wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-01-28 05:22:19 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
100d765b0c333ec00a111ce7c19be6f1bf4070a5
wolfssl/examples/asn1/dumpasn1.cfg
Sean Parkinson 112351667a ASN.1 OIDs and sum: Change algorithm for sum 
New sum algorithm has no clashes at this time.
Old algorithm enabled by defining: WOLFSSL_OLD_OID_SUM.
New oid_sum.h file generated with scripts/asn1_oid_sum.pl.

Added bunch of OID names into asn1 example.
2025-05-07 08:32:08 +10:00

11604 lines
265 KiB
INI
Raw Blame History

# dumpasn1 Object Identifier configuration file, available from
# https://www.cs.auckland.ac.nz/~pgut001/dumpasn1.cfg. Last updated 7
# February 2023, or 20230207 if you want it that way. This file is read by
# dumpasn1.c and is used to display information on Object Identifiers found
# in ASN.1 objects. This is merely a list of things that you might
# conceivably find in use somewhere, and should in no way be taken as a
# guide to which OIDs to use - many of these will never been seen in the
# wild, or should be shot on sight if encountered.
#
# The format of this file is as follows:
#
# - All blank lines and lines beginning with a '#' are ignored.
#
# - OIDs are described by a set of attributes, of which at least the 'OID'
# and 'Description' must be present. Optional attributes are a 'Comment'
# and a 'Warning' (to indicate that dumpasn1 will display a warning if
# this OID is encountered).
#
# - Attributes are listed one per line. The first attribute should be an
# 'OID' attribute since this is used to denote the start of a new OID
# description. The other attributes may be given in any order.
#
# - Offical attribute names vary widely depending on who's creating them.
# In an attempt to avoid a confusing mass of naming styles (in particular
# the more recent fashion trend of naming OIDs following formulae like
# standard-group-name-algorithm-mechanism-subalgorithm-more-standards-
# more-algorithms-I'd-like-to-thank-the-academy-etc rather than older forms
# like rsaWithSHA1 has lead to extremely noisy and hard-to-decipher names),
# this file aims for consistency by normalising the naming for attributes,
# however this means that the name used here may not entirely match the
# actual name.
#
# See the rest of this file for examples of what an OID description should
# look like.
#
# Although created for dumpasn1, this file is also used by a number of other
# applications. If you'd like to see new OIDs used in an application that
# uses this file, please email them to me, preferably in the format used
# here to minimise the amount of editing work involved. If you'd like to
# use this file, treat it as either GPL, BSD, or CC BY licensed depending on
# which one you prefer.
# Deutsche Telekom/Telesec
OID = 0 2 262 1 10
Comment = Deutsche Telekom
Description = Telesec
OID = 0 2 262 1 10 0
Comment = Telesec
Description = extension
OID = 0 2 262 1 10 1
Comment = Telesec
Description = mechanism
OID = 0 2 262 1 10 1 0
Comment = Telesec mechanism
Description = authentication
OID = 0 2 262 1 10 1 0 1
Comment = Telesec authentication
Description = passwordAuthentication
OID = 0 2 262 1 10 1 0 2
Comment = Telesec authentication
Description = protectedPasswordAuthentication
OID = 0 2 262 1 10 1 0 3
Comment = Telesec authentication
Description = oneWayX509Authentication
OID = 0 2 262 1 10 1 0 4
Comment = Telesec authentication
Description = twoWayX509Authentication
OID = 0 2 262 1 10 1 0 5
Comment = Telesec authentication
Description = threeWayX509Authentication
OID = 0 2 262 1 10 1 0 6
Comment = Telesec authentication
Description = oneWayISO9798Authentication
OID = 0 2 262 1 10 1 0 7
Comment = Telesec authentication
Description = twoWayISO9798Authentication
OID = 0 2 262 1 10 1 0 8
Comment = Telesec authentication
Description = telekomAuthentication
OID = 0 2 262 1 10 1 1
Comment = Telesec mechanism
Description = signature
OID = 0 2 262 1 10 1 1 1
Comment = Telesec mechanism
Description = md4WithRSAAndISO9697
OID = 0 2 262 1 10 1 1 2
Comment = Telesec mechanism
Description = md4WithRSAAndTelesecSignatureStandard
OID = 0 2 262 1 10 1 1 3
Comment = Telesec mechanism
Description = md5WithRSAAndISO9697
OID = 0 2 262 1 10 1 1 4
Comment = Telesec mechanism
Description = md5WithRSAAndTelesecSignatureStandard
# PKCS #1 signature with RIPEMD-160
OID = 0 2 262 1 10 1 1 5
Comment = Telesec mechanism
Description = ripemd160WithRSAAndTelekomSignatureStandard
# RIPEMD-160 with raw RSA (ie no padding, just 160 bytes encrypted) signature
OID = 0 2 262 1 10 1 1 9
Comment = Telesec signature
Description = hbciRsaSignature
OID = 0 2 262 1 10 1 2
Comment = Telesec mechanism
Description = encryption
# Specially recommended by the NSA for German use
OID = 0 2 262 1 10 1 2 0
Comment = Telesec encryption
Description = none
OID = 0 2 262 1 10 1 2 1
Comment = Telesec encryption
Description = rsaTelesec
OID = 0 2 262 1 10 1 2 2
Comment = Telesec encryption
Description = des
OID = 0 2 262 1 10 1 2 2 1
Comment = Telesec encryption
Description = desECB
OID = 0 2 262 1 10 1 2 2 2
Comment = Telesec encryption
Description = desCBC
OID = 0 2 262 1 10 1 2 2 3
Comment = Telesec encryption
Description = desOFB
OID = 0 2 262 1 10 1 2 2 4
Comment = Telesec encryption
Description = desCFB8
OID = 0 2 262 1 10 1 2 2 5
Comment = Telesec encryption
Description = desCFB64
OID = 0 2 262 1 10 1 2 3
Comment = Telesec encryption
Description = des3
OID = 0 2 262 1 10 1 2 3 1
Comment = Telesec encryption
Description = des3ECB
OID = 0 2 262 1 10 1 2 3 2
Comment = Telesec encryption
Description = des3CBC
OID = 0 2 262 1 10 1 2 3 3
Comment = Telesec encryption
Description = des3OFB
OID = 0 2 262 1 10 1 2 3 4
Comment = Telesec encryption
Description = des3CFB8
OID = 0 2 262 1 10 1 2 3 5
Comment = Telesec encryption
Description = des3CFB64
OID = 0 2 262 1 10 1 2 4
Comment = Telesec encryption
Description = magenta
OID = 0 2 262 1 10 1 2 5
Comment = Telesec encryption
Description = idea
OID = 0 2 262 1 10 1 2 5 1
Comment = Telesec encryption
Description = ideaECB
OID = 0 2 262 1 10 1 2 5 2
Comment = Telesec encryption
Description = ideaCBC
OID = 0 2 262 1 10 1 2 5 3
Comment = Telesec encryption
Description = ideaOFB
OID = 0 2 262 1 10 1 2 5 4
Comment = Telesec encryption
Description = ideaCFB8
OID = 0 2 262 1 10 1 2 5 5
Comment = Telesec encryption
Description = ideaCFB64
OID = 0 2 262 1 10 1 3
Comment = Telesec mechanism
Description = oneWayFunction
OID = 0 2 262 1 10 1 3 1
Comment = Telesec one-way function
Description = md4
OID = 0 2 262 1 10 1 3 2
Comment = Telesec one-way function
Description = md5
OID = 0 2 262 1 10 1 3 3
Comment = Telesec one-way function
Description = sqModNX509
OID = 0 2 262 1 10 1 3 4
Comment = Telesec one-way function
Description = sqModNISO
OID = 0 2 262 1 10 1 3 5
Comment = Telesec one-way function
Description = ripemd128
OID = 0 2 262 1 10 1 3 6
Comment = Telesec one-way function
Description = hashUsingBlockCipher
OID = 0 2 262 1 10 1 3 7
Comment = Telesec one-way function
Description = mac
OID = 0 2 262 1 10 1 3 8
Comment = Telesec one-way function
Description = ripemd160
OID = 0 2 262 1 10 1 4
Comment = Telesec mechanism
Description = fecFunction
OID = 0 2 262 1 10 1 4 1
Comment = Telesec mechanism
Description = reedSolomon
OID = 0 2 262 1 10 2
Comment = Telesec
Description = module
OID = 0 2 262 1 10 2 0
Comment = Telesec module
Description = algorithms
OID = 0 2 262 1 10 2 1
Comment = Telesec module
Description = attributeTypes
OID = 0 2 262 1 10 2 2
Comment = Telesec module
Description = certificateTypes
OID = 0 2 262 1 10 2 3
Comment = Telesec module
Description = messageTypes
OID = 0 2 262 1 10 2 4
Comment = Telesec module
Description = plProtocol
OID = 0 2 262 1 10 2 5
Comment = Telesec module
Description = smeAndComponentsOfSme
OID = 0 2 262 1 10 2 6
Comment = Telesec module
Description = fec
OID = 0 2 262 1 10 2 7
Comment = Telesec module
Description = usefulDefinitions
OID = 0 2 262 1 10 2 8
