 1.3.6.1.4.1.311.2.1.25 SPC_CAB_DATA_OBJID a CMS content type
  • 1.3.6.1.4.1.311.2.1.26 SPC_MINIMAL_CRITERIA_OBJID a CMS signed or unsigned attribute
  • 1.3.6.1.4.1.311.2.1.27 SPC_FINANCIAL_CRITERIA_OBJID a CMS signed or unsigned attribute
  • 1.3.6.1.4.1.311.2.1.28 SPC_LINK_OBJID a CMS content type
  • 1.3.6.1.4.1.311.2.1.30 SPC_SIGINFO_OBJID a CMS content type
  • 1.3.6.1.4.1.311.2.4.1 szOID_NESTED_SIGNATURE a CMS signed or unsigned attribute
  • 1.3.6.1.4.1.311.3.3.1 szOID_RFC3161_counterSign a CMS signed or unsigned attribute
  • 1.3.6.1.4.1.311.10.1 szOID_CTL a CMS content type
  • 1.3.6.1.4.1.311.10.3.1 szOID_KP_CTL_USAGE_SIGNING an extended key usage
  • 1.3.6.1.4.1.311.10.3.2 szOID_KP_TIME_STAMP_SIGNING an extended key usage
  • 1.3.6.1.4.1.311.10.3.3 szOID_SERVER_GATED_CRYPTO an extended key usage
  • 1.3.6.1.4.1.311.10.3.4 szOID_EFS_CRYPTO an extended key usage
    • 1.3.6.1.4.1.311.10.3.4.1 szOID_EFS_RECOVERY an extended key usage
  • 1.3.6.1.4.1.311.10.3.5 szOID_WHQL_CRYPTO an extended key usage
  • 1.3.6.1.4.1.311.10.3.6 szOID_NT5_CRYPTO an extended key usage
  • 1.3.6.1.4.1.311.10.3.7 szOID_OEM_WHQL_CRYPTO an extended key usage
  • 1.3.6.1.4.1.311.10.3.8 szOID_EMBEDDED_NT_CRYPTO an extended key usage
  • 1.3.6.1.4.1.311.10.3.9 szOID_ROOT_LIST_SIGNER an extended key usage
  • 1.3.6.1.4.1.311.10.3.10 szOID_KP_QUALIFIED_SUBORDINATION an extended key usage
  • 1.3.6.1.4.1.311.10.3.11 szOID_KP_KEY_RECOVERY an extended key usage
  • 1.3.6.1.4.1.311.10.3.12 szOID_KP_DOCUMENT_SIGNING an extended key usage
  • 1.3.6.1.4.1.311.10.3.13 szOID_KP_LIFETIME_SIGNING an extended key usage
  • 1.3.6.1.4.1.311.10.5.1 szOID_DRM an extended key usage
  • 1.3.6.1.4.1.311.10.6.1 szOID_LICENSES an extended key usage
  • 1.3.6.1.4.1.311.10.6.2 szOID_LICENSE_SERVER an extended key usage
  • 1.3.6.1.4.1.311.10.12.1 szOID_ANY_APPLICATION_POLICY an extended key usage
  • 1.3.6.1.4.1.311.13.1 szOID_RENEWAL_CERTIFICATE an attribute type
  • 1.3.6.1.4.1.311.13.2.1 szOID_ENROLLMENT_NAME_VALUE_PAIR an attribute type
  • 1.3.6.1.4.1.311.13.2.2 szOID_ENROLLMENT_CSP_PROVIDER an attribute type
  • 1.3.6.1.4.1.311.13.2.3 szOID_OS_VERSION an attribute type
  • 1.3.6.1.4.1.311.17.1 szOID_PKCS_12_KEY_PROVIDER_NAME_ATTR an attribute type
  • 1.3.6.1.4.1.311.17.2 szOID_LOCAL_MACHINE_KEYSET an attribute type
  • 1.3.6.1.4.1.311.20.1 szOID_AUTO_ENROLL_CTL_USAGE an extended key usage
  • 1.3.6.1.4.1.311.20.2 szOID_ENROLL_CERTTYPE_EXTENSION a certificate or CRL extensionPage
    • 1.3.6.1.4.1.311.20.2.1 szOID_ENROLLMENT_AGENT an extended key usage
    • 1.3.6.1.4.1.311.20.2.2 szOID_KP_SMARTCARD_LOGON an extended key usage
    • 1.3.6.1.4.1.311.20.2.3 szOID_NT_PRINCIPAL_NAME an otherName form for subjectAltName
  • 1.3.6.1.4.1.311.20.3 szOID_CERT_MANIFOLD a certificate or CRL extension
  • 1.3.6.1.4.1.311.21.1 szOID_CERTSRV_CA_VERSION a certificate or CRL extension
  • 1.3.6.1.4.1.311.21.2 szOID_CERTSRV_PREVIOUSCERT_HASH a certificate or CRL extension
  • 1.3.6.1.4.1.311.21.3 szOID_CRL_VIRTUAL_BASE a certificate or CRL extension
  • 1.3.6.1.4.1.311.21.4 szOID_CRL_NEXT_PUBLISH a certificate or CRL extension
  • 1.3.6.1.4.1.311.21.5 szOID_KP_CA_EXCHANGE an extended key usage
  • 1.3.6.1.4.1.311.21.6 szOID_KP_KEY_RECOVERY_AGENT an extended key usage
  • 1.3.6.1.4.1.311.21.7 szOID_CERTIFICATE_TEMPLATE a certificate or CRL extension
  • 1.3.6.1.4.1.311.21.10 szOID_APPLICATION_CERT_POLICIES a certificate or CRL extension
  • 1.3.6.1.4.1.311.21.20 szOID_REQUEST_CLIENT_INFO an attribute type
  • 1.3.6.1.4.1.311.25.2 szOID_NTDS_CA_SECURITY_EXT a certificate or CRL extension
    • 1.3.6.1.4.1.311.25.2.1 szOID_NTDS_OBJECTSID an otherName form for subjectAltName
  • 1.3.6.1.4.1.311.60.2.1.1 jurisdictionOfIncorporationLocalityName an attribute type
  • 1.3.6.1.4.1.311.60.2.1.2 jurisdictionOfIncorporationStateOrProvinceName an attribute type
  • 1.3.6.1.4.1.311.60.2.1.3 jurisdictionOfIncorporationCountryName an attribute type
• 1.3.6.1.4.1.4146.1.1 GlobalSign nv-sa a certificate policy

  Dotted notation

  1.3.6.1.4.1.4146.1.1

  DER encoding

  06092b06010401a0320101

  Category

  a certificate policy

  EV policy of

  GlobalSign nv-sa

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.4146.1.2 GlobalSign nv-sa a certificate policy

  Dotted notation

  1.3.6.1.4.1.4146.1.2

  DER encoding

  06092b06010401a0320102

  Category

  a certificate policy

  EV policy of

  GlobalSign nv-sa

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.4146.10.1.1 GlobalSign nv-sa a certificate policy

  Dotted notation

  1.3.6.1.4.1.4146.10.1.1

  DER encoding

  060a2b06010401a0320a0101

  Category

  a certificate policy

  EV policy of

  GlobalSign nv-sa

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.4788.2.202.1 D-TRUST a certificate policy

  Dotted notation

  1.3.6.1.4.1.4788.2.202.1

  DER encoding

  060b2b06010401a53402814a01

  Category

  a certificate policy

  EV policy of

  D-TRUST

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.6449.1.2.1.5.1 Sectigo a certificate policy

  Dotted notation

  1.3.6.1.4.1.6449.1.2.1.5.1

  DER encoding

  060c2b06010401b2310102010501

  Category

  a certificate policy

  EV policy of

  Sectigo

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.7879.13.24.1 Deutsche Telekom Security GmbH a certificate policy

  Dotted notation

  1.3.6.1.4.1.7879.13.24.1

  DER encoding

  060a2b06010401bd470d1801

  Category

  a certificate policy

  EV policy of

  Deutsche Telekom Security GmbH

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.8024.0.2.100.1.2 DigiCert a certificate policy

  Dotted notation

  1.3.6.1.4.1.8024.0.2.100.1.2

  DER encoding

  060c2b06010401be580002640102

  Category

  a certificate policy

  EV policy of

  DigiCert

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.11129 google an arc that groups other identifiersPage
  • 1.3.6.1.4.1.11129.2.1.17 android-key-attestation a hardware or platform attestation field
  • 1.3.6.1.4.1.11129.2.4.2 embedded-scts a certificate or CRL extensionPage
  • 1.3.6.1.4.1.11129.2.4.3 precertificate-poison a certificate or CRL extension
  • 1.3.6.1.4.1.11129.2.4.4 precertificate-signing an extended key usage
  • 1.3.6.1.4.1.11129.2.4.5 ocsp-scts a certificate or CRL extension
• 1.3.6.1.4.1.11591.4.11 id-scrypt a key derivation function

  Dotted notation

  1.3.6.1.4.1.11591.4.11

  DER encoding

  06092b06010401da47040b

  Category

  a key derivation function

  Also known as

  scrypt

  OpenSSL short name

  id-scrypt

  OpenSSL long name

  scrypt

  Listed by

  the ecdsa.com catalog

  • RFC 7914 §7
• 1.3.6.1.4.1.13177.10.1.3.10 Autoridad de Certificacion Firmaprofesional a certificate policy

  Dotted notation

  1.3.6.1.4.1.13177.10.1.3.10

  DER encoding

  060b2b06010401e6790a01030a

  Category

  a certificate policy

  EV policy of

  Autoridad de Certificacion Firmaprofesional

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.14777.6.1.1 Izenpe S.A. a certificate policy

  Dotted notation

  1.3.6.1.4.1.14777.6.1.1

  DER encoding

  060a2b06010401f339060101

  Category

  a certificate policy

  EV policy of

  Izenpe S.A.

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.14777.6.1.2 Izenpe S.A. a certificate policy

  Dotted notation

  1.3.6.1.4.1.14777.6.1.2

  DER encoding

  060a2b06010401f339060102

  Category

  a certificate policy

  EV policy of

  Izenpe S.A.

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.26513.1.1.1.4 HARICA a certificate policy

  Dotted notation

  1.3.6.1.4.1.26513.1.1.1.4

  DER encoding

  060c2b0601040181cf1101010104

  Category

  a certificate policy

  EV policy of

  HARICA

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.26513.1.1.4 HARICA a certificate policy

  Dotted notation

  1.3.6.1.4.1.26513.1.1.4

  DER encoding

  060b2b0601040181cf11010104

  Category

  a certificate policy

  EV policy of

  HARICA

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.26513.1.3.3 HARICA a certificate policy

  Dotted notation

  1.3.6.1.4.1.26513.1.3.3

  DER encoding

  060b2b0601040181cf11010303

  Category

  a certificate policy

  EV policy of

  HARICA

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.34697.2.1 Entrust a certificate policy

  Dotted notation

  1.3.6.1.4.1.34697.2.1

  DER encoding

  060a2b06010401828f090201

  Category

  a certificate policy

  EV policy of

  Entrust

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.34697.2.2 Entrust a certificate policy

  Dotted notation

  1.3.6.1.4.1.34697.2.2

  DER encoding

  060a2b06010401828f090202

  Category

  a certificate policy

  EV policy of

  Entrust

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.34697.2.3 Entrust a certificate policy

  Dotted notation

  1.3.6.1.4.1.34697.2.3

  DER encoding

  060a2b06010401828f090203

  Category

  a certificate policy

  EV policy of

  Entrust

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.34697.2.4 Entrust a certificate policy

  Dotted notation

  1.3.6.1.4.1.34697.2.4

  DER encoding

  060a2b06010401828f090204

  Category

  a certificate policy

  EV policy of

  Entrust

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.38064.1.3.1.4 SSL.com a certificate policy

  Dotted notation

  1.3.6.1.4.1.38064.1.3.1.4

  DER encoding

  060c2b0601040182a93001030104

  Category

  a certificate policy

  EV policy of

  SSL.com

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.38064.1.3.3.2 SSL.com a certificate policy

  Dotted notation

  1.3.6.1.4.1.38064.1.3.3.2

  DER encoding

  060c2b0601040182a93001030302

  Category

  a certificate policy

  EV policy of

  SSL.com

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.40869.1.1.22.3 Taiwan-CA Inc. (TWCA) a certificate policy

  Dotted notation

  1.3.6.1.4.1.40869.1.1.22.3

  DER encoding

  060c2b0601040182bf2501011603

  Category

  a certificate policy

  EV policy of

  Taiwan-CA Inc. (TWCA)

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 1.3.6.1.4.1.41482.3.3 yubico-piv-firmware-version a hardware or platform attestation field

  Dotted notation

  1.3.6.1.4.1.41482.3.3

  DER encoding

  060a2b0601040182c40a0303

  Category

  a hardware or platform attestation field

  Also known as

  YubiKey firmware version

  Listed by

  the ecdsa.com catalog

  • Yubico PIV attestation
• 1.3.6.1.4.1.41482.3.7 yubico-piv-serial-number a hardware or platform attestation field

  Dotted notation

  1.3.6.1.4.1.41482.3.7

  DER encoding

  060a2b0601040182c40a0307

  Category

  a hardware or platform attestation field

  Also known as

  YubiKey serial number

  Listed by

  the ecdsa.com catalog

  • Yubico PIV attestation
• 1.3.6.1.4.1.41482.3.8 yubico-piv-policy a hardware or platform attestation field

  Dotted notation

  1.3.6.1.4.1.41482.3.8

  DER encoding

  060a2b0601040182c40a0308

  Category

  a hardware or platform attestation field

  Also known as

  YubiKey PIN and touch policy

  Listed by

  the ecdsa.com catalog

  • Yubico PIV attestation
• 1.3.6.1.4.1.41482.3.9 yubico-piv-form-factor a hardware or platform attestation field

  Dotted notation

  1.3.6.1.4.1.41482.3.9

  DER encoding

  060a2b0601040182c40a0309

  Category

  a hardware or platform attestation field

  Also known as

  YubiKey form factor

  Listed by

  the ecdsa.com catalog

  • Yubico PIV attestation
• 1.3.6.1.4.1.45724.1.1.4 id-fido-gen-ce-aaguid a hardware or platform attestation field

  Dotted notation

  1.3.6.1.4.1.45724.1.1.4

  DER encoding

  060b2b0601040182e51c010104

  Category

  a hardware or platform attestation field

  Also known as

  FIDO AAGUID extension

  Listed by

  the ecdsa.com catalog

  • W3C WebAuthn Level 3 §8.2.1
• 1.3.6.1.4.1.45724.2.1.1 id-fido-u2f-ce-transports a hardware or platform attestation field

  Dotted notation

  1.3.6.1.4.1.45724.2.1.1

  DER encoding

  060b2b0601040182e51c020101

  Category

  a hardware or platform attestation field

  Also known as

  fidoU2FTransports

  Listed by

  the ecdsa.com catalog

  • FIDO U2F Authenticator Transports Extension v1.2
• 1.3.6.1.4.1.57264.1.1 fulcio-issuer a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.1

  DER encoding

  060a2b0601040183bf300101

  Category

  a certificate or CRL extension

  Also known as

  Sigstore Issuer (V1)

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.2 fulcio-github-workflow-trigger a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.2

  DER encoding

  060a2b0601040183bf300102

  Category

  a certificate or CRL extension

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.3 fulcio-github-workflow-sha a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.3

  DER encoding

  060a2b0601040183bf300103

  Category

  a certificate or CRL extension

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.4 fulcio-github-workflow-name a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.4

  DER encoding

  060a2b0601040183bf300104

  Category

  a certificate or CRL extension

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.5 fulcio-github-workflow-repository a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.5

  DER encoding

  060a2b0601040183bf300105

  Category

  a certificate or CRL extension

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.6 fulcio-github-workflow-ref a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.6

  DER encoding

  060a2b0601040183bf300106

  Category

  a certificate or CRL extension

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.7 fulcio-othername-san an otherName form for subjectAltName

  Dotted notation

  1.3.6.1.4.1.57264.1.7

  DER encoding

  060a2b0601040183bf300107

  Category

  an otherName form for subjectAltName

  Also known as

  Sigstore OtherName SAN

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.8 fulcio-issuer-v2 a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.8

  DER encoding

  060a2b0601040183bf300108

  Category

  a certificate or CRL extension

  Also known as

  Sigstore Issuer (V2)

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.9 fulcio-build-signer-uri a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.9

  DER encoding

  060a2b0601040183bf300109

  Category

  a certificate or CRL extension

  Also known as

  Build Signer URI

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.10 fulcio-build-signer-digest a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.10

  DER encoding

  060a2b0601040183bf30010a

  Category

  a certificate or CRL extension

  Also known as

  Build Signer Digest

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.11 fulcio-runner-environment a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.11

  DER encoding

  060a2b0601040183bf30010b

  Category

  a certificate or CRL extension

  Also known as

  Runner Environment

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.12 fulcio-source-repository-uri a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.12

  DER encoding

  060a2b0601040183bf30010c

  Category

  a certificate or CRL extension

  Also known as

  Source Repository URI

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.13 fulcio-source-repository-digest a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.13

  DER encoding

  060a2b0601040183bf30010d

  Category

  a certificate or CRL extension

  Also known as

  Source Repository Digest

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.14 fulcio-source-repository-ref a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.14

  DER encoding

  060a2b0601040183bf30010e

  Category

  a certificate or CRL extension

  Also known as

  Source Repository Ref

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.15 fulcio-source-repository-identifier a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.15

  DER encoding

  060a2b0601040183bf30010f

  Category

  a certificate or CRL extension

  Also known as

  Source Repository Identifier

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.16 fulcio-source-repository-owner-uri a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.16

  DER encoding

  060a2b0601040183bf300110

  Category

  a certificate or CRL extension

  Also known as

  Source Repository Owner URI

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.17 fulcio-source-repository-owner-identifier a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.17

  DER encoding

  060a2b0601040183bf300111

  Category

  a certificate or CRL extension

  Also known as

  Source Repository Owner Identifier

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.18 fulcio-build-config-uri a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.18

  DER encoding

  060a2b0601040183bf300112

  Category

  a certificate or CRL extension

  Also known as

  Build Config URI

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.19 fulcio-build-config-digest a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.19

  DER encoding

  060a2b0601040183bf300113

  Category

  a certificate or CRL extension

  Also known as

  Build Config Digest

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.20 fulcio-build-trigger a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.20

  DER encoding

  060a2b0601040183bf300114

  Category

  a certificate or CRL extension

  Also known as

  Build Trigger

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.21 fulcio-run-invocation-uri a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.21

  DER encoding

  060a2b0601040183bf300115

  Category

  a certificate or CRL extension

  Also known as

  Run Invocation URI

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.22 fulcio-source-repository-visibility a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.22