Comment = Telesec module
Description = stefiles
OID = 0 2 262 1 10 2 9
Comment = Telesec module
Description = sadmib
OID = 0 2 262 1 10 2 10
Comment = Telesec module
Description = electronicOrder
OID = 0 2 262 1 10 2 11
Comment = Telesec module
Description = telesecTtpAsymmetricApplication
OID = 0 2 262 1 10 2 12
Comment = Telesec module
Description = telesecTtpBasisApplication
OID = 0 2 262 1 10 2 13
Comment = Telesec module
Description = telesecTtpMessages
OID = 0 2 262 1 10 2 14
Comment = Telesec module
Description = telesecTtpTimeStampApplication
OID = 0 2 262 1 10 3
Comment = Telesec
Description = objectClass
OID = 0 2 262 1 10 3 0
Comment = Telesec object class
Description = telesecOtherName
OID = 0 2 262 1 10 3 1
Comment = Telesec object class
Description = directory
OID = 0 2 262 1 10 3 2
Comment = Telesec object class
Description = directoryType
OID = 0 2 262 1 10 3 3
Comment = Telesec object class
Description = directoryGroup
OID = 0 2 262 1 10 3 4
Comment = Telesec object class
Description = directoryUser
OID = 0 2 262 1 10 3 5
Comment = Telesec object class
Description = symmetricKeyEntry
OID = 0 2 262 1 10 4
Comment = Telesec
Description = package
OID = 0 2 262 1 10 5
Comment = Telesec
Description = parameter
OID = 0 2 262 1 10 6
Comment = Telesec
Description = nameBinding
OID = 0 2 262 1 10 7
Comment = Telesec
Description = attribute
OID = 0 2 262 1 10 7 0
Comment = Telesec attribute
Description = applicationGroupIdentifier
OID = 0 2 262 1 10 7 1
Comment = Telesec attribute
Description = certificateType
OID = 0 2 262 1 10 7 2
Comment = Telesec attribute
Description = telesecCertificate
OID = 0 2 262 1 10 7 3
Comment = Telesec attribute
Description = certificateNumber
OID = 0 2 262 1 10 7 4
Comment = Telesec attribute
Description = certificateRevocationList
OID = 0 2 262 1 10 7 5
Comment = Telesec attribute
Description = creationDate
OID = 0 2 262 1 10 7 6
Comment = Telesec attribute
Description = issuer
OID = 0 2 262 1 10 7 7
Comment = Telesec attribute
Description = namingAuthority
OID = 0 2 262 1 10 7 8
Comment = Telesec attribute
Description = publicKeyDirectory
OID = 0 2 262 1 10 7 9
Comment = Telesec attribute
Description = securityDomain
OID = 0 2 262 1 10 7 10
Comment = Telesec attribute
Description = subject
OID = 0 2 262 1 10 7 11
Comment = Telesec attribute
Description = timeOfRevocation
OID = 0 2 262 1 10 7 12
Comment = Telesec attribute
Description = userGroupReference
OID = 0 2 262 1 10 7 13
Comment = Telesec attribute
Description = validity
OID = 0 2 262 1 10 7 14
Comment = Telesec attribute
Description = zert93
# It really is called that
OID = 0 2 262 1 10 7 15
Comment = Telesec attribute
Description = securityMessEnv
OID = 0 2 262 1 10 7 16
Comment = Telesec attribute
Description = anonymizedPublicKeyDirectory
OID = 0 2 262 1 10 7 17
Comment = Telesec attribute
Description = telesecGivenName
OID = 0 2 262 1 10 7 18
Comment = Telesec attribute
Description = nameAdditions
OID = 0 2 262 1 10 7 19
Comment = Telesec attribute
Description = telesecPostalCode
OID = 0 2 262 1 10 7 20
Comment = Telesec attribute
Description = nameDistinguisher
OID = 0 2 262 1 10 7 21
Comment = Telesec attribute
Description = telesecCertificateList
OID = 0 2 262 1 10 7 22
Comment = Telesec attribute
Description = teletrustCertificateList
OID = 0 2 262 1 10 7 23
Comment = Telesec attribute
Description = x509CertificateList
OID = 0 2 262 1 10 7 24
Comment = Telesec attribute
Description = timeOfIssue
OID = 0 2 262 1 10 7 25
Comment = Telesec attribute
Description = physicalCardNumber
OID = 0 2 262 1 10 7 26
Comment = Telesec attribute
Description = fileType
OID = 0 2 262 1 10 7 27
Comment = Telesec attribute
Description = ctlFileIsArchive
OID = 0 2 262 1 10 7 28
Comment = Telesec attribute
Description = emailAddress
OID = 0 2 262 1 10 7 29
Comment = Telesec attribute
Description = certificateTemplateList
OID = 0 2 262 1 10 7 30
Comment = Telesec attribute
Description = directoryName
OID = 0 2 262 1 10 7 31
Comment = Telesec attribute
Description = directoryTypeName
OID = 0 2 262 1 10 7 32
Comment = Telesec attribute
Description = directoryGroupName
OID = 0 2 262 1 10 7 33
Comment = Telesec attribute
Description = directoryUserName
OID = 0 2 262 1 10 7 34
Comment = Telesec attribute
Description = revocationFlag
OID = 0 2 262 1 10 7 35
Comment = Telesec attribute
Description = symmetricKeyEntryName
OID = 0 2 262 1 10 7 36
Comment = Telesec attribute
Description = glNumber
OID = 0 2 262 1 10 7 37
Comment = Telesec attribute
Description = goNumber
OID = 0 2 262 1 10 7 38
Comment = Telesec attribute
Description = gKeyData
OID = 0 2 262 1 10 7 39
Comment = Telesec attribute
Description = zKeyData
OID = 0 2 262 1 10 7 40
Comment = Telesec attribute
Description = ktKeyData
OID = 0 2 262 1 10 7 41
Comment = Telesec attribute
Description = ktKeyNumber
OID = 0 2 262 1 10 7 51
Comment = Telesec attribute
Description = timeOfRevocationGen
OID = 0 2 262 1 10 7 52
Comment = Telesec attribute
Description = liabilityText
OID = 0 2 262 1 10 8
Comment = Telesec
Description = attributeGroup
OID = 0 2 262 1 10 9
Comment = Telesec
Description = action
OID = 0 2 262 1 10 10
Comment = Telesec
Description = notification
OID = 0 2 262 1 10 11
Comment = Telesec
Description = snmp-mibs
OID = 0 2 262 1 10 11 1
Comment = Telesec SNMP MIBs
Description = securityApplication
OID = 0 2 262 1 10 12
Comment = Telesec
Description = certAndCrlExtensionDefinitions
# ISIS-MTT SigG-Profile: Indicates that an attribute certificate
# exists, which limits the usability of this public key certificate.
OID = 0 2 262 1 10 12 0
Comment = Telesec cert/CRL extension
Description = liabilityLimitationFlag
OID = 0 2 262 1 10 12 1
Comment = Telesec cert/CRL extension
Description = telesecCertIdExt
OID = 0 2 262 1 10 12 2
Comment = Telesec cert/CRL extension
Description = Telesec policyIdentifier
OID = 0 2 262 1 10 12 3
Comment = Telesec cert/CRL extension
Description = telesecPolicyQualifierID
OID = 0 2 262 1 10 12 4
Comment = Telesec cert/CRL extension
Description = telesecCRLFilteredExt
OID = 0 2 262 1 10 12 5
Comment = Telesec cert/CRL extension
Description = telesecCRLFilterExt
OID = 0 2 262 1 10 12 6
Comment = Telesec cert/CRL extension
Description = telesecNamingAuthorityExt
# BSI e-Pass (TR-03110/TR-03111). TA = Terminal Authentication (Passport
# PKI with monthly global cert updates), CA = Chip Authentication
# (Auth using static [EC]DH), PACE = Password Authenticated Connection
# Establishment, RI = Restricted Information Protocol, Eid = eID
# Smartcard Application, PT = Privileged Terminal, IS = Inspection
# System, AT = Authentication Terminal, ST = Signature Terminal.
OID = 0 4 0 127 0 7
Comment = BSI TR-03110/TR-03111
Description = bsi
OID = 0 4 0 127 0 7 1
Comment = BSI TR-03111
Description = bsiEcc
OID = 0 4 0 127 0 7 1 1
Comment = BSI TR-03111
Description = bsifieldType
OID = 0 4 0 127 0 7 1 1 1
Comment = BSI TR-03111
Description = bsiPrimeField
OID = 0 4 0 127 0 7 1 1 2
Comment = BSI TR-03111
Description = bsiCharacteristicTwoField
OID = 0 4 0 127 0 7 1 1 2 2
Comment = BSI TR-03111
Description = bsiECTLVKeyFormat
OID = 0 4 0 127 0 7 1 1 2 2 1
Comment = BSI TR-03111
Description = bsiECTLVPublicKey
OID = 0 4 0 127 0 7 1 1 2 3
Comment = BSI TR-03111
Description = bsiCharacteristicTwoBasis
OID = 0 4 0 127 0 7 1 1 2 3 1
Comment = BSI TR-03111
Description = bsiGnBasis
OID = 0 4 0 127 0 7 1 1 2 3 2
Comment = BSI TR-03111
Description = bsiTpBasis
OID = 0 4 0 127 0 7 1 1 2 3 3
Comment = BSI TR-03111
Description = bsiPpBasis
OID = 0 4 0 127 0 7 1 1 4 1
Comment = BSI TR-03111
Description = bsiEcdsaSignatures
OID = 0 4 0 127 0 7 1 1 4 1 1
Comment = BSI TR-03111
Description = bsiEcdsaWithSHA1
OID = 0 4 0 127 0 7 1 1 4 1 2
Comment = BSI TR-03111
Description = bsiEcdsaWithSHA224
OID = 0 4 0 127 0 7 1 1 4 1 3
Comment = BSI TR-03111
Description = bsiEcdsaWithSHA256
OID = 0 4 0 127 0 7 1 1 4 1 4
Comment = BSI TR-03111
Description = bsiEcdsaWithSHA384
OID = 0 4 0 127 0 7 1 1 4 1 5