  DER encoding

  060a2b0601040183bf300116

  Category

  a certificate or CRL extension

  Also known as

  Source Repository Visibility At Signing

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.23 fulcio-deployment-environment a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.23

  DER encoding

  060a2b0601040183bf300117

  Category

  a certificate or CRL extension

  Also known as

  Deployment Environment

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.1.24 fulcio-token-subject a certificate or CRL extension

  Dotted notation

  1.3.6.1.4.1.57264.1.24

  DER encoding

  060a2b0601040183bf300118

  Category

  a certificate or CRL extension

  Also known as

  Token Subject

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.4.1.57264.2 sigstore-tsa-policy a certificate policy

  Dotted notation

  1.3.6.1.4.1.57264.2

  DER encoding

  06092b0601040183bf3002

  Category

  a certificate policy

  Also known as

  Sigstore Timestamp Authority policy

  Listed by

  the ecdsa.com catalog

  • Sigstore Fulcio OID information
• 1.3.6.1.5.2.2 id-pkinit-san an otherName form for subjectAltName

  Dotted notation

  1.3.6.1.5.2.2

  DER encoding

  06062b0601050202

  Category

  an otherName form for subjectAltName

  Also known as

  KRB5PrincipalName

  Listed by

  the ecdsa.com catalog

  • RFC 4556 §3.2.2
• 1.3.6.1.5.2.3.4 id-pkinit-KPClientAuth an extended key usage

  Dotted notation

  1.3.6.1.5.2.3.4

  DER encoding

  06072b060105020304

  Category

  an extended key usage

  Also known as

  pkInitClientAuth, PKINIT Client Auth

  OpenSSL short name

  pkInitClientAuth

  OpenSSL long name

  PKINIT Client Auth

  Listed by

  the ecdsa.com catalog

  • RFC 4556 §3.2.2
• 1.3.6.1.5.2.3.5 id-pkinit-KPKdc an extended key usage

  Dotted notation

  1.3.6.1.5.2.3.5

  DER encoding

  06072b060105020305

  Category

  an extended key usage

  Also known as

  pkInitKDC

  OpenSSL short name

  pkInitKDC

  OpenSSL long name

  Signing KDC Response

  Listed by

  the ecdsa.com catalog

  • RFC 4556 §3.2.4
• 1.3.6.1.5.5.7 id-pkix an arc that groups other identifiersPage
  • 1.3.6.1.5.5.7.1 id-pe an arc that groups other identifiersPage
    • 1.3.6.1.5.5.7.1.1 id-pe-authorityInfoAccess a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.2 id-pe-biometricInfo a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.3 id-pe-qcStatements a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.4 id-pe-ac-auditIdentity a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.6 id-pe-aaControls a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.7 id-pe-ipAddrBlocks a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.8 id-pe-autonomousSysIds a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.10 id-pe-ac-proxying a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.11 id-pe-subjectInfoAccess a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.12 id-pe-logotype a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.13 id-pe-wlanSSID a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.14 id-pe-proxyCertInfo a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.15 id-pe-acPolicies a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.16 id-pe-warranty a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.18 id-pe-cmsContentConstraints a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.19 id-pe-otherCerts a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.20 id-pe-wrappedApexContinKey a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.21 id-pe-clearanceConstraints a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.23 id-pe-nsa a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.24 id-pe-tlsfeature a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.25 id-pe-mud-url a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.26 id-pe-TNAuthList a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.27 id-pe-JWTClaimConstraints a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.28 id-pe-ipAddrBlocks-v2 a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.29 id-pe-autonomousSysIds-v2 a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.30 id-pe-mudsigner a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.31 id-pe-acmeIdentifier a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.32 id-pe-masa-url a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.33 id-pe-eJWTClaimConstraints a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.34 id-pe-nftypes a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.35 id-pe-cmw a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.36 id-pe-relatedCert a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.37 id-pe-signedDocumentBinding a certificate or CRL extension
    • 1.3.6.1.5.5.7.1.38 id-pe-mtcCertificationAuthority-SHA256 a certificate or CRL extension
  • 1.3.6.1.5.5.7.2 id-qt an arc that groups other identifiersPage
    • 1.3.6.1.5.5.7.2.1 id-qt-cps a policy qualifier
    • 1.3.6.1.5.5.7.2.2 id-qt-unotice a policy qualifier
    • 1.3.6.1.5.5.7.2.4 id-qt-acps a policy qualifier
    • 1.3.6.1.5.5.7.2.5 id-qt-acunotice a policy qualifier
  • 1.3.6.1.5.5.7.3 id-kp an arc that groups other identifiersPage
    • 1.3.6.1.5.5.7.3.1 id-kp-serverAuth an extended key usagePage
    • 1.3.6.1.5.5.7.3.2 id-kp-clientAuth an extended key usage
    • 1.3.6.1.5.5.7.3.3 id-kp-codeSigning an extended key usage
    • 1.3.6.1.5.5.7.3.4 id-kp-emailProtection an extended key usage
    • 1.3.6.1.5.5.7.3.8 id-kp-timeStamping an extended key usage
    • 1.3.6.1.5.5.7.3.9 id-kp-OCSPSigning an extended key usage
    • 1.3.6.1.5.5.7.3.10 id-kp-dvcs an extended key usage
    • 1.3.6.1.5.5.7.3.13 id-kp-eapOverPPP an extended key usage
    • 1.3.6.1.5.5.7.3.14 id-kp-eapOverLAN an extended key usage
    • 1.3.6.1.5.5.7.3.15 id-kp-scvpServer an extended key usage
    • 1.3.6.1.5.5.7.3.16 id-kp-scvpClient an extended key usage
    • 1.3.6.1.5.5.7.3.17 id-kp-ipsecIKE an extended key usage
    • 1.3.6.1.5.5.7.3.18 id-kp-capwapAC an extended key usage
    • 1.3.6.1.5.5.7.3.19 id-kp-capwapWTP an extended key usage
    • 1.3.6.1.5.5.7.3.20 id-kp-sipDomain an extended key usage
    • 1.3.6.1.5.5.7.3.21 id-kp-secureShellClient an extended key usage
    • 1.3.6.1.5.5.7.3.22 id-kp-secureShellServer an extended key usage
    • 1.3.6.1.5.5.7.3.23 id-kp-sendRouter an extended key usage
    • 1.3.6.1.5.5.7.3.24 id-kp-sendProxiedRouter an extended key usage
    • 1.3.6.1.5.5.7.3.25 id-kp-sendOwner an extended key usage
    • 1.3.6.1.5.5.7.3.26 id-kp-sendProxiedOwner an extended key usage
    • 1.3.6.1.5.5.7.3.27 id-kp-cmcCA an extended key usage
    • 1.3.6.1.5.5.7.3.28 id-kp-cmcRA an extended key usage
    • 1.3.6.1.5.5.7.3.29 id-kp-cmcArchive an extended key usage
    • 1.3.6.1.5.5.7.3.30 id-kp-bgpsec-router an extended key usage
    • 1.3.6.1.5.5.7.3.31 id-kp-BrandIndicatorforMessageIdentification an extended key usage
    • 1.3.6.1.5.5.7.3.32 id-kp-cmKGA an extended key usage
    • 1.3.6.1.5.5.7.3.33 id-kp-rpcTLSClient an extended key usage
    • 1.3.6.1.5.5.7.3.34 id-kp-rpcTLSServer an extended key usage
    • 1.3.6.1.5.5.7.3.35 id-kp-bundleSecurity an extended key usage
    • 1.3.6.1.5.5.7.3.36 id-kp-documentSigning an extended key usage
    • 1.3.6.1.5.5.7.3.37 id-kp-jwt an extended key usage
    • 1.3.6.1.5.5.7.3.38 id-kp-httpContentEncrypt an extended key usage
    • 1.3.6.1.5.5.7.3.39 id-kp-oauthAccessTokenSigning an extended key usage
    • 1.3.6.1.5.5.7.3.40 id-kp-imUri an extended key usage
    • 1.3.6.1.5.5.7.3.41 id-kp-configSigning an extended key usage
    • 1.3.6.1.5.5.7.3.42 id-kp-trustAnchorConfigSigning an extended key usage
    • 1.3.6.1.5.5.7.3.43 id-kp-updatePackageSigning an extended key usage