Comment = BSI TR-03111
Description = bsiEcdsaWithSHA512
OID = 0 4 0 127 0 7 1 1 4 1 6
Comment = BSI TR-03111
Description = bsiEcdsaWithRIPEMD160
OID = 0 4 0 127 0 7 1 1 5 1 1
Comment = BSI TR-03111
Description = bsiEckaEgX963KDF
OID = 0 4 0 127 0 7 1 1 5 1 1 1
Comment = BSI TR-03111
Description = bsiEckaEgX963KDFWithSHA1
OID = 0 4 0 127 0 7 1 1 5 1 1 2
Comment = BSI TR-03111
Description = bsiEckaEgX963KDFWithSHA224
OID = 0 4 0 127 0 7 1 1 5 1 1 3
Comment = BSI TR-03111
Description = bsiEckaEgX963KDFWithSHA256
OID = 0 4 0 127 0 7 1 1 5 1 1 4
Comment = BSI TR-03111
Description = bsiEckaEgX963KDFWithSHA384
OID = 0 4 0 127 0 7 1 1 5 1 1 5
Comment = BSI TR-03111
Description = bsiEckaEgX963KDFWithSHA512
OID = 0 4 0 127 0 7 1 1 5 1 1 6
Comment = BSI TR-03111
Description = bsiEckaEgX963KDFWithRIPEMD160
OID = 0 4 0 127 0 7 1 1 5 1 2
Comment = BSI TR-03111
Description = bsiEckaEgSessionKDF
OID = 0 4 0 127 0 7 1 1 5 1 2 1
Comment = BSI TR-03111
Description = bsiEckaEgSessionKDFWith3DES
OID = 0 4 0 127 0 7 1 1 5 1 2 2
Comment = BSI TR-03111
Description = bsiEckaEgSessionKDFWithAES128
OID = 0 4 0 127 0 7 1 1 5 1 2 3
Comment = BSI TR-03111
Description = bsiEckaEgSessionKDFWithAES192
OID = 0 4 0 127 0 7 1 1 5 1 2 4
Comment = BSI TR-03111
Description = bsiEckaEgSessionKDFWithAES256
OID = 0 4 0 127 0 7 1 1 5 2
Comment = BSI TR-03111
Description = bsiEckaDH
OID = 0 4 0 127 0 7 1 1 5 2 1
Comment = BSI TR-03111
Description = bsiEckaDHX963KDF
OID = 0 4 0 127 0 7 1 1 5 2 1 1
Comment = BSI TR-03111
Description = bsiEckaDHX963KDFWithSHA1
OID = 0 4 0 127 0 7 1 1 5 2 1 2
Comment = BSI TR-03111
Description = bsiEckaDHX963KDFWithSHA224
OID = 0 4 0 127 0 7 1 1 5 2 1 3
Comment = BSI TR-03111
Description = bsiEckaDHX963KDFWithSHA256
OID = 0 4 0 127 0 7 1 1 5 2 1 4
Comment = BSI TR-03111
Description = bsiEckaDHX963KDFWithSHA384
OID = 0 4 0 127 0 7 1 1 5 2 1 5
Comment = BSI TR-03111
Description = bsiEckaDHX963KDFWithSHA512
OID = 0 4 0 127 0 7 1 1 5 2 1 6
Comment = BSI TR-03111
Description = bsiEckaDHX963KDFWithRIPEMD160
OID = 0 4 0 127 0 7 1 1 5 2 2
Comment = BSI TR-03111
Description = bsiEckaDHSessionKDF
OID = 0 4 0 127 0 7 1 1 5 2 2 1
Comment = BSI TR-03111
Description = bsiEckaDHSessionKDFWith3DES
OID = 0 4 0 127 0 7 1 1 5 2 2 2
Comment = BSI TR-03111
Description = bsiEckaDHSessionKDFWithAES128
OID = 0 4 0 127 0 7 1 1 5 2 2 3
Comment = BSI TR-03111
Description = bsiEckaDHSessionKDFWithAES192
OID = 0 4 0 127 0 7 1 1 5 2 2 4
Comment = BSI TR-03111
Description = bsiEckaDHSessionKDFWithAES256
OID = 0 4 0 127 0 7 1 2
Comment = BSI TR-03111
Description = bsiEcKeyType
OID = 0 4 0 127 0 7 1 2 1
Comment = BSI TR-03111
Description = bsiEcPublicKey
OID = 0 4 0 127 0 7 1 5 1
Comment = BSI TR-03111
Description = bsiKaeg
OID = 0 4 0 127 0 7 1 5 1 1
Comment = BSI TR-03111
Description = bsiKaegWithX963KDF
OID = 0 4 0 127 0 7 1 5 1 2
Comment = BSI TR-03111
Description = bsiKaegWith3DESKDF
OID = 0 4 0 127 0 7 2 2 1
Comment = BSI TR-03110. Formerly known as bsiCA, now moved to ...2.2.3.x
Description = bsiPK
OID = 0 4 0 127 0 7 2 2 1 1
Comment = BSI TR-03110. Formerly known as bsiCA_DH, now moved to ...2.2.3.x
Description = bsiPK_DH
OID = 0 4 0 127 0 7 2 2 1 2
Comment = BSI TR-03110. Formerly known as bsiCA_ECDH, now moved to ...2.2.3.x
Description = bsiPK_ECDH
OID = 0 4 0 127 0 7 2 2 2
Comment = BSI TR-03110
Description = bsiTA
OID = 0 4 0 127 0 7 2 2 2 1
Comment = BSI TR-03110
Description = bsiTA_RSA
OID = 0 4 0 127 0 7 2 2 2 1 1
Comment = BSI TR-03110
Description = bsiTA_RSAv1_5_SHA1
OID = 0 4 0 127 0 7 2 2 2 1 2
Comment = BSI TR-03110
Description = bsiTA_RSAv1_5_SHA256
OID = 0 4 0 127 0 7 2 2 2 1 3
Comment = BSI TR-03110
Description = bsiTA_RSAPSS_SHA1
OID = 0 4 0 127 0 7 2 2 2 1 4
Comment = BSI TR-03110
Description = bsiTA_RSAPSS_SHA256
OID = 0 4 0 127 0 7 2 2 2 1 5
Comment = BSI TR-03110
Description = bsiTA_RSAv1_5_SHA512
OID = 0 4 0 127 0 7 2 2 2 1 6
Comment = BSI TR-03110
Description = bsiTA_RSAPSS_SHA512
OID = 0 4 0 127 0 7 2 2 2 2
Comment = BSI TR-03110
Description = bsiTA_ECDSA
OID = 0 4 0 127 0 7 2 2 2 2 1
Comment = BSI TR-03110
Description = bsiTA_ECDSA_SHA1
OID = 0 4 0 127 0 7 2 2 2 2 2
Comment = BSI TR-03110
Description = bsiTA_ECDSA_SHA224
OID = 0 4 0 127 0 7 2 2 2 2 3
Comment = BSI TR-03110
Description = bsiTA_ECDSA_SHA256
OID = 0 4 0 127 0 7 2 2 2 2 4
Comment = BSI TR-03110
Description = bsiTA_ECDSA_SHA384
OID = 0 4 0 127 0 7 2 2 2 2 5
Comment = BSI TR-03110
Description = bsiTA_ECDSA_SHA512
OID = 0 4 0 127 0 7 2 2 3
Comment = BSI TR-03110
Description = bsiCA
OID = 0 4 0 127 0 7 2 2 3 1
Comment = BSI TR-03110
Description = bsiCA_DH
OID = 0 4 0 127 0 7 2 2 3 1 1
Comment = BSI TR-03110
Description = bsiCA_DH_3DES_CBC_CBC
OID = 0 4 0 127 0 7 2 2 3 1 2
Comment = BSI TR-03110
Description = bsiCA_DH_AES_CBC_CMAC_128
OID = 0 4 0 127 0 7 2 2 3 1 3
Comment = BSI TR-03110
Description = bsiCA_DH_AES_CBC_CMAC_192
OID = 0 4 0 127 0 7 2 2 3 1 4
Comment = BSI TR-03110
Description = bsiCA_DH_AES_CBC_CMAC_256
OID = 0 4 0 127 0 7 2 2 3 2
Comment = BSI TR-03110
Description = bsiCA_ECDH
OID = 0 4 0 127 0 7 2 2 3 2 1
Comment = BSI TR-03110
Description = bsiCA_ECDH_3DES_CBC_CBC
OID = 0 4 0 127 0 7 2 2 3 2 2
Comment = BSI TR-03110
Description = bsiCA_ECDH_AES_CBC_CMAC_128
OID = 0 4 0 127 0 7 2 2 3 2 3
Comment = BSI TR-03110
Description = bsiCA_ECDH_AES_CBC_CMAC_192
OID = 0 4 0 127 0 7 2 2 3 2 4
Comment = BSI TR-03110
Description = bsiCA_ECDH_AES_CBC_CMAC_256
OID = 0 4 0 127 0 7 2 2 4
Comment = BSI TR-03110
Description = bsiPACE
OID = 0 4 0 127 0 7 2 2 4 1
Comment = BSI TR-03110
Description = bsiPACE_DH_GM
OID = 0 4 0 127 0 7 2 2 4 1 1
Comment = BSI TR-03110
Description = bsiPACE_DH_GM_3DES_CBC_CBC
OID = 0 4 0 127 0 7 2 2 4 1 2
Comment = BSI TR-03110
Description = bsiPACE_DH_GM_AES_CBC_CMAC_128
OID = 0 4 0 127 0 7 2 2 4 1 3
Comment = BSI TR-03110
Description = bsiPACE_DH_GM_AES_CBC_CMAC_192
OID = 0 4 0 127 0 7 2 2 4 1 4
Comment = BSI TR-03110
Description = bsiPACE_DH_GM_AES_CBC_CMAC_256
OID = 0 4 0 127 0 7 2 2 4 2
Comment = BSI TR-03110
Description = bsiPACE_ECDH_GM
OID = 0 4 0 127 0 7 2 2 4 2 1
Comment = BSI TR-03110
Description = bsiPACE_ECDH_GM_3DES_CBC_CBC
OID = 0 4 0 127 0 7 2 2 4 2 2
Comment = BSI TR-03110
Description = bsiPACE_ECDH_GM_AES_CBC_CMAC_128
OID = 0 4 0 127 0 7 2 2 4 2 3
Comment = BSI TR-03110
Description = bsiPACE_ECDH_GM_AES_CBC_CMAC_192
OID = 0 4 0 127 0 7 2 2 4 2 4
Comment = BSI TR-03110
Description = bsiPACE_ECDH_GM_AES_CBC_CMAC_256
OID = 0 4 0 127 0 7 2 2 4 3
Comment = BSI TR-03110
Description = bsiPACE_DH_IM
OID = 0 4 0 127 0 7 2 2 4 3 1
Comment = BSI TR-03110
Description = bsiPACE_DH_IM_3DES_CBC_CBC
OID = 0 4 0 127 0 7 2 2 4 3 2
Comment = BSI TR-03110
Description = bsiPACE_DH_IM_AES_CBC_CMAC_128
OID = 0 4 0 127 0 7 2 2 4 3 3
Comment = BSI TR-03110
Description = bsiPACE_DH_IM_AES_CBC_CMAC_192
OID = 0 4 0 127 0 7 2 2 4 3 4
Comment = BSI TR-03110
Description = bsiPACE_DH_IM_AES_CBC_CMAC_256
OID = 0 4 0 127 0 7 2 2 4 4
Comment = BSI TR-03110
Description = bsiPACE_ECDH_IM
OID = 0 4 0 127 0 7 2 2 4 4 1
Comment = BSI TR-03110
Description = bsiPACE_ECDH_IM_3DES_CBC_CBC
OID = 0 4 0 127 0 7 2 2 4 4 2
Comment = BSI TR-03110
Description = bsiPACE_ECDH_IM_AES_CBC_CMAC_128
OID = 0 4 0 127 0 7 2 2 4 4 3
Comment = BSI TR-03110
Description = bsiPACE_ECDH_IM_AES_CBC_CMAC_192
OID = 0 4 0 127 0 7 2 2 4 4 4
Comment = BSI TR-03110
Description = bsiPACE_ECDH_IM_AES_CBC_CMAC_256
OID = 0 4 0 127 0 7 2 2 5
Comment = BSI TR-03110
Description = bsiRI
OID = 0 4 0 127 0 7 2 2 5 1
Comment = BSI TR-03110
Description = bsiRI_DH
OID = 0 4 0 127 0 7 2 2 5 1 1
Comment = BSI TR-03110
Description = bsiRI_DH_SHA1
OID = 0 4 0 127 0 7 2 2 5 1 2
Comment = BSI TR-03110
Description = bsiRI_DH_SHA224
OID = 0 4 0 127 0 7 2 2 5 1 3
Comment = BSI TR-03110
Description = bsiRI_DH_SHA256
OID = 0 4 0 127 0 7 2 2 5 1 4
Comment = BSI TR-03110
Description = bsiRI_DH_SHA384
OID = 0 4 0 127 0 7 2 2 5 1 5
Comment = BSI TR-03110
Description = bsiRI_DH_SHA512
OID = 0 4 0 127 0 7 2 2 5 2