    • 1.3.6.1.5.5.7.3.44 id-kp-safetyCommunication an extended key usage
    • 1.3.6.1.5.5.7.3.45 id-kp-oauthStatusSigning an extended key usage
  • 1.3.6.1.5.5.7.6 id-alg an arc that groups other identifiersPage
    • 1.3.6.1.5.5.7.6.2 id-alg-noSignature a signature algorithm
    • 1.3.6.1.5.5.7.6.3 id-alg-dh-sig-hmac-sha1 a signature algorithm
    • 1.3.6.1.5.5.7.6.4 id-alg-dhPop-sha1 a signature algorithm
    • 1.3.6.1.5.5.7.6.5 id-alg-dhPop-sha224 a signature algorithm
    • 1.3.6.1.5.5.7.6.6 id-alg-dhPop-sha256 a signature algorithm
    • 1.3.6.1.5.5.7.6.7 id-alg-dhPop-sha384 a signature algorithm
    • 1.3.6.1.5.5.7.6.8 id-alg-dhPop-sha512 a signature algorithm
    • 1.3.6.1.5.5.7.6.15 id-alg-dhPop-static-sha224-hmac-sha224 a signature algorithm
    • 1.3.6.1.5.5.7.6.16 id-alg-dhPop-static-sha256-hmac-sha256 a signature algorithm
    • 1.3.6.1.5.5.7.6.17 id-alg-dhPop-static-sha384-hmac-sha384 a signature algorithm
    • 1.3.6.1.5.5.7.6.18 id-alg-dhPop-static-sha512-hmac-sha512 a signature algorithm
    • 1.3.6.1.5.5.7.6.25 id-alg-ecdhPop-static-sha224-hmac-sha224 a signature algorithm
    • 1.3.6.1.5.5.7.6.26 id-alg-ecdhPop-static-sha256-hmac-sha256 a signature algorithm
    • 1.3.6.1.5.5.7.6.27 id-alg-ecdhPop-static-sha384-hmac-sha384 a signature algorithm
    • 1.3.6.1.5.5.7.6.28 id-alg-ecdhPop-static-sha512-hmac-sha512 a signature algorithm
    • 1.3.6.1.5.5.7.6.29 id-alg-eccsi-with-sha256 a signature algorithm
    • 1.3.6.1.5.5.7.6.30 id-RSASSA-PSS-SHAKE128 a signature algorithm
    • 1.3.6.1.5.5.7.6.31 id-RSASSA-PSS-SHAKE256 a signature algorithm
    • 1.3.6.1.5.5.7.6.32 id-ecdsa-with-shake128 a signature algorithm
    • 1.3.6.1.5.5.7.6.33 id-ecdsa-with-shake256 a signature algorithm
    • 1.3.6.1.5.5.7.6.34 id-alg-xmss-hashsig a signature algorithm
    • 1.3.6.1.5.5.7.6.35 id-alg-xmssmt-hashsig a signature algorithm
    • 1.3.6.1.5.5.7.6.36 id-alg-unsigned a signature algorithm
    • 1.3.6.1.5.5.7.6.37 id-MLDSA44-RSA2048-PSS-SHA256 a signature algorithm
    • 1.3.6.1.5.5.7.6.38 id-MLDSA44-RSA2048-PKCS15-SHA256 a signature algorithm
    • 1.3.6.1.5.5.7.6.39 id-MLDSA44-Ed25519-SHA512 a signature algorithm
    • 1.3.6.1.5.5.7.6.40 id-MLDSA44-ECDSA-P256-SHA256 a signature algorithm
    • 1.3.6.1.5.5.7.6.41 id-MLDSA65-RSA3072-PSS-SHA512 a signature algorithm
    • 1.3.6.1.5.5.7.6.42 id-MLDSA65-RSA3072-PKCS15-SHA512 a signature algorithm
    • 1.3.6.1.5.5.7.6.43 id-MLDSA65-RSA4096-PSS-SHA512 a signature algorithm
    • 1.3.6.1.5.5.7.6.44 id-MLDSA65-RSA4096-PKCS15-SHA512 a signature algorithm
    • 1.3.6.1.5.5.7.6.45 id-MLDSA65-ECDSA-P256-SHA512 a signature algorithm
    • 1.3.6.1.5.5.7.6.46 id-MLDSA65-ECDSA-P384-SHA512 a signature algorithm
    • 1.3.6.1.5.5.7.6.47 id-MLDSA65-ECDSA-brainpoolP256r1-SHA512 a signature algorithm
    • 1.3.6.1.5.5.7.6.48 id-MLDSA65-Ed25519-SHA512 a signature algorithm
    • 1.3.6.1.5.5.7.6.49 id-MLDSA87-ECDSA-P384-SHA512 a signature algorithm
    • 1.3.6.1.5.5.7.6.50 id-MLDSA87-ECDSA-brainpoolP384r1-SHA512 a signature algorithm
    • 1.3.6.1.5.5.7.6.51 id-MLDSA87-Ed448-SHAKE256 a signature algorithm
    • 1.3.6.1.5.5.7.6.52 id-MLDSA87-RSA3072-PSS-SHA512 a signature algorithm
    • 1.3.6.1.5.5.7.6.53 id-MLDSA87-RSA4096-PSS-SHA512 a signature algorithm
    • 1.3.6.1.5.5.7.6.54 id-MLDSA87-ECDSA-P521-SHA512 a signature algorithm
    • 1.3.6.1.5.5.7.6.55 id-MLKEM768-RSA2048-SHA3-256 a key encapsulation mechanism
    • 1.3.6.1.5.5.7.6.56 id-MLKEM768-RSA3072-SHA3-256 a key encapsulation mechanism
    • 1.3.6.1.5.5.7.6.57 id-MLKEM768-RSA4096-SHA3-256 a key encapsulation mechanism
    • 1.3.6.1.5.5.7.6.58 id-MLKEM768-X25519-SHA3-256 a key encapsulation mechanism
    • 1.3.6.1.5.5.7.6.59 id-MLKEM768-ECDH-P256-SHA3-256 a key encapsulation mechanism
    • 1.3.6.1.5.5.7.6.60 id-MLKEM768-ECDH-P384-SHA3-256 a key encapsulation mechanism
    • 1.3.6.1.5.5.7.6.61 id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 a key encapsulation mechanism
    • 1.3.6.1.5.5.7.6.62 id-MLKEM1024-RSA3072-SHA3-256 a key encapsulation mechanism
    • 1.3.6.1.5.5.7.6.63 id-MLKEM1024-ECDH-P384-SHA3-256 a key encapsulation mechanism
    • 1.3.6.1.5.5.7.6.64 id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 a key encapsulation mechanism
    • 1.3.6.1.5.5.7.6.65 id-MLKEM1024-X448-SHA3-256 a key encapsulation mechanism
    • 1.3.6.1.5.5.7.6.66 id-MLKEM1024-ECDH-P521-SHA3-256 a key encapsulation mechanism
    • 1.3.6.1.5.5.7.6.67 id-alg-mtcProof a signature algorithm
  • 1.3.6.1.5.5.7.8 id-on an arc that groups other identifiersPage
    • 1.3.6.1.5.5.7.8.3 id-on-permanentIdentifier an otherName form for subjectAltName
    • 1.3.6.1.5.5.7.8.4 id-on-hardwareModuleName an otherName form for subjectAltName
    • 1.3.6.1.5.5.7.8.5 id-on-xmppAddr an otherName form for subjectAltName
    • 1.3.6.1.5.5.7.8.6 id-on-SIM an otherName form for subjectAltName
    • 1.3.6.1.5.5.7.8.7 id-on-dnsSRV an otherName form for subjectAltName
    • 1.3.6.1.5.5.7.8.8 id-on-naiRealm an otherName form for subjectAltName
    • 1.3.6.1.5.5.7.8.9 id-on-SmtpUTF8Mailbox an otherName form for subjectAltName
    • 1.3.6.1.5.5.7.8.10 id-on-AcpNodeName an otherName form for subjectAltName
    • 1.3.6.1.5.5.7.8.11 id-on-bundleEID an otherName form for subjectAltName
    • 1.3.6.1.5.5.7.8.12 id-on-MACAddress an otherName form for subjectAltName
  • 1.3.6.1.5.5.7.9.1 id-pda-dateOfBirth an attribute type
  • 1.3.6.1.5.5.7.9.2 id-pda-placeOfBirth an attribute type
  • 1.3.6.1.5.5.7.9.3 id-pda-gender an attribute type
  • 1.3.6.1.5.5.7.9.4 id-pda-countryOfCitizenship an attribute type
  • 1.3.6.1.5.5.7.9.5 id-pda-countryOfResidence an attribute type
  • 1.3.6.1.5.5.7.11.1 id-qcs-pkixQCSyntax-v1 a qualified certificate statement
  • 1.3.6.1.5.5.7.11.2 id-qcs-pkixQCSyntax-v2 a qualified certificate statement
  • 1.3.6.1.5.5.7.48 id-ad an arc that groups other identifiersPage
    • 1.3.6.1.5.5.7.48.1 id-ad-ocsp an access method for AIA or SIAPage
      • 1.3.6.1.5.5.7.48.1.1 id-pkix-ocsp-basic an OCSP extension or response type
      • 1.3.6.1.5.5.7.48.1.2 id-pkix-ocsp-nonce an OCSP extension or response type
      • 1.3.6.1.5.5.7.48.1.3 id-pkix-ocsp-crl an OCSP extension or response type
      • 1.3.6.1.5.5.7.48.1.4 id-pkix-ocsp-response an OCSP extension or response type
      • 1.3.6.1.5.5.7.48.1.5 id-pkix-ocsp-nocheck an OCSP extension or response type
      • 1.3.6.1.5.5.7.48.1.6 id-pkix-ocsp-archive-cutoff an OCSP extension or response type
      • 1.3.6.1.5.5.7.48.1.7 id-pkix-ocsp-service-locator an OCSP extension or response type
      • 1.3.6.1.5.5.7.48.1.8 id-pkix-ocsp-pref-sig-algs an OCSP extension or response type
      • 1.3.6.1.5.5.7.48.1.9 id-pkix-ocsp-extended-revoke an OCSP extension or response type
      • 1.3.6.1.5.5.7.48.1.10 id-pkix-ocsp-stir-tn an OCSP extension or response type
    • 1.3.6.1.5.5.7.48.2 id-ad-caIssuers an access method for AIA or SIA
    • 1.3.6.1.5.5.7.48.3 id-ad-timestamping an access method for AIA or SIA
    • 1.3.6.1.5.5.7.48.4 id-ad-dvcs an access method for AIA or SIA
    • 1.3.6.1.5.5.7.48.5 id-ad-caRepository an access method for AIA or SIA
    • 1.3.6.1.5.5.7.48.6 id-ad-http-certs an access method for AIA or SIA
    • 1.3.6.1.5.5.7.48.7 id-ad-http-crls an access method for AIA or SIA
    • 1.3.6.1.5.5.7.48.10 id-ad-rpkiManifest an access method for AIA or SIA
    • 1.3.6.1.5.5.7.48.11 id-ad-signedObject an access method for AIA or SIA
    • 1.3.6.1.5.5.7.48.12 id-ad-cmc an access method for AIA or SIA
    • 1.3.6.1.5.5.7.48.13 id-ad-rpkiNotify an access method for AIA or SIA
    • 1.3.6.1.5.5.7.48.14 id-ad-stirTNList an access method for AIA or SIA
    • 1.3.6.1.5.5.7.48.15 id-ad-communityDefinition an access method for AIA or SIA
• 1.3.6.1.5.5.8.1.2 hMAC-SHA1 a message authentication code