Comment = BSI TR-03110
Description = bsiRI_ECDH
OID = 0 4 0 127 0 7 2 2 5 2 1
Comment = BSI TR-03110
Description = bsiRI_ECDH_SHA1
OID = 0 4 0 127 0 7 2 2 5 2 2
Comment = BSI TR-03110
Description = bsiRI_ECDH_SHA224
OID = 0 4 0 127 0 7 2 2 5 2 3
Comment = BSI TR-03110
Description = bsiRI_ECDH_SHA256
OID = 0 4 0 127 0 7 2 2 5 2 4
Comment = BSI TR-03110
Description = bsiRI_ECDH_SHA384
OID = 0 4 0 127 0 7 2 2 5 2 5
Comment = BSI TR-03110
Description = bsiRI_ECDH_SHA512
OID = 0 4 0 127 0 7 2 2 6
Comment = BSI TR-03110
Description = bsiCardInfo
OID = 0 4 0 127 0 7 2 2 7
Comment = BSI TR-03110
Description = bsiEidSecurity
OID = 0 4 0 127 0 7 2 2 8
Comment = BSI TR-03110
Description = bsiPT
OID = 0 4 0 127 0 7 3 1 2
Comment = BSI TR-03110
Description = bsiEACRoles
OID = 0 4 0 127 0 7 3 1 2 1
Comment = BSI TR-03110
Description = bsiEACRolesIS
OID = 0 4 0 127 0 7 3 1 2 2
Comment = BSI TR-03110
Description = bsiEACRolesAT
OID = 0 4 0 127 0 7 3 1 2 3
Comment = BSI TR-03110
Description = bsiEACRolesST
OID = 0 4 0 127 0 7 3 1 3
Comment = BSI TR-03110
Description = bsiTAv2ce
OID = 0 4 0 127 0 7 3 1 3 1
Comment = BSI TR-03110
Description = bsiTAv2ceDescription
OID = 0 4 0 127 0 7 3 1 3 1 1
Comment = BSI TR-03110
Description = bsiTAv2ceDescriptionPlainText
OID = 0 4 0 127 0 7 3 1 3 1 2
Comment = BSI TR-03110
Description = bsiTAv2ceDescriptionIA5String
OID = 0 4 0 127 0 7 3 1 3 1 3
Comment = BSI TR-03110
Description = bsiTAv2ceDescriptionOctetString
OID = 0 4 0 127 0 7 3 1 3 2
Comment = BSI TR-03110
Description = bsiTAv2ceTerminalSector
OID = 0 4 0 127 0 7 3 1 4
Comment = BSI TR-03110
Description = bsiAuxData
OID = 0 4 0 127 0 7 3 1 4 1
Comment = BSI TR-03110
Description = bsiAuxDataBirthday
OID = 0 4 0 127 0 7 3 1 4 2
Comment = BSI TR-03110
Description = bsiAuxDataExpireDate
OID = 0 4 0 127 0 7 3 1 4 3
Comment = BSI TR-03110
Description = bsiAuxDataCommunityID
OID = 0 4 0 127 0 7 3 1 5
Comment = BSI TR-03110
Description = bsiDefectList
OID = 0 4 0 127 0 7 3 1 5 1
Comment = BSI TR-03110
Description = bsiDefectAuthDefect
OID = 0 4 0 127 0 7 3 1 5 1 1
Comment = BSI TR-03110
Description = bsiDefectCertRevoked
OID = 0 4 0 127 0 7 3 1 5 1 2
Comment = BSI TR-03110
Description = bsiDefectCertReplaced
OID = 0 4 0 127 0 7 3 1 5 1 3
Comment = BSI TR-03110
Description = bsiDefectChipAuthKeyRevoked
OID = 0 4 0 127 0 7 3 1 5 1 4
Comment = BSI TR-03110
Description = bsiDefectActiveAuthKeyRevoked
OID = 0 4 0 127 0 7 3 1 5 2
Comment = BSI TR-03110
Description = bsiDefectEPassportDefect
OID = 0 4 0 127 0 7 3 1 5 2 1
Comment = BSI TR-03110
Description = bsiDefectEPassportDGMalformed
OID = 0 4 0 127 0 7 3 1 5 2 2
Comment = BSI TR-03110
Description = bsiDefectSODInvalid
OID = 0 4 0 127 0 7 3 1 5 3
Comment = BSI TR-03110
Description = bsiDefectEIDDefect
OID = 0 4 0 127 0 7 3 1 5 3 1
Comment = BSI TR-03110
Description = bsiDefectEIDDGMalformed
OID = 0 4 0 127 0 7 3 1 5 3 2
Comment = BSI TR-03110
Description = bsiDefectEIDIntegrity
OID = 0 4 0 127 0 7 3 1 5 4
Comment = BSI TR-03110
Description = bsiDefectDocumentDefect
OID = 0 4 0 127 0 7 3 1 5 4 1
Comment = BSI TR-03110
Description = bsiDefectCardSecurityMalformed
OID = 0 4 0 127 0 7 3 1 5 4 2
Comment = BSI TR-03110
Description = bsiDefectChipSecurityMalformed
OID = 0 4 0 127 0 7 3 1 5 4 3
Comment = BSI TR-03110
Description = bsiDefectPowerDownReq
OID = 0 4 0 127 0 7 3 1 6
Comment = BSI TR-03110
Description = bsiListContentDescription
OID = 0 4 0 127 0 7 3 2 1
Comment = BSI TR-03110
Description = bsiSecurityObject
OID = 0 4 0 127 0 7 3 2 2
Comment = BSI TR-03110
Description = bsiBlackList
OID = 0 4 0 127 0 7 3 4 2 2
Comment = BSI TR-03109
Description = bsiSignedUpdateDeviceAdmin
OID = 0 4 0 127 0 7 4 1 1 1
Comment = BSI TR-03109
Description = bsiCertReqMsgs
OID = 0 4 0 127 0 7 4 1 1 2
Comment = BSI TR-03109
Description = bsiCertReqMsgswithOuterSignature
OID = 0 4 0 127 0 7 4 1 1 3
Comment = BSI TR-03109
Description = bsiAuthorizedCertReqMsgs
OID = 0 4 0 127 0 7 4 1 2 2
Comment = BSI TR-03109
Description = bsiSignedRevReqs
# ETSI TS 101 862 V1.3.3 (2006-01), Qualified certificate profile
OID = 0 4 0 1862
Comment = ETSI TS 101 862 Qualified Certificates
Description = etsiQcsProfile
OID = 0 4 0 1862 1
Comment = ETSI TS 101 862 Qualified Certificates
Description = etsiQcs
OID = 0 4 0 1862 1 1
Comment = ETSI TS 101 862 Qualified Certificates
Description = etsiQcsCompliance
OID = 0 4 0 1862 1 2
Comment = ETSI TS 101 862 Qualified Certificates
Description = etsiQcsLimitValue
OID = 0 4 0 1862 1 3
Comment = ETSI TS 101 862 Qualified Certificates
Description = etsiQcsRetentionPeriod
OID = 0 4 0 1862 1 4
Comment = ETSI TS 101 862 Qualified Certificates
Description = etsiQcsQcSSCD
OID = 0 4 0 1862 1 5
Comment = ETSI TS 101 862 Qualified Certificates
Description = etsiQcsQcPDS
OID = 0 4 0 1862 1 6
Comment = ETSI TS 101 862 Qualified Certificates
Description = etsiQcsQcType
OID = 0 4 0 1862 1 6 1
Comment = ETSI TS 101 862 Qualified Certificates
Description = etsiQcsQctEsign
OID = 0 4 0 1862 1 6 2
Comment = ETSI TS 101 862 Qualified Certificates
Description = etsiQcsQctEseal
OID = 0 4 0 1862 1 6 3
Comment = ETSI TS 101 862 Qualified Certificates
Description = etsiQcsQctWeb
# ETSI TS 102 042 V2.4.1 (2013-02), Policy requirements for certification
# authorities issuing public key certificates
OID = 0 4 0 2042 1 1
Comment = ETSI TS 102 042 Certificate Policies
Description = normalisedCertificatePolicy
OID = 0 4 0 2042 1 2
Comment = ETSI TS 102 042 Certificate Policies
Description = normalisedCertificatePolicyPlus
OID = 0 4 0 2042 1 3
Comment = ETSI TS 102 042 Certificate Policies
Description = lightweightCertificatePolicy
OID = 0 4 0 2042 1 4
Comment = ETSI TS 102 042 Certificate Policies
Description = evCertificatePolicy
OID = 0 4 0 2042 1 5
Comment = ETSI TS 102 042 Certificate Policies
Description = evCertificatePolicyPlus
OID = 0 4 0 2042 1 6
Comment = ETSI TS 102 042 Certificate Policies
Description = dvCertificatePolicy
OID = 0 4 0 2042 1 7
Comment = ETSI TS 102 042 Certificate Policies
Description = ovCertificatePolicy
# EU Qualified Certificates
OID = 0 4 0 194112 1 0
Comment = EU Qualified Certificate Policy
Description = qcpNatural
OID = 0 4 0 194112 1 1
Comment = EU Qualified Certificate Policy
Description = qcpLegal
OID = 0 4 0 194112 1 2
Comment = EU Qualified Certificate Policy
Description = qcpNaturalQscd
OID = 0 4 0 194112 1 3
Comment = EU Qualified Certificate Policy
Description = qcpLegalQscd
OID = 0 4 0 194112 1 4
Comment = EU Qualified Certificate Policy
Description = qcpWeb
OID = 0 4 0 194121 1 1
Comment = EU Qualified Certificate Identifier
Description = qcsSemanticsIdNatural
OID = 0 4 0 194121 1 2
Comment = EU Qualified Certificate Identifier
Description = qcsSemanticsIdLegal
OID = 0 4 0 194121 1 3
Comment = EU Qualified Certificate Identifier
Description = qcsSemanticsIdeIDASNatural
OID = 0 4 0 194121 1 4
Comment = EU Qualified Certificate Identifier
Description = qcsSemanticsIdeIDASLegal
# RFC 1274 (X.500 attribute collection from the UK, thus the weird OID).
OID = 0 9 2342 19200300 100 1 1
Comment = Some oddball X.500 attribute collection
Description = userID
OID = 0 9 2342 19200300 100 1 3
Comment = Some oddball X.500 attribute collection
Description = rfc822Mailbox
# RFC 2247, How to Kludge an FQDN as a DN (or words to that effect), another
# fine product of the place that brought us X.25 (also present in the above
# mentioned RFC 1274).
OID = 0 9 2342 19200300 100 1 25
Comment = Men are from Mars, this OID is from Pluto
Description = domainComponent
# ISO standards
OID = 1 0 10118 3 0 49
Comment = ISO 10118-3 hash function
Description = ripemd160
OID = 1 0 10118 3 0 50
Comment = ISO 10118-3 hash function
Description = ripemd128
OID = 1 0 10118 3 0 55
Comment = ISO 10118-3 hash function
Description = whirlpool
OID = 1 0 18033 2
Comment = ISO 18033-2
Description = iso18033-2
OID = 1 0 18033 2 2
Comment = ISO 18033-2 algorithms
Description = kem
OID = 1 0 18033 2 2 4
Comment = ISO 18033-2 KEM algorithms