  Dotted notation

  1.3.6.1.5.5.8.1.2

  DER encoding

  06082b06010505080102

  Category

  a message authentication code

  Also known as

  hmac-sha1

  OpenSSL short name

  HMAC-SHA1

  OpenSSL long name

  hmac-sha1

  Listed by

  the ecdsa.com catalog

  • RFC 3370 §6.1
• 1.3.14.3.2.7 desCBC a symmetric cipher

  Dotted notation

  1.3.14.3.2.7

  DER encoding

  06052b0e030207

  Category

  a symmetric cipher

  Also known as

  DES-CBC

  OpenSSL short name

  DES-CBC

  OpenSSL long name

  des-cbc

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • RFC 8018 §B.2.1
• 1.3.14.3.2.26 id-sha1 a hash function

  Dotted notation

  1.3.14.3.2.26

  DER encoding

  06052b0e03021a

  Category

  a hash function

  Also known as

  SHA-1, sha1

  OpenSSL short name

  SHA1

  OpenSSL long name

  sha1

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • RFC 3279 §2.1
  • RFC 3370 §2.1
• 1.3.36.3.2.1 ripemd160 a hash function

  Dotted notation

  1.3.36.3.2.1

  DER encoding

  06052b24030201

  Category

  a hash function

  Also known as

  RIPEMD-160

  OpenSSL short name

  RIPEMD160

  OpenSSL long name

  ripemd160

  Listed by

  the ecdsa.com catalog

  • RFC 4880 §5.2.2
• 1.3.36.3.3.2.8.1.1 versionOne an arc that groups other identifiersPage
  • 1.3.36.3.3.2.8.1.1.1 brainpoolP160r1 named elliptic-curve domain parameters
  • 1.3.36.3.3.2.8.1.1.2 brainpoolP160t1 named elliptic-curve domain parameters
  • 1.3.36.3.3.2.8.1.1.3 brainpoolP192r1 named elliptic-curve domain parameters
  • 1.3.36.3.3.2.8.1.1.4 brainpoolP192t1 named elliptic-curve domain parameters
  • 1.3.36.3.3.2.8.1.1.5 brainpoolP224r1 named elliptic-curve domain parameters
  • 1.3.36.3.3.2.8.1.1.6 brainpoolP224t1 named elliptic-curve domain parameters
  • 1.3.36.3.3.2.8.1.1.7 brainpoolP256r1 named elliptic-curve domain parameters
  • 1.3.36.3.3.2.8.1.1.8 brainpoolP256t1 named elliptic-curve domain parameters
  • 1.3.36.3.3.2.8.1.1.9 brainpoolP320r1 named elliptic-curve domain parameters
  • 1.3.36.3.3.2.8.1.1.10 brainpoolP320t1 named elliptic-curve domain parameters
  • 1.3.36.3.3.2.8.1.1.11 brainpoolP384r1 named elliptic-curve domain parameters
  • 1.3.36.3.3.2.8.1.1.12 brainpoolP384t1 named elliptic-curve domain parameters
  • 1.3.36.3.3.2.8.1.1.13 brainpoolP512r1 named elliptic-curve domain parameters
  • 1.3.36.3.3.2.8.1.1.14 brainpoolP512t1 named elliptic-curve domain parameters
• 1.3.101.110 id-X25519 a key agreement scheme

  Dotted notation

  1.3.101.110

  DER encoding

  06032b656e

  Category

  a key agreement scheme

  Also known as

  X25519

  OpenSSL short name

  X25519

  Curve

  curve25519

  Listed by

  the ecdsa.com catalog

  • RFC 8410 §3
• 1.3.101.111 id-X448 a key agreement scheme

  Dotted notation

  1.3.101.111

  DER encoding

  06032b656f

  Category

  a key agreement scheme

  Also known as

  X448

  OpenSSL short name

  X448

  Curve

  curve448

  Listed by

  the ecdsa.com catalog

  • RFC 8410 §3
• 1.3.101.112 id-Ed25519 a signature algorithmPage
• 1.3.101.113 id-Ed448 a signature algorithm

  Dotted notation

  1.3.101.113

  DER encoding

  06032b6571

  Category

  a signature algorithm

  Also known as

  Ed448

  OpenSSL short name

  ED448

  Curve

  edwards448

  Listed by

  the ecdsa.com catalog

  • RFC 8410 §3
• 1.3.132.0 ellipticCurve an arc that groups other identifiersPage
  • 1.3.132.0.1 sect163k1 named elliptic-curve domain parameters
  • 1.3.132.0.2 sect163r1 named elliptic-curve domain parameters
  • 1.3.132.0.3 sect239k1 named elliptic-curve domain parameters
  • 1.3.132.0.4 sect113r1 named elliptic-curve domain parameters
  • 1.3.132.0.5 sect113r2 named elliptic-curve domain parameters
  • 1.3.132.0.6 secp112r1 named elliptic-curve domain parameters
  • 1.3.132.0.7 secp112r2 named elliptic-curve domain parameters
  • 1.3.132.0.8 secp160r1 named elliptic-curve domain parameters
  • 1.3.132.0.9 secp160k1 named elliptic-curve domain parameters
  • 1.3.132.0.10 secp256k1 named elliptic-curve domain parameters
  • 1.3.132.0.15 sect163r2 named elliptic-curve domain parameters
  • 1.3.132.0.16 sect283k1 named elliptic-curve domain parameters
  • 1.3.132.0.17 sect283r1 named elliptic-curve domain parameters
  • 1.3.132.0.22 sect131r1 named elliptic-curve domain parameters
  • 1.3.132.0.23 sect131r2 named elliptic-curve domain parameters
  • 1.3.132.0.24 sect193r1 named elliptic-curve domain parameters
  • 1.3.132.0.25 sect193r2 named elliptic-curve domain parameters
  • 1.3.132.0.26 sect233k1 named elliptic-curve domain parameters
  • 1.3.132.0.27 sect233r1 named elliptic-curve domain parameters
  • 1.3.132.0.28 secp128r1 named elliptic-curve domain parameters
  • 1.3.132.0.29 secp128r2 named elliptic-curve domain parameters
  • 1.3.132.0.30 secp160r2 named elliptic-curve domain parameters
  • 1.3.132.0.31 secp192k1 named elliptic-curve domain parameters
  • 1.3.132.0.32 secp224k1 named elliptic-curve domain parameters
  • 1.3.132.0.33 secp224r1 named elliptic-curve domain parameters
  • 1.3.132.0.34 secp384r1 named elliptic-curve domain parameters
  • 1.3.132.0.35 secp521r1 named elliptic-curve domain parameters
  • 1.3.132.0.36 sect409k1 named elliptic-curve domain parameters
  • 1.3.132.0.37 sect409r1 named elliptic-curve domain parameters
  • 1.3.132.0.38 sect571k1 named elliptic-curve domain parameters
  • 1.3.132.0.39 sect571r1 named elliptic-curve domain parameters
• 1.3.132.1.11.0 dhSinglePass-stdDH-sha224kdf-scheme a key agreement scheme

  Dotted notation

  1.3.132.1.11.0

  DER encoding

  06062b8104010b00

  Category

  a key agreement scheme

  OpenSSL short name

  dhSinglePass-stdDH-sha224kdf-scheme

  Listed by

  the ecdsa.com catalog

  • RFC 5753 §7.1.4
• 1.3.132.1.11.1 dhSinglePass-stdDH-sha256kdf-scheme a key agreement scheme

  Dotted notation

  1.3.132.1.11.1

  DER encoding

  06062b8104010b01

  Category

  a key agreement scheme

  OpenSSL short name

  dhSinglePass-stdDH-sha256kdf-scheme

  Listed by

  the ecdsa.com catalog

  • RFC 5753 §7.1.4
• 1.3.132.1.11.2 dhSinglePass-stdDH-sha384kdf-scheme a key agreement scheme

  Dotted notation

  1.3.132.1.11.2

  DER encoding

  06062b8104010b02

  Category

  a key agreement scheme

  OpenSSL short name

  dhSinglePass-stdDH-sha384kdf-scheme

  Listed by

  the ecdsa.com catalog

  • RFC 5753 §7.1.4
• 1.3.132.1.11.3 dhSinglePass-stdDH-sha512kdf-scheme a key agreement scheme