Description = kemRSA
# Queensland Government PKI
OID = 1 2 36 1 3 1 1 1
Comment = Queensland Government PKI
Description = qgpki
OID = 1 2 36 1 3 1 1 1 1
Comment = QGPKI policies
Description = qgpkiPolicies
OID = 1 2 36 1 3 1 1 1 1 1
Comment = QGPKI policy
Description = qgpkiMedIntermedCA
OID = 1 2 36 1 3 1 1 1 1 1 1
Comment = QGPKI policy
Description = qgpkiMedIntermedIndividual
OID = 1 2 36 1 3 1 1 1 1 1 2
Comment = QGPKI policy
Description = qgpkiMedIntermedDeviceControl
OID = 1 2 36 1 3 1 1 1 1 1 3
Comment = QGPKI policy
Description = qgpkiMedIntermedDevice
OID = 1 2 36 1 3 1 1 1 1 1 4
Comment = QGPKI policy
Description = qgpkiMedIntermedAuthorisedParty
OID = 1 2 36 1 3 1 1 1 1 1 5
Comment = QGPKI policy
Description = qgpkiMedIntermedDeviceSystem
OID = 1 2 36 1 3 1 1 1 1 2
Comment = QGPKI policy
Description = qgpkiMedIssuingCA
OID = 1 2 36 1 3 1 1 1 1 2 1
Comment = QGPKI policy
Description = qgpkiMedIssuingIndividual
OID = 1 2 36 1 3 1 1 1 1 2 2
Comment = QGPKI policy
Description = qgpkiMedIssuingDeviceControl
OID = 1 2 36 1 3 1 1 1 1 2 3
Comment = QGPKI policy
Description = qgpkiMedIssuingDevice
OID = 1 2 36 1 3 1 1 1 1 2 4
Comment = QGPKI policy
Description = qgpkiMedIssuingAuthorisedParty
OID = 1 2 36 1 3 1 1 1 1 2 5
Comment = QGPKI policy
Description = qgpkiMedIssuingClientAuth
OID = 1 2 36 1 3 1 1 1 1 2 6
Comment = QGPKI policy
Description = qgpkiMedIssuingServerAuth
OID = 1 2 36 1 3 1 1 1 1 2 7
Comment = QGPKI policy
Description = qgpkiMedIssuingDataProt
OID = 1 2 36 1 3 1 1 1 1 2 8
Comment = QGPKI policy
Description = qgpkiMedIssuingTokenAuth
OID = 1 2 36 1 3 1 1 1 1 3
Comment = QGPKI policy
Description = qgpkiBasicIntermedCA
OID = 1 2 36 1 3 1 1 1 1 3 1
Comment = QGPKI policy
Description = qgpkiBasicIntermedDeviceSystem
OID = 1 2 36 1 3 1 1 1 1 4
Comment = QGPKI policy
Description = qgpkiBasicIssuingCA
OID = 1 2 36 1 3 1 1 1 1 4 1
Comment = QGPKI policy
Description = qgpkiBasicIssuingClientAuth
OID = 1 2 36 1 3 1 1 1 1 4 2
Comment = QGPKI policy
Description = qgpkiBasicIssuingServerAuth
OID = 1 2 36 1 3 1 1 1 1 4 3
Comment = QGPKI policy
Description = qgpkiBasicIssuingDataSigning
OID = 1 2 36 1 3 1 1 1 2
Comment = QGPKI assurance level
Description = qgpkiAssuranceLevel
OID = 1 2 36 1 3 1 1 1 2 1
Comment = QGPKI assurance level
Description = qgpkiAssuranceRudimentary
OID = 1 2 36 1 3 1 1 1 2 2
Comment = QGPKI assurance level
Description = qgpkiAssuranceBasic
OID = 1 2 36 1 3 1 1 1 2 3
Comment = QGPKI assurance level
Description = qgpkiAssuranceMedium
OID = 1 2 36 1 3 1 1 1 2 4
Comment = QGPKI assurance level
Description = qgpkiAssuranceHigh
OID = 1 2 36 1 3 1 1 1 3
Comment = QGPKI policies
Description = qgpkiCertFunction
OID = 1 2 36 1 3 1 1 1 3 1
Comment = QGPKI policies
Description = qgpkiFunctionIndividual
OID = 1 2 36 1 3 1 1 1 3 2
Comment = QGPKI policies
Description = qgpkiFunctionDevice
OID = 1 2 36 1 3 1 1 1 3 3
Comment = QGPKI policies
Description = qgpkiFunctionAuthorisedParty
OID = 1 2 36 1 3 1 1 1 3 4
Comment = QGPKI policies
Description = qgpkiFunctionDeviceControl
OID = 1 2 36 1 3 1 2
Comment = Queensland Police PKI
Description = qpspki
OID = 1 2 36 1 3 1 2 1
Comment = Queensland Police PKI
Description = qpspkiPolicies
OID = 1 2 36 1 3 1 2 1 2
Comment = Queensland Police PKI
Description = qpspkiPolicyBasic
OID = 1 2 36 1 3 1 2 1 3
Comment = Queensland Police PKI
Description = qpspkiPolicyMedium
OID = 1 2 36 1 3 1 2 1 4
Comment = Queensland Police PKI
Description = qpspkiPolicyHigh
OID = 1 2 36 1 3 1 3 2
Comment = Queensland Transport PKI
Description = qtmrpki
OID = 1 2 36 1 3 1 3 2 1
Comment = Queensland Transport PKI
Description = qtmrpkiPolicies
OID = 1 2 36 1 3 1 3 2 2
Comment = Queensland Transport PKI
Description = qtmrpkiPurpose
OID = 1 2 36 1 3 1 3 2 2 1
Comment = Queensland Transport PKI purpose
Description = qtmrpkiIndividual
OID = 1 2 36 1 3 1 3 2 2 2
Comment = Queensland Transport PKI purpose
Description = qtmrpkiDeviceControl
OID = 1 2 36 1 3 1 3 2 2 3
Comment = Queensland Transport PKI purpose
Description = qtmrpkiDevice
OID = 1 2 36 1 3 1 3 2 2 4
Comment = Queensland Transport PKI purpose
Description = qtmrpkiAuthorisedParty
OID = 1 2 36 1 3 1 3 2 2 5
Comment = Queensland Transport PKI purpose
Description = qtmrpkiDeviceSystem
OID = 1 2 36 1 3 1 3 2 3
Comment = Queensland Transport PKI
Description = qtmrpkiDevice
OID = 1 2 36 1 3 1 3 2 3 1
Comment = Queensland Transport PKI device
Description = qtmrpkiDriverLicense
OID = 1 2 36 1 3 1 3 2 3 2
Comment = Queensland Transport PKI device
Description = qtmrpkiIndustryAuthority
OID = 1 2 36 1 3 1 3 2 3 3
Comment = Queensland Transport PKI device
Description = qtmrpkiMarineLicense
OID = 1 2 36 1 3 1 3 2 3 4
Comment = Queensland Transport PKI device
Description = qtmrpkiAdultProofOfAge
OID = 1 2 36 1 3 1 3 2 3 5
Comment = Queensland Transport PKI device
Description = qtmrpkiSam
OID = 1 2 36 1 3 1 3 2 4
Comment = Queensland Transport PKI
Description = qtmrpkiAuthorisedParty
OID = 1 2 36 1 3 1 3 2 4 1
Comment = Queensland Transport PKI authorised party
Description = qtmrpkiTransportInspector
OID = 1 2 36 1 3 1 3 2 4 2
Comment = Queensland Transport PKI authorised party
Description = qtmrpkiPoliceOfficer
OID = 1 2 36 1 3 1 3 2 4 3
Comment = Queensland Transport PKI authorised party
Description = qtmrpkiSystem
OID = 1 2 36 1 3 1 3 2 4 4
Comment = Queensland Transport PKI authorised party
Description = qtmrpkiLiquorLicensingInspector
OID = 1 2 36 1 3 1 3 2 4 5
Comment = Queensland Transport PKI authorised party
Description = qtmrpkiMarineEnforcementOfficer
# Australian Government
OID = 1 2 36 1 333 1
Comment = Australian Government corporate taxpayer ID
Description = australianBusinessNumber
# Signet
#
# Australia uses the corporate tax identifier (ABN) as de facto unique
# identifiers in OIDs, thus the bizarre fourth value. See also Certs
# Australia below and other Australian corporate OIDs.
OID = 1 2 36 68980861 1 1 2
Comment = Signet CA
Description = signetPersonal
OID = 1 2 36 68980861 1 1 3
Comment = Signet CA
Description = signetBusiness
OID = 1 2 36 68980861 1 1 4
Comment = Signet CA
Description = signetLegal
OID = 1 2 36 68980861 1 1 10
Comment = Signet CA
Description = signetPilot
OID = 1 2 36 68980861 1 1 11
Comment = Signet CA
Description = signetIntraNet
OID = 1 2 36 68980861 1 1 20
Comment = Signet CA
Description = signetPolicy
# Certificates Australia.
OID = 1 2 36 75878867 1 100 1 1
Comment = Certificates Australia CA
Description = certificatesAustraliaPolicy
# Belarus
OID = 1 2 112 0 2 0 34 101 45 2 1
Comment = Belarus STB 34.101.45
Description = bignPubkey
OID = 1 2 112 0 2 0 34 101 45 3 1
Comment = Belarus STB 34.101.45
Description = bignParamB1
OID = 1 2 112 0 2 0 34 101 45 3 2
Comment = Belarus STB 34.101.45
Description = bignParamB2
OID = 1 2 112 0 2 0 34 101 45 3 3
Comment = Belarus STB 34.101.45
Description = bignParamB3
OID = 1 2 112 0 2 0 34 101 45 11
Comment = Belarus STB 34.101.45
Description = bignWithHSpec
OID = 1 2 112 0 2 0 34 101 45 12
Comment = Belarus STB 34.101.45
Description = bignWithHBelt
# China GM Standards Committee
OID = 1 2 156 10197 1
Comment = China GM Standards Committee
Description = gmtCryptographicAlgorithm
OID = 1 2 156 10197 1 100
Comment = China GM Standards Committee
Description = gmtBlockCipher
OID = 1 2 156 10197 1 102
Comment = China GM Standards Committee
Description = sm1Cipher
OID = 1 2 156 10197 1 103
Comment = China GM Standards Committee
Description = ssf33Cipher
OID = 1 2 156 10197 1 104
Comment = China GM Standards Committee
Description = sm4Cipher
OID = 1 2 156 10197 1 200
Comment = China GM Standards Committee
Description = gmtStreamCipher
OID = 1 2 156 10197 1 201
Comment = China GM Standards Committee
Description = zucCipher
OID = 1 2 156 10197 1 300
Comment = China GM Standards Committee
Description = gmtPublicKeyCryptography
OID = 1 2 156 10197 1 301
Comment = China GM Standards Committee
Description = sm2ECC
OID = 1 2 156 10197 1 301 1
Comment = China GM Standards Committee
Description = sm2-1DigitalSignature
OID = 1 2 156 10197 1 301 2
Comment = China GM Standards Committee
Description = sm2-2KeyExchange
OID = 1 2 156 10197 1 301 3
Comment = China GM Standards Committee
Description = sm2-3PublicKeyEncryption
OID = 1 2 156 10197 1 302
Comment = China GM Standards Committee
Description = gmtSM9IBE
OID = 1 2 156 10197 1 302 1
Comment = China GM Standards Committee
Description = sm9-1DigitalSignature
OID = 1 2 156 10197 1 302 2
Comment = China GM Standards Committee
Description = sm9-2KeyExchange
OID = 1 2 156 10197 1 302 3
Comment = China GM Standards Committee
Description = sm9-3PublicKeyEncryption
OID = 1 2 156 10197 1 400
Comment = China GM Standards Committee
Description = gmtHashAlgorithm
OID = 1 2 156 10197 1 401
Comment = China GM Standards Committee
Description = sm3Hash
OID = 1 2 156 10197 1 401 1
Comment = China GM Standards Committee
Description = sm3HashWithoutKey
OID = 1 2 156 10197 1 401 2
Comment = China GM Standards Committee
Description = sm3HashWithKey
OID = 1 2 156 10197 1 500
Comment = China GM Standards Committee
Description = gmtDigestSigning
OID = 1 2 156 10197 1 501
Comment = China GM Standards Committee
Description = sm2withSM3
OID = 1 2 156 10197 1 504
Comment = China GM Standards Committee
Description = rsaWithSM3
OID = 1 2 156 10197 4 3
Comment = China GM Standards Committee
Description = gmtCertificateAuthority
OID = 1 2 156 10197 6
Comment = China GM Standards Committee
Description = gmtStandardClass
OID = 1 2 156 10197 6 1
Comment = China GM Standards Committee
Description = gmtFoundationClass
OID = 1 2 156 10197 6 1 1
Comment = China GM Standards Committee
Description = gmtAlgorithmClass
OID = 1 2 156 10197 6 1 1 1
Comment = China GM Standards Committee
Description = zucStandard
OID = 1 2 156 10197 6 1 1 2
Comment = China GM Standards Committee
Description = sm4Standard
OID = 1 2 156 10197 6 1 1 3
Comment = China GM Standards Committee
Description = sm2Standard
OID = 1 2 156 10197 6 1 1 4
Comment = China GM Standards Committee
Description = sm3Standard
OID = 1 2 156 10197 6 1 2
Comment = China GM Standards Committee
Description = gmtIDClass
OID = 1 2 156 10197 6 1 2 1
Comment = China GM Standards Committee
Description = gmtCryptoID
OID = 1 2 156 10197 6 1 3
Comment = China GM Standards Committee
Description = gmtOperationModes
OID = 1 2 156 10197 6 1 4
Comment = China GM Standards Committee
Description = gmtSecurityMechanism
OID = 1 2 156 10197 6 1 4 1
Comment = China GM Standards Committee
Description = gmtSM2Specification
OID = 1 2 156 10197 6 1 4 2
Comment = China GM Standards Committee
Description = gmtSM2CryptographicMessageSyntax
OID = 1 2 156 10197 6 2
Comment = China GM Standards Committee
Description = gmtDeviceClass
OID = 1 2 156 10197 6 3
Comment = China GM Standards Committee
Description = gmtServiceClass
OID = 1 2 156 10197 6 4
Comment = China GM Standards Committee
Description = gmtInfrastructure
OID = 1 2 156 10197 6 5
Comment = China GM Standards Committee
Description = gmtTestingClass
OID = 1 2 156 10197 6 5 1
Comment = China GM Standards Committee
Description = gmtRandomTestingClass
OID = 1 2 156 10197 6 6
Comment = China GM Standards Committee
Description = gmtManagementClass
# Mitsubishi
OID = 1 2 392 200011 61 1 1 1
Comment = Mitsubishi security algorithm
Description = mitsubishiSecurityAlgorithm
OID = 1 2 392 200011 61 1 1 1 1
Comment = Mitsubishi security algorithm
Description = misty1-cbc
# Korean Information Security Agency
OID = 1 2 410 200004 1
Comment = KISA algorithm
Description = kisaAlgorithm
OID = 1 2 410 200004 1 1
Comment = Korean DSA
Description = kcdsa
OID = 1 2 410 200004 1 2
Comment = Korean hash algorithm
Description = has160
OID = 1 2 410 200004 1 3
Comment = Korean SEED algorithm, ECB mode
Description = seedECB
OID = 1 2 410 200004 1 4
Comment = Korean SEED algorithm, CBC mode
Description = seedCBC
OID = 1 2 410 200004 1 5
Comment = Korean SEED algorithm, OFB mode
Description = seedOFB
OID = 1 2 410 200004 1 6
Comment = Korean SEED algorithm, CFB mode
Description = seedCFB
OID = 1 2 410 200004 1 7
Comment = Korean SEED algorithm, MAC mode
Description = seedMAC
OID = 1 2 410 200004 1 8
Comment = Korean signature algorithm
Description = kcdsaWithHAS160
OID = 1 2 410 200004 1 9
Comment = Korean signature algorithm
Description = kcdsaWithSHA1
OID = 1 2 410 200004 1 10
Comment = Korean SEED algorithm, PBE key derivation
Description = pbeWithHAS160AndSEED-ECB
OID = 1 2 410 200004 1 11
Comment = Korean SEED algorithm, PBE key derivation
Description = pbeWithHAS160AndSEED-CBC
OID = 1 2 410 200004 1 12
Comment = Korean SEED algorithm, PBE key derivation
Description = pbeWithHAS160AndSEED-CFB
OID = 1 2 410 200004 1 13
Comment = Korean SEED algorithm, PBE key derivation
Description = pbeWithHAS160AndSEED-OFB
OID = 1 2 410 200004 1 14
Comment = Korean SEED algorithm, PBE key derivation
Description = pbeWithSHA1AndSEED-ECB
OID = 1 2 410 200004 1 15
Comment = Korean SEED algorithm, PBE key derivation
Description = pbeWithSHA1AndSEED-CBC
OID = 1 2 410 200004 1 16
Comment = Korean SEED algorithm, PBE key derivation
Description = pbeWithSHA1AndSEED-CFB
OID = 1 2 410 200004 1 17
Comment = Korean SEED algorithm, PBE key derivation
Description = pbeWithSHA1AndSEED-OFB
OID = 1 2 410 200004 1 20
Comment = Korean signature algorithm
Description = rsaWithHAS160
OID = 1 2 410 200004 1 21
Comment = Korean DSA
Description = kcdsa1
OID = 1 2 410 200004 2
Comment = KISA NPKI certificate policies
Description = npkiCP
OID = 1 2 410 200004 2 1
Comment = KISA NPKI certificate policies
Description = npkiSignaturePolicy
OID = 1 2 410 200004 3
Comment = KISA NPKI key usage
Description = npkiKP
OID = 1 2 410 200004 4
Comment = KISA NPKI attribute
Description = npkiAT
OID = 1 2 410 200004 5
Comment = KISA NPKI licensed CA
Description = npkiLCA
OID = 1 2 410 200004 5 1
Comment = KISA NPKI licensed CA
Description = npkiSignKorea
OID = 1 2 410 200004 5 2
Comment = KISA NPKI licensed CA
Description = npkiSignGate
OID = 1 2 410 200004 5 3
Comment = KISA NPKI licensed CA
Description = npkiNcaSign
OID = 1 2 410 200004 6
Comment = KISA NPKI otherName
Description = npkiON
OID = 1 2 410 200004 7
Comment = KISA NPKI application
Description = npkiAPP
OID = 1 2 410 200004 7 1
Comment = KISA NPKI application
Description = npkiSMIME
OID = 1 2 410 200004 7 1 1
Comment = KISA NPKI application
Description = npkiSMIMEAlgo
OID = 1 2 410 200004 7 1 1 1
Comment = KISA NPKI application
Description = npkiCmsSEEDWrap
OID = 1 2 410 200004 10
Comment = KISA NPKI
Description = npki
OID = 1 2 410 200004 10 1
Comment = KISA NPKI attribute
Description = npkiAttribute
OID = 1 2 410 200004 10 1 1
Comment = KISA NPKI attribute
Description = npkiIdentifyData
# Duplicates 1 2 410 200004 10 1 1 4
OID = 1 2 410 200004 10 1 1 1
Comment = KISA NPKI attribute
Description = npkiVID
OID = 1 2 410 200004 10 1 1 2
Comment = KISA NPKI attribute
Description = npkiEncryptedVID
OID = 1 2 410 200004 10 1 1 3
Comment = KISA NPKI attribute
Description = npkiRandomNum
# Duplicates 1 2 410 200004 10 1 1 1
OID = 1 2 410 200004 10 1 1 4
Comment = KISA NPKI attribute
Description = npkiVID
# Korean National Security Research Institute
OID = 1 2 410 200046 1 1
Comment = ARIA algorithm modes
Description = aria1AlgorithmModes
OID = 1 2 410 200046 1 1 1
Comment = ARIA algorithm modes
Description = aria128-ecb
OID = 1 2 410 200046 1 1 2
Comment = ARIA algorithm modes
Description = aria128-cbc
OID = 1 2 410 200046 1 1 3
Comment = ARIA algorithm modes
Description = aria128-cfb
OID = 1 2 410 200046 1 1 4
Comment = ARIA algorithm modes
Description = aria128-ofb
OID = 1 2 410 200046 1 1 5
Comment = ARIA algorithm modes
Description = aria128-ctr
OID = 1 2 410 200046 1 1 6
Comment = ARIA algorithm modes
Description = aria192-ecb
OID = 1 2 410 200046 1 1 7
Comment = ARIA algorithm modes
Description = aria192-cbc
OID = 1 2 410 200046 1 1 8
Comment = ARIA algorithm modes
Description = aria192-cfb