  Dotted notation

  1.3.132.1.11.3

  DER encoding

  06062b8104010b03

  Category

  a key agreement scheme

  OpenSSL short name

  dhSinglePass-stdDH-sha512kdf-scheme

  Listed by

  the ecdsa.com catalog

  • RFC 5753 §7.1.4
• 1.3.132.1.12 id-ecDH a key agreement scheme

  Dotted notation

  1.3.132.1.12

  DER encoding

  06052b8104010c

  Category

  a key agreement scheme

  Also known as

  ecDH

  Listed by

  the ecdsa.com catalog

  • RFC 5480 §2.1.2
• 1.3.132.1.13 id-ecMQV a key agreement scheme

  Dotted notation

  1.3.132.1.13

  DER encoding

  06052b8104010d

  Category

  a key agreement scheme

  Also known as

  ecMQV

  Listed by

  the ecdsa.com catalog

  • RFC 5480 §2.1.2
• 1.3.132.1.14.0 dhSinglePass-cofactorDH-sha224kdf-scheme a key agreement scheme

  Dotted notation

  1.3.132.1.14.0

  DER encoding

  06062b8104010e00

  Category

  a key agreement scheme

  OpenSSL short name

  dhSinglePass-cofactorDH-sha224kdf-scheme

  Listed by

  the ecdsa.com catalog

  • RFC 5753 §7.1.4
• 1.3.132.1.14.1 dhSinglePass-cofactorDH-sha256kdf-scheme a key agreement scheme

  Dotted notation

  1.3.132.1.14.1

  DER encoding

  06062b8104010e01

  Category

  a key agreement scheme

  OpenSSL short name

  dhSinglePass-cofactorDH-sha256kdf-scheme

  Listed by

  the ecdsa.com catalog

  • RFC 5753 §7.1.4
• 1.3.132.1.14.2 dhSinglePass-cofactorDH-sha384kdf-scheme a key agreement scheme

  Dotted notation

  1.3.132.1.14.2

  DER encoding

  06062b8104010e02

  Category

  a key agreement scheme

  OpenSSL short name

  dhSinglePass-cofactorDH-sha384kdf-scheme

  Listed by

  the ecdsa.com catalog

  • RFC 5753 §7.1.4
• 1.3.132.1.14.3 dhSinglePass-cofactorDH-sha512kdf-scheme a key agreement scheme

  Dotted notation

  1.3.132.1.14.3

  DER encoding

  06062b8104010e03

  Category

  a key agreement scheme

  OpenSSL short name

  dhSinglePass-cofactorDH-sha512kdf-scheme

  Listed by

  the ecdsa.com catalog

  • RFC 5753 §7.1.4
• 1.3.133.16.840.63.0.2 dhSinglePass-stdDH-sha1kdf-scheme a key agreement scheme

  Dotted notation

  1.3.133.16.840.63.0.2

  DER encoding

  06092b81051086483f0002

  Category

  a key agreement scheme

  OpenSSL short name

  dhSinglePass-stdDH-sha1kdf-scheme

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • RFC 5753 §7.1.4
• 1.3.133.16.840.63.0.3 dhSinglePass-cofactorDH-sha1kdf-scheme a key agreement scheme

  Dotted notation

  1.3.133.16.840.63.0.3

  DER encoding

  06092b81051086483f0003

  Category

  a key agreement scheme

  OpenSSL short name

  dhSinglePass-cofactorDH-sha1kdf-scheme

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • RFC 5753 §7.1.4
• 1.3.159.1.17.1 Actalis a certificate policy

  Dotted notation

  1.3.159.1.17.1

  DER encoding

  06062b811f011101

  Category

  a certificate policy

  EV policy of

  Actalis

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 2.5.4 id-at an arc that groups other identifiersPage
  • 2.5.4.3 id-at-commonName an attribute type
  • 2.5.4.4 id-at-surname an attribute type
  • 2.5.4.5 id-at-serialNumber an attribute type
  • 2.5.4.6 id-at-countryName an attribute type
  • 2.5.4.7 id-at-localityName an attribute type
  • 2.5.4.8 id-at-stateOrProvinceName an attribute type
  • 2.5.4.9 id-at-streetAddress an attribute type
  • 2.5.4.10 id-at-organizationName an attribute type
  • 2.5.4.11 id-at-organizationalUnitName an attribute type
  • 2.5.4.12 id-at-title an attribute type
  • 2.5.4.13 id-at-description an attribute type
  • 2.5.4.15 id-at-businessCategory an attribute type
  • 2.5.4.16 id-at-postalAddress an attribute type
  • 2.5.4.17 id-at-postalCode an attribute type
  • 2.5.4.18 id-at-postOfficeBox an attribute type
  • 2.5.4.20 id-at-telephoneNumber an attribute type
  • 2.5.4.36 userCertificate an attribute type
  • 2.5.4.37 cACertificate an attribute type
  • 2.5.4.38 authorityRevocationList an attribute type
  • 2.5.4.39 certificateRevocationList an attribute type
  • 2.5.4.40 crossCertificatePair an attribute type
  • 2.5.4.41 id-at-name an attribute type
  • 2.5.4.42 id-at-givenName an attribute type
  • 2.5.4.43 id-at-initials an attribute type
  • 2.5.4.44 id-at-generationQualifier an attribute type
  • 2.5.4.45 id-at-uniqueIdentifier an attribute type
  • 2.5.4.46 id-at-dnQualifier an attribute type
  • 2.5.4.52 supportedAlgorithms an attribute type
  • 2.5.4.53 deltaRevocationList an attribute type
  • 2.5.4.65 id-at-pseudonym an attribute type
  • 2.5.4.72 id-at-role an attribute type
  • 2.5.4.97 id-at-organizationIdentifier an attribute type
• 2.5.29 id-ce an arc that groups other identifiersPage
  • 2.5.29.9 id-ce-subjectDirectoryAttributes a certificate or CRL extension
  • 2.5.29.14 id-ce-subjectKeyIdentifier a certificate or CRL extension
  • 2.5.29.15 id-ce-keyUsage a certificate or CRL extension
  • 2.5.29.16 id-ce-privateKeyUsagePeriod a certificate or CRL extension
  • 2.5.29.17 id-ce-subjectAltName a certificate or CRL extensionPage
  • 2.5.29.18 id-ce-issuerAltName a certificate or CRL extension
  • 2.5.29.19 id-ce-basicConstraints a certificate or CRL extensionPage
  • 2.5.29.20 id-ce-cRLNumber a certificate or CRL extension
  • 2.5.29.21 id-ce-cRLReasons a certificate or CRL extension
  • 2.5.29.24 id-ce-invalidityDate a certificate or CRL extension
  • 2.5.29.27 id-ce-deltaCRLIndicator a certificate or CRL extension
  • 2.5.29.28 id-ce-issuingDistributionPoint a certificate or CRL extension
  • 2.5.29.29 id-ce-certificateIssuer a certificate or CRL extension
  • 2.5.29.30 id-ce-nameConstraints a certificate or CRL extension
  • 2.5.29.31 id-ce-cRLDistributionPoints a certificate or CRL extension
  • 2.5.29.32 id-ce-certificatePolicies a certificate or CRL extension
    • 2.5.29.32.0 anyPolicy a certificate policy
  • 2.5.29.33 id-ce-policyMappings a certificate or CRL extension
  • 2.5.29.35 id-ce-authorityKeyIdentifier a certificate or CRL extension
  • 2.5.29.36 id-ce-policyConstraints a certificate or CRL extension
  • 2.5.29.37 id-ce-extKeyUsage a certificate or CRL extension
    • 2.5.29.37.0 anyExtendedKeyUsage an extended key usage
  • 2.5.29.46 id-ce-freshestCRL a certificate or CRL extension
  • 2.5.29.54 id-ce-inhibitAnyPolicy a certificate or CRL extension
  • 2.5.29.55 id-ce-targetInformation a certificate or CRL extension
  • 2.5.29.56 id-ce-noRevAvail a certificate or CRL extension
  • 2.5.29.72 id-ce-subjectAltPublicKeyInfo a certificate or CRL extension
  • 2.5.29.73 id-ce-altSignatureAlgorithm a certificate or CRL extension
  • 2.5.29.74 id-ce-altSignatureValue a certificate or CRL extension
• 2.16.156.112554.3 China Financial Certification Authority (CFCA) a certificate policy

  Dotted notation

  2.16.156.112554.3

  DER encoding

  060760811c86ef2a03

  Category

  a certificate policy

  EV policy of

  China Financial Certification Authority (CFCA)

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 2.16.578.1.26.1.3.3 Buypass a certificate policy

  Dotted notation

  2.16.578.1.26.1.3.3

  DER encoding

  0608608442011a010303

  Category

  a certificate policy

  EV policy of

  Buypass

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 2.16.756.1.89.1.2.1.1 SwissSign AG a certificate policy

  Dotted notation

  2.16.756.1.89.1.2.1.1

  DER encoding

  0609608574015901020101

  Category

  a certificate policy

  EV policy of

  SwissSign AG

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 2.16.756.5.14.7.4.8 OISTE a certificate policy