OID = 1 2 410 200046 1 1 9
Comment = ARIA algorithm modes
Description = aria192-ofb
OID = 1 2 410 200046 1 1 10
Comment = ARIA algorithm modes
Description = aria192-ctr
OID = 1 2 410 200046 1 1 11
Comment = ARIA algorithm modes
Description = aria256-ecb
OID = 1 2 410 200046 1 1 12
Comment = ARIA algorithm modes
Description = aria256-cbc
OID = 1 2 410 200046 1 1 13
Comment = ARIA algorithm modes
Description = aria256-cfb
OID = 1 2 410 200046 1 1 14
Comment = ARIA algorithm modes
Description = aria256-ofb
OID = 1 2 410 200046 1 1 15
Comment = ARIA algorithm modes
Description = aria256-ctr
OID = 1 2 410 200046 1 1 21
Comment = ARIA algorithm modes
Description = aria128-cmac
OID = 1 2 410 200046 1 1 22
Comment = ARIA algorithm modes
Description = aria192-cmac
OID = 1 2 410 200046 1 1 23
Comment = ARIA algorithm modes
Description = aria256-cmac
OID = 1 2 410 200046 1 1 31
Comment = ARIA algorithm modes
Description = aria128-ocb2
OID = 1 2 410 200046 1 1 32
Comment = ARIA algorithm modes
Description = aria192-ocb2
OID = 1 2 410 200046 1 1 33
Comment = ARIA algorithm modes
Description = aria256-ocb2
OID = 1 2 410 200046 1 1 34
Comment = ARIA algorithm modes
Description = aria128-gcm
OID = 1 2 410 200046 1 1 35
Comment = ARIA algorithm modes
Description = aria192-gcm
OID = 1 2 410 200046 1 1 36
Comment = ARIA algorithm modes
Description = aria256-gcm
OID = 1 2 410 200046 1 1 37
Comment = ARIA algorithm modes
Description = aria128-ccm
OID = 1 2 410 200046 1 1 38
Comment = ARIA algorithm modes
Description = aria192-ccm
OID = 1 2 410 200046 1 1 39
Comment = ARIA algorithm modes
Description = aria256-ccm
OID = 1 2 410 200046 1 1 40
Comment = ARIA algorithm modes
Description = aria128-keywrap
OID = 1 2 410 200046 1 1 41
Comment = ARIA algorithm modes
Description = aria192-keywrap
OID = 1 2 410 200046 1 1 42
Comment = ARIA algorithm modes
Description = aria256-keywrap
OID = 1 2 410 200046 1 1 43
Comment = ARIA algorithm modes
Description = aria128-keywrapWithPad
OID = 1 2 410 200046 1 1 44
Comment = ARIA algorithm modes
Description = aria192-keywrapWithPad
OID = 1 2 410 200046 1 1 45
Comment = ARIA algorithm modes
Description = aria256-keywrapWithPad
# GOST algorithm identifiers, assigned by CryptoPRO (tm) in RFCs and
# implementations
OID = 1 2 643 2 2 3
Comment = GOST R 34.10-2001 + GOST R 34.11-94 signature
Description = gostSignature
OID = 1 2 643 2 2 4
Comment = GOST R 34.10-94 + GOST R 34.11-94 signature. Obsoleted by GOST R 34.10-2001
Description = gost94Signature
Warning
OID = 1 2 643 2 2 19
Comment = GOST R 34.10-2001 (ECC) public key
Description = gostPublicKey
OID = 1 2 643 2 2 20
Comment = GOST R 34.10-94 public key. Obsoleted by GOST R 34.10-2001
Description = gost94PublicKey
Warning
OID = 1 2 643 2 2 21
Comment = GOST 28147-89 (symmetric key block cipher)
Description = gostCipher
OID = 1 2 643 2 2 31 0
Comment = Test params for GOST 28147-89
Description = testCipherParams
OID = 1 2 643 2 2 31 1
Comment = CryptoPro params A (default, variant 'Verba-O') for GOST 28147-89
Description = cryptoProCipherA
OID = 1 2 643 2 2 31 2
Comment = CryptoPro params B (variant 1) for GOST 28147-89
Description = cryptoProCipherB
OID = 1 2 643 2 2 31 3
Comment = CryptoPro params C (variant 2) for GOST 28147-89
Description = cryptoProCipherC
OID = 1 2 643 2 2 31 4
Comment = CryptoPro params D (variant 3) for GOST 28147-89
Description = cryptoProCipherD
OID = 1 2 643 2 2 31 5
Comment = Oscar-1.1 params for GOST 28147-89
Description = oscar11Cipher
OID = 1 2 643 2 2 31 6
Comment = Oscar-1.0 params for GOST 28147-89
Description = oscar10Cipher
OID = 1 2 643 2 2 31 7
Comment = RIC-1 params for GOST 28147-89
Description = ric1Cipher
OID = 1 2 643 2 2 31 12
Comment = TC26 params 2 for GOST 28147-89
Description = tc26CipherA
OID = 1 2 643 2 2 31 13
Comment = TC26 params 1 for GOST 28147-89
Description = tc26CipherB
OID = 1 2 643 2 2 31 14
Comment = TC26 params 3 for GOST 28147-89
Description = tc26CipherC
OID = 1 2 643 2 2 31 15
Comment = TC26 params 4 for GOST 28147-89
Description = tc26CipherD
OID = 1 2 643 2 2 31 16
Comment = TC26 params 5 for GOST 28147-89
Description = tc26CipherE
OID = 1 2 643 2 2 31 17
Comment = TC26 params 6 for GOST 28147-89
Description = tc26CipherF
OID = 1 2 643 7 1 2 5 1 1
Comment = TC26 params Z for GOST 28147-89
Description = tc26CipherZ
OID = 1 2 643 2 2 9
Comment = GOST R 34.11-94 digest
Description = gostDigest
OID = 1 2 643 2 2 30 0
Comment = Test params for GOST R 34.11-94
Description = testDigestParams
OID = 1 2 643 2 2 30 1
Comment = CryptoPro digest params A (default, variant 'Verba-O') for GOST R 34.11-94
Description = cryptoProDigestA
OID = 1 2 643 2 2 30 2
Comment = CryptoPro digest params B (variant 1) for GOST R 34.11-94
Description = cryptoProDigestB
OID = 1 2 643 2 2 30 3
Comment = CryptoPro digest params C (variant 2) for GOST R 34.11-94
Description = cryptoProDigestC
OID = 1 2 643 2 2 30 4
Comment = CryptoPro digest params D (variant 3) for GOST R 34.11-94
Description = cryptoProDigestD
OID = 1 2 643 2 2 32 2
Comment = CryptoPro sign params A (default, variant 'Verba-O') for GOST R 34.10-94
Description = cryptoPro94SignA
OID = 1 2 643 2 2 32 3
Comment = CryptoPro sign params B (variant 1) for GOST R 34.10-94
Description = cryptoPro94SignB
OID = 1 2 643 2 2 32 4
Comment = CryptoPro sign params C (variant 2) for GOST R 34.10-94
Description = cryptoPro94SignC
OID = 1 2 643 2 2 32 5
Comment = CryptoPro sign params D (variant 3) for GOST R 34.10-94
Description = cryptoPro94SignD
OID = 1 2 643 2 2 33 1
Comment = CryptoPro sign params XA (variant 1) for GOST R 34.10-94
Description = cryptoPro94SignXA
OID = 1 2 643 2 2 33 2
Comment = CryptoPro sign params XB (variant 2) for GOST R 34.10-94
Description = cryptoPro94SignXB
OID = 1 2 643 2 2 33 3
Comment = CryptoPro sign params XC (variant 3) for GOST R 34.10-94
Description = cryptoPro94SignXC
OID = 1 2 643 2 2 35 0
Comment = Test elliptic curve for GOST R 34.10-2001
Description = testSignParams
OID = 1 2 643 2 2 35 1
Comment = CryptoPro ell.curve A for GOST R 34.10-2001
Description = cryptoProSignA
OID = 1 2 643 2 2 35 2
Comment = CryptoPro ell.curve B for GOST R 34.10-2001
Description = cryptoProSignB
OID = 1 2 643 2 2 35 3
Comment = CryptoPro ell.curve C for GOST R 34.10-2001
Description = cryptoProSignC
OID = 1 2 643 2 2 36 0
Comment = CryptoPro ell.curve XA for GOST R 34.10-2001
Description = cryptoProSignXA
OID = 1 2 643 2 2 36 1
Comment = CryptoPro ell.curve XB for GOST R 34.10-2001
Description = cryptoProSignXB
OID = 1 2 643 7 1 2 1 1 1
Comment = CryptoPro ell.curve A for GOST R 34.10-2012 256 bit
Description = cryptoPro2012Sign256A
OID = 1 2 643 7 1 2 1 2 1
Comment = CryptoPro ell.curve A (default) for GOST R 34.10-2012 512 bit
Description = cryptoPro2012Sign512A
OID = 1 2 643 7 1 2 1 2 2
Comment = CryptoPro ell.curve B for GOST R 34.10-2012 512 bit
Description = cryptoPro2012Sign512B
OID = 1 2 643 7 1 2 1 2 3
Comment = CryptoPro ell.curve C for GOST R 34.10-2012 512 bit
Description = cryptoPro2012Sign512C
OID = 1 2 643 2 2 14 0
Comment = Do not mesh state of GOST 28147-89 cipher
Description = nullMeshing
OID = 1 2 643 2 2 14 1
Comment = CryptoPro meshing of state of GOST 28147-89 cipher
Description = cryptoProMeshing
OID = 1 2 643 2 2 10
Comment = HMAC with GOST R 34.11-94
Description = hmacGost
OID = 1 2 643 2 2 13 0
Comment = Wrap key using GOST 28147-89 key
Description = gostWrap
OID = 1 2 643 2 2 13 1
Comment = Wrap key using diversified GOST 28147-89 key
Description = cryptoProWrap
OID = 1 2 643 2 2 96
Comment = Wrap key using ECC DH on GOST R 34.10-2001 keys (VKO)
Description = cryptoProECDHWrap
OID = 1 2 643 7 1 1 1 1
Comment = GOST R 34.10-2012 256 bit public key
Description = gost2012PublicKey256
OID = 1 2 643 7 1 1 1 2
Comment = GOST R 34.10-2012 512 bit public key
Description = gost2012PublicKey512
OID = 1 2 643 7 1 1 2 2
Comment = GOST R 34.11-2012 256 bit digest
Description = gost2012Digest256
OID = 1 2 643 7 1 1 2 3