  Dotted notation

  2.16.756.5.14.7.4.8

  DER encoding

  0608608574050e070408

  Category

  a certificate policy

  EV policy of

  OISTE

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 2.16.840.1.101.3.4 nistAlgorithms an arc that groups other identifiersPage
  • 2.16.840.1.101.3.4.1 aes an arc that groups other identifiersPage
    • 2.16.840.1.101.3.4.1.1 id-aes128-ECB a symmetric cipher
    • 2.16.840.1.101.3.4.1.2 id-aes128-CBC a symmetric cipher
    • 2.16.840.1.101.3.4.1.3 id-aes128-OFB a symmetric cipher
    • 2.16.840.1.101.3.4.1.4 id-aes128-CFB a symmetric cipher
    • 2.16.840.1.101.3.4.1.5 id-aes128-wrap a key wrap algorithm
    • 2.16.840.1.101.3.4.1.6 id-aes128-GCM a symmetric cipher
    • 2.16.840.1.101.3.4.1.7 id-aes128-CCM a symmetric cipher
    • 2.16.840.1.101.3.4.1.8 id-aes128-wrap-pad a key wrap algorithm
    • 2.16.840.1.101.3.4.1.9 id-aes128-GMAC a message authentication code
    • 2.16.840.1.101.3.4.1.21 id-aes192-ECB a symmetric cipher
    • 2.16.840.1.101.3.4.1.22 id-aes192-CBC a symmetric cipher
    • 2.16.840.1.101.3.4.1.23 id-aes192-OFB a symmetric cipher
    • 2.16.840.1.101.3.4.1.24 id-aes192-CFB a symmetric cipher
    • 2.16.840.1.101.3.4.1.25 id-aes192-wrap a key wrap algorithm
    • 2.16.840.1.101.3.4.1.26 id-aes192-GCM a symmetric cipher
    • 2.16.840.1.101.3.4.1.27 id-aes192-CCM a symmetric cipher
    • 2.16.840.1.101.3.4.1.28 id-aes192-wrap-pad a key wrap algorithm
    • 2.16.840.1.101.3.4.1.29 id-aes192-GMAC a message authentication code
    • 2.16.840.1.101.3.4.1.41 id-aes256-ECB a symmetric cipher
    • 2.16.840.1.101.3.4.1.42 id-aes256-CBC a symmetric cipher
    • 2.16.840.1.101.3.4.1.43 id-aes256-OFB a symmetric cipher
    • 2.16.840.1.101.3.4.1.44 id-aes256-CFB a symmetric cipher
    • 2.16.840.1.101.3.4.1.45 id-aes256-wrap a key wrap algorithm
    • 2.16.840.1.101.3.4.1.46 id-aes256-GCM a symmetric cipher
    • 2.16.840.1.101.3.4.1.47 id-aes256-CCM a symmetric cipher
    • 2.16.840.1.101.3.4.1.48 id-aes256-wrap-pad a key wrap algorithm
    • 2.16.840.1.101.3.4.1.49 id-aes256-GMAC a message authentication code
  • 2.16.840.1.101.3.4.2 hashAlgs an arc that groups other identifiersPage
    • 2.16.840.1.101.3.4.2.1 id-sha256 a hash function
    • 2.16.840.1.101.3.4.2.2 id-sha384 a hash function
    • 2.16.840.1.101.3.4.2.3 id-sha512 a hash function
    • 2.16.840.1.101.3.4.2.4 id-sha224 a hash function
    • 2.16.840.1.101.3.4.2.5 id-sha512-224 a hash function
    • 2.16.840.1.101.3.4.2.6 id-sha512-256 a hash function
    • 2.16.840.1.101.3.4.2.7 id-sha3-224 a hash function
    • 2.16.840.1.101.3.4.2.8 id-sha3-256 a hash function
    • 2.16.840.1.101.3.4.2.9 id-sha3-384 a hash function
    • 2.16.840.1.101.3.4.2.10 id-sha3-512 a hash function
    • 2.16.840.1.101.3.4.2.11 id-shake128 a hash function
    • 2.16.840.1.101.3.4.2.12 id-shake256 a hash function
    • 2.16.840.1.101.3.4.2.13 id-hmacWithSHA3-224 a message authentication code
    • 2.16.840.1.101.3.4.2.14 id-hmacWithSHA3-256 a message authentication code
    • 2.16.840.1.101.3.4.2.15 id-hmacWithSHA3-384 a message authentication code
    • 2.16.840.1.101.3.4.2.16 id-hmacWithSHA3-512 a message authentication code
    • 2.16.840.1.101.3.4.2.17 id-shake128-len a hash function
    • 2.16.840.1.101.3.4.2.18 id-shake256-len a hash function
    • 2.16.840.1.101.3.4.2.19 id-KMACWithSHAKE128 a message authentication code
    • 2.16.840.1.101.3.4.2.20 id-KMACWithSHAKE256 a message authentication code
    • 2.16.840.1.101.3.4.2.21 id-KMAC128 a message authentication code
    • 2.16.840.1.101.3.4.2.22 id-KMAC256 a message authentication code
  • 2.16.840.1.101.3.4.3 sigAlgs an arc that groups other identifiersPage
    • 2.16.840.1.101.3.4.3.1 id-dsa-with-sha224 a signature algorithm
    • 2.16.840.1.101.3.4.3.2 id-dsa-with-sha256 a signature algorithm
    • 2.16.840.1.101.3.4.3.3 id-dsa-with-sha384 a signature algorithm
    • 2.16.840.1.101.3.4.3.4 id-dsa-with-sha512 a signature algorithm
    • 2.16.840.1.101.3.4.3.5 id-dsa-with-sha3-224 a signature algorithm
    • 2.16.840.1.101.3.4.3.6 id-dsa-with-sha3-256 a signature algorithm
    • 2.16.840.1.101.3.4.3.7 id-dsa-with-sha3-384 a signature algorithm
    • 2.16.840.1.101.3.4.3.8 id-dsa-with-sha3-512 a signature algorithm
    • 2.16.840.1.101.3.4.3.9 id-ecdsa-with-sha3-224 a signature algorithm
    • 2.16.840.1.101.3.4.3.10 id-ecdsa-with-sha3-256 a signature algorithm
    • 2.16.840.1.101.3.4.3.11 id-ecdsa-with-sha3-384 a signature algorithm
    • 2.16.840.1.101.3.4.3.12 id-ecdsa-with-sha3-512 a signature algorithm
    • 2.16.840.1.101.3.4.3.13 id-rsassa-pkcs1-v1_5-with-sha3-224 a signature algorithm
    • 2.16.840.1.101.3.4.3.14 id-rsassa-pkcs1-v1_5-with-sha3-256 a signature algorithm
    • 2.16.840.1.101.3.4.3.15 id-rsassa-pkcs1-v1_5-with-sha3-384 a signature algorithm
    • 2.16.840.1.101.3.4.3.16 id-rsassa-pkcs1-v1_5-with-sha3-512 a signature algorithm
    • 2.16.840.1.101.3.4.3.17 id-ml-dsa-44 a signature algorithm
    • 2.16.840.1.101.3.4.3.18 id-ml-dsa-65 a signature algorithmPage
    • 2.16.840.1.101.3.4.3.19 id-ml-dsa-87 a signature algorithm
    • 2.16.840.1.101.3.4.3.20 id-slh-dsa-sha2-128s a signature algorithm
    • 2.16.840.1.101.3.4.3.21 id-slh-dsa-sha2-128f a signature algorithm
    • 2.16.840.1.101.3.4.3.22 id-slh-dsa-sha2-192s a signature algorithm
    • 2.16.840.1.101.3.4.3.23 id-slh-dsa-sha2-192f a signature algorithm
    • 2.16.840.1.101.3.4.3.24 id-slh-dsa-sha2-256s a signature algorithm
    • 2.16.840.1.101.3.4.3.25 id-slh-dsa-sha2-256f a signature algorithm
    • 2.16.840.1.101.3.4.3.26 id-slh-dsa-shake-128s a signature algorithm
    • 2.16.840.1.101.3.4.3.27 id-slh-dsa-shake-128f a signature algorithm
    • 2.16.840.1.101.3.4.3.28 id-slh-dsa-shake-192s a signature algorithm
    • 2.16.840.1.101.3.4.3.29 id-slh-dsa-shake-192f a signature algorithm
    • 2.16.840.1.101.3.4.3.30 id-slh-dsa-shake-256s a signature algorithm
    • 2.16.840.1.101.3.4.3.31 id-slh-dsa-shake-256f a signature algorithm
    • 2.16.840.1.101.3.4.3.32 id-hash-ml-dsa-44-with-sha512 a signature algorithm
    • 2.16.840.1.101.3.4.3.33 id-hash-ml-dsa-65-with-sha512 a signature algorithm
    • 2.16.840.1.101.3.4.3.34 id-hash-ml-dsa-87-with-sha512 a signature algorithm
    • 2.16.840.1.101.3.4.3.35 id-hash-slh-dsa-sha2-128s-with-sha256 a signature algorithm
    • 2.16.840.1.101.3.4.3.36 id-hash-slh-dsa-sha2-128f-with-sha256 a signature algorithm
    • 2.16.840.1.101.3.4.3.37 id-hash-slh-dsa-sha2-192s-with-sha512 a signature algorithm
    • 2.16.840.1.101.3.4.3.38 id-hash-slh-dsa-sha2-192f-with-sha512 a signature algorithm
    • 2.16.840.1.101.3.4.3.39 id-hash-slh-dsa-sha2-256s-with-sha512 a signature algorithm
    • 2.16.840.1.101.3.4.3.40 id-hash-slh-dsa-sha2-256f-with-sha512 a signature algorithm
    • 2.16.840.1.101.3.4.3.41 id-hash-slh-dsa-shake-128s-with-shake128 a signature algorithm
    • 2.16.840.1.101.3.4.3.42 id-hash-slh-dsa-shake-128f-with-shake128 a signature algorithm
    • 2.16.840.1.101.3.4.3.43 id-hash-slh-dsa-shake-192s-with-shake256 a signature algorithm
    • 2.16.840.1.101.3.4.3.44 id-hash-slh-dsa-shake-192f-with-shake256 a signature algorithm
    • 2.16.840.1.101.3.4.3.45 id-hash-slh-dsa-shake-256s-with-shake256 a signature algorithm
    • 2.16.840.1.101.3.4.3.46 id-hash-slh-dsa-shake-256f-with-shake256 a signature algorithm
  • 2.16.840.1.101.3.4.4 kems an arc that groups other identifiersPage
    • 2.16.840.1.101.3.4.4.1 id-alg-ml-kem-512 a key encapsulation mechanism
    • 2.16.840.1.101.3.4.4.2 id-alg-ml-kem-768 a key encapsulation mechanismPage
    • 2.16.840.1.101.3.4.4.3 id-alg-ml-kem-1024 a key encapsulation mechanism
• 2.16.840.1.113730.1.1 netscape-cert-type a certificate or CRL extension

  Dotted notation

  2.16.840.1.113730.1.1

  DER encoding

  06096086480186f8420101

  Category

  a certificate or CRL extension

  Also known as

  nsCertType, Netscape Cert Type

  OpenSSL short name

  nsCertType

  OpenSSL long name

  Netscape Cert Type

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • Netscape Certificate Extensions
• 2.16.840.1.113730.1.13 netscape-comment a certificate or CRL extension

  Dotted notation

  2.16.840.1.113730.1.13

  DER encoding

  06096086480186f842010d

  Category

  a certificate or CRL extension

  Also known as

  nsComment, Netscape Comment

  OpenSSL short name

  nsComment

  OpenSSL long name

  Netscape Comment

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • Netscape Certificate Extensions
• 2.16.840.1.113730.4.1 netscape-server-gated-crypto an extended key usage

  Dotted notation

  2.16.840.1.113730.4.1

  DER encoding

  06096086480186f8420401

  Category

  an extended key usage

  Also known as

  nsSGC, Netscape Server Gated Crypto

  OpenSSL short name

  nsSGC

  OpenSSL long name

  Netscape Server Gated Crypto

  Listed by

  the ecdsa.com catalog

  Status

  Deprecated

  • Netscape Certificate Extensions
• 2.16.840.1.113839.0.6.9 IdenTrust Services, LLC a certificate policy

  Dotted notation

  2.16.840.1.113839.0.6.9

  DER encoding

  060a6086480186f92f000609

  Category

  a certificate policy

  EV policy of

  IdenTrust Services, LLC

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 2.16.840.1.113839.0.6.14.1 IdenTrust Services, LLC a certificate policy

  Dotted notation

  2.16.840.1.113839.0.6.14.1

  DER encoding

  060b6086480186f92f00060e01

  Category

  a certificate policy

  EV policy of

  IdenTrust Services, LLC

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 2.16.840.1.114028.10.1.2 Sectigo a certificate policy

  Dotted notation

  2.16.840.1.114028.10.1.2

  DER encoding

  060a6086480186fa6c0a0102

  Category

  a certificate policy

  EV policy of

  Sectigo

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 2.16.840.1.114404.1.1.2.4.1 SSL.com a certificate policy

  Dotted notation

  2.16.840.1.114404.1.1.2.4.1

  DER encoding

  060c6086480186fd640101020401

  Category

  a certificate policy

  EV policy of

  SSL.com

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 2.16.840.1.114412.1.3.0.2 DigiCert a certificate policy

  Dotted notation

  2.16.840.1.114412.1.3.0.2

  DER encoding

  060b6086480186fd6c01030002

  Category

  a certificate policy

  EV policy of

  DigiCert

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 2.16.840.1.114412.2.1 DigiCert a certificate policy

  Dotted notation

  2.16.840.1.114412.2.1

  DER encoding

  06096086480186fd6c0201

  Category

  a certificate policy

  EV policy of

  DigiCert

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 2.16.840.1.114413.1.7.23.3 GoDaddy a certificate policy

  Dotted notation

  2.16.840.1.114413.1.7.23.3

  DER encoding

  060b6086480186fd6d01071703

  Category

  a certificate policy

  EV policy of

  GoDaddy

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 2.16.840.1.114414.1.7.23.3 GoDaddy a certificate policy

  Dotted notation

  2.16.840.1.114414.1.7.23.3

  DER encoding

  060b6086480186fd6e01071703

  Category

  a certificate policy

  EV policy of

  GoDaddy

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 2.16.840.1.114414.1.7.24.3 Amazon Trust Services a certificate policy

  Dotted notation

  2.16.840.1.114414.1.7.24.3

  DER encoding

  060b6086480186fd6e01071803

  Category

  a certificate policy

  EV policy of

  Amazon Trust Services

  Listed by

  CCADB (EV policies of included roots)

  • CCADB: EV policy OIDs of included root certificates
• 2.23.133.2.1 tcg-at-tpmManufacturer a hardware or platform attestation field

  Dotted notation

  2.23.133.2.1

  DER encoding

  06056781050201

  Category

  a hardware or platform attestation field

  Also known as

  TPM Manufacturer

  OpenSSL short name

  tcg-at-tpmManufacturer

  OpenSSL long name

  TPM Manufacturer

  Listed by

  the ecdsa.com catalog

  • W3C WebAuthn Level 3 §8.3.1
• 2.23.133.2.2 tcg-at-tpmModel a hardware or platform attestation field

  Dotted notation

  2.23.133.2.2

  DER encoding

  06056781050202

  Category

  a hardware or platform attestation field

  Also known as

  TPM Model

  OpenSSL short name

  tcg-at-tpmModel

  OpenSSL long name

  TPM Model

  Listed by

  the ecdsa.com catalog

  • W3C WebAuthn Level 3 §8.3.1
• 2.23.133.2.3 tcg-at-tpmVersion a hardware or platform attestation field

  Dotted notation

  2.23.133.2.3

  DER encoding

  06056781050203

  Category

  a hardware or platform attestation field

  Also known as

  TPM Version

  OpenSSL short name

  tcg-at-tpmVersion

  OpenSSL long name

  TPM Version

  Listed by

  the ecdsa.com catalog

  • W3C WebAuthn Level 3 §8.3.1
• 2.23.133.2.16 tcg-at-tpmSpecification a hardware or platform attestation field

  Dotted notation

  2.23.133.2.16

  DER encoding

  06056781050210

  Category

  a hardware or platform attestation field

  Also known as

  TPM Specification

  OpenSSL short name

  tcg-at-tpmSpecification

  OpenSSL long name

  TPM Specification

  Listed by

  the ecdsa.com catalog

  • TCG EK Credential Profile for TPM Family 2.0
• 2.23.133.8.1 tcg-kp-EKCertificate an extended key usage

  Dotted notation

  2.23.133.8.1

  DER encoding

  06056781050801

  Category

  an extended key usage

  Also known as

  Endorsement Key Certificate

  OpenSSL short name

  tcg-kp-EKCertificate

  OpenSSL long name

  Endorsement Key Certificate

  Listed by

  the ecdsa.com catalog

  • TCG EK Credential Profile for TPM Family 2.0
• 2.23.133.8.2 tcg-kp-PlatformAttributeCertificate an extended key usage

  Dotted notation

  2.23.133.8.2

  DER encoding

  06056781050802

  Category

  an extended key usage

  Also known as

  Platform Attribute Certificate

  OpenSSL short name

  tcg-kp-PlatformAttributeCertificate

  OpenSSL long name

  Platform Attribute Certificate

  Listed by

  the ecdsa.com catalog

  • TCG Platform Certificate Profile
• 2.23.133.8.3 tcg-kp-AIKCertificate an extended key usage

  Dotted notation

  2.23.133.8.3

  DER encoding

  06056781050803

  Category

  an extended key usage

  Also known as

  Attestation Identity Key Certificate

  OpenSSL short name

  tcg-kp-AIKCertificate

  OpenSSL long name

  Attestation Identity Key Certificate

  Listed by

  the ecdsa.com catalog

  • W3C WebAuthn Level 3 §8.3.1
• 2.23.140 ca-browser-forum an arc that groups other identifiersPage
  • 2.23.140.1.1 ev-guidelines a certificate policyPage
  • 2.23.140.1.2.1 domain-validated a certificate policyPage
  • 2.23.140.1.2.2 organization-validated a certificate policy
  • 2.23.140.1.2.3 individual-validated a certificate policy
  • 2.23.140.1.3 extended-validation-codesigning a certificate policy
  • 2.23.140.1.4.1 code-signing-requirements a certificate policy
  • 2.23.140.1.4.2 timestamping a certificate policy
  • 2.23.140.1.5.1.1 mailbox-validated-legacy a certificate policy
  • 2.23.140.1.5.1.2 mailbox-validated-multipurpose a certificate policy
  • 2.23.140.1.5.1.3 mailbox-validated-strict a certificate policy
  • 2.23.140.1.5.2.1 organization-validated-legacy a certificate policy
  • 2.23.140.1.5.2.2 organization-validated-multipurpose a certificate policy
  • 2.23.140.1.5.2.3 organization-validated-strict a certificate policy
  • 2.23.140.1.5.3.1 sponsor-validated-legacy a certificate policy
  • 2.23.140.1.5.3.2 sponsor-validated-multipurpose a certificate policy
  • 2.23.140.1.5.3.3 sponsor-validated-strict a certificate policy
  • 2.23.140.1.5.4.1 individual-validated-legacy a certificate policy
  • 2.23.140.1.5.4.2 individual-validated-multipurpose a certificate policy
  • 2.23.140.1.5.4.3 individual-validated-strict a certificate policy
  • 2.23.140.1.31 cabf-TorServiceDescriptor a certificate or CRL extension
  • 2.23.140.3.1 id-CABFOrganizationIdentifier a certificate or CRL extension