Comment = GOST R 34.11-2012 512 bit digest
Description = gost2012Digest512
OID = 1 2 643 7 1 1 3 2
Comment = GOST R 34.10-2012 256 bit signature
Description = gost2012Signature256
OID = 1 2 643 7 1 1 3 3
Comment = GOST R 34.10-2012 512 bit signature
Description = gost2012Signature512
OID = 1 2 643 7 1 1 6 1
Comment = CryptoPro ECC DH algorithm for GOST R 34.10-2012 256 bit key
Description = cryptoProECDH256
OID = 1 2 643 7 1 1 6 2
Comment = CryptoPro ECC DH algorithm for GOST R 34.10-2012 512 bit key
Description = cryptoProECDH512
OID = 1 2 643 100 113 1
Comment = CryptoPro GOST
Description = cryptoProClassSignToolKC1
OID = 1 2 643 100 113 2
Comment = CryptoPro GOST
Description = cryptoProClassSignToolKC2
OID = 1 2 643 100 113 3
Comment = CryptoPro GOST
Description = cryptoProClassSignToolKC3
OID = 1 2 643 100 113 4
Comment = CryptoPro GOST
Description = cryptoProClassSignToolKB1
OID = 1 2 643 100 113 5
Comment = CryptoPro GOST
Description = cryptoProClassSignToolKB2
OID = 1 2 643 100 113 6
Comment = CryptoPro GOST
Description = cryptoProClassSignToolKA1
# SEIS
OID = 1 2 752 34 1
Comment = SEIS Project
Description = seis-cp
OID = 1 2 752 34 1 1
Comment = SEIS Project certificate policies
Description = SEIS high-assurance policyIdentifier
OID = 1 2 752 34 1 2
Comment = SEIS Project certificate policies
Description = SEIS GAK policyIdentifier
OID = 1 2 752 34 2
Comment = SEIS Project
Description = SEIS pe
OID = 1 2 752 34 3
Comment = SEIS Project
Description = SEIS at
OID = 1 2 752 34 3 1
Comment = SEIS Project attribute
Description = SEIS at-personalIdentifier
# ANSI X9.57
OID = 1 2 840 10040 1
Comment = ANSI X9.57
Description = module
OID = 1 2 840 10040 1 1
Comment = ANSI X9.57 module
Description = x9f1-cert-mgmt
OID = 1 2 840 10040 2
Comment = ANSI X9.57
Description = holdinstruction
OID = 1 2 840 10040 2 1
Comment = ANSI X9.57 hold instruction
Description = holdinstruction-none
OID = 1 2 840 10040 2 2
Comment = ANSI X9.57 hold instruction
Description = callissuer
OID = 1 2 840 10040 2 3
Comment = ANSI X9.57 hold instruction
Description = reject
OID = 1 2 840 10040 2 4
Comment = ANSI X9.57 hold instruction
Description = pickupToken
OID = 1 2 840 10040 3
Comment = ANSI X9.57
Description = attribute
OID = 1 2 840 10040 3 1
Comment = ANSI X9.57 attribute
Description = countersignature
OID = 1 2 840 10040 3 2
Comment = ANSI X9.57 attribute
Description = attribute-cert
OID = 1 2 840 10040 4
Comment = ANSI X9.57
Description = algorithm
OID = 1 2 840 10040 4 1
Comment = ANSI X9.57 algorithm
Description = dsa
OID = 1 2 840 10040 4 2
Comment = ANSI X9.57 algorithm
Description = dsa-match
OID = 1 2 840 10040 4 3
Comment = ANSI X9.57 algorithm
Description = dsaWithSha1
# ANSI X9.62
OID = 1 2 840 10045 1
Comment = ANSI X9.62. This OID is also assigned as ecdsa-with-SHA1
Description = fieldType
OID = 1 2 840 10045 1 1
Comment = ANSI X9.62 field type
Description = prime-field
OID = 1 2 840 10045 1 2
Comment = ANSI X9.62 field type
Description = characteristic-two-field
OID = 1 2 840 10045 1 2 3
Comment = ANSI X9.62 field type
Description = characteristic-two-basis
OID = 1 2 840 10045 1 2 3 1
Comment = ANSI X9.62 field basis
Description = onBasis
OID = 1 2 840 10045 1 2 3 2
Comment = ANSI X9.62 field basis
Description = tpBasis
OID = 1 2 840 10045 1 2 3 3
Comment = ANSI X9.62 field basis
Description = ppBasis
# The definition for the following OID is somewhat confused, and is given as
# keyType, publicKeyType, and public-key-type, all within 4 lines of text.
# ecPublicKey is defined using the ID publicKeyType, so this is what's used
# here.
OID = 1 2 840 10045 2
Comment = ANSI X9.62
Description = publicKeyType
OID = 1 2 840 10045 2 1
Comment = ANSI X9.62 public key type
Description = ecPublicKey
OID = 1 2 840 10045 3 0 1
Comment = ANSI X9.62 named elliptic curve
Description = c2pnb163v1
OID = 1 2 840 10045 3 0 2
Comment = ANSI X9.62 named elliptic curve
Description = c2pnb163v2
OID = 1 2 840 10045 3 0 3
Comment = ANSI X9.62 named elliptic curve
Description = c2pnb163v3
OID = 1 2 840 10045 3 0 5
Comment = ANSI X9.62 named elliptic curve
Description = c2tnb191v1
OID = 1 2 840 10045 3 0 6
Comment = ANSI X9.62 named elliptic curve
Description = c2tnb191v2
OID = 1 2 840 10045 3 0 7
Comment = ANSI X9.62 named elliptic curve
Description = c2tnb191v3
OID = 1 2 840 10045 3 0 10
Comment = ANSI X9.62 named elliptic curve
Description = c2pnb208w1
OID = 1 2 840 10045 3 0 11
Comment = ANSI X9.62 named elliptic curve
Description = c2tnb239v1
OID = 1 2 840 10045 3 0 12
Comment = ANSI X9.62 named elliptic curve
Description = c2tnb239v2
OID = 1 2 840 10045 3 0 13
Comment = ANSI X9.62 named elliptic curve
Description = c2tnb239v3
OID = 1 2 840 10045 3 0 16
Comment = ANSI X9.62 named elliptic curve
Description = c2pnb272w1
OID = 1 2 840 10045 3 0 18
Comment = ANSI X9.62 named elliptic curve
Description = c2tnb359v1
OID = 1 2 840 10045 3 0 19
Comment = ANSI X9.62 named elliptic curve
Description = c2pnb368w1
OID = 1 2 840 10045 3 0 20
Comment = ANSI X9.62 named elliptic curve
Description = c2tnb431r1
OID = 1 2 840 10045 3 1 1
Comment = ANSI X9.62 named elliptic curve
Description = prime192v1
OID = 1 2 840 10045 3 1 2
Comment = ANSI X9.62 named elliptic curve
Description = prime192v2
OID = 1 2 840 10045 3 1 3
Comment = ANSI X9.62 named elliptic curve
Description = prime192v3
OID = 1 2 840 10045 3 1 4
Comment = ANSI X9.62 named elliptic curve
Description = prime239v1
OID = 1 2 840 10045 3 1 5
Comment = ANSI X9.62 named elliptic curve
Description = prime239v2
OID = 1 2 840 10045 3 1 6
Comment = ANSI X9.62 named elliptic curve
Description = prime239v3
OID = 1 2 840 10045 3 1 7
Comment = ANSI X9.62 named elliptic curve
Description = prime256v1
OID = 1 2 840 10045 4 1
Comment = ANSI X9.62 ECDSA algorithm with SHA1
Description = ecdsaWithSHA1
OID = 1 2 840 10045 4 2
Comment = ANSI X9.62 ECDSA algorithm with Recommended
Description = ecdsaWithRecommended
OID = 1 2 840 10045 4 3
Comment = ANSI X9.62 ECDSA algorithm with Specified
Description = ecdsaWithSpecified
OID = 1 2 840 10045 4 3 1
Comment = ANSI X9.62 ECDSA algorithm with SHA224
Description = ecdsaWithSHA224
OID = 1 2 840 10045 4 3 2
Comment = ANSI X9.62 ECDSA algorithm with SHA256
Description = ecdsaWithSHA256
OID = 1 2 840 10045 4 3 3
Comment = ANSI X9.62 ECDSA algorithm with SHA384
Description = ecdsaWithSHA384
OID = 1 2 840 10045 4 3 4
Comment = ANSI X9.62 ECDSA algorithm with SHA512
Description = ecdsaWithSHA512
# ANSI X9.42
OID = 1 2 840 10046 1
Comment = ANSI X9.42
Description = fieldType
OID = 1 2 840 10046 1 1
Comment = ANSI X9.42 field type
Description = gf-prime
OID = 1 2 840 10046 2
Comment = ANSI X9.42
Description = numberType
OID = 1 2 840 10046 2 1
Comment = ANSI X9.42 number type
Description = dhPublicKey
OID = 1 2 840 10046 3
Comment = ANSI X9.42
Description = scheme
OID = 1 2 840 10046 3 1
Comment = ANSI X9.42 scheme
Description = dhStatic
OID = 1 2 840 10046 3 2
Comment = ANSI X9.42 scheme
Description = dhEphem
OID = 1 2 840 10046 3 3
Comment = ANSI X9.42 scheme
Description = dhHybrid1
OID = 1 2 840 10046 3 4
Comment = ANSI X9.42 scheme
Description = dhHybrid2
OID = 1 2 840 10046 3 5
Comment = ANSI X9.42 scheme
Description = mqv2
OID = 1 2 840 10046 3 6
Comment = ANSI X9.42 scheme
Description = mqv1
# ASTM 31.20
OID = 1 2 840 10065 2 2
Comment = ASTM 31.20
Description = ?
OID = 1 2 840 10065 2 3
Comment = ASTM 31.20
Description = healthcareLicense
OID = 1 2 840 10065 2 3 1 1
Comment = ASTM 31.20 healthcare license type
Description = license?
# IEC 62351-8
OID = 1 2 840 10070
Comment = IEC 62351
Description = iec62351
OID = 1 2 840 10070 8
Comment = IEC 62351-8
Description = iec62351_8
OID = 1 2 840 10070 8 1
Comment = IEC 62351-8
Description = iecUserRoles
# Nortel Secure Networks/Entrust
OID = 1 2 840 113533 7
Description = nsn
OID = 1 2 840 113533 7 65
Description = nsn-ce
OID = 1 2 840 113533 7 65 0
Comment = Nortel Secure Networks ce
Description = entrustVersInfo
OID = 1 2 840 113533 7 66
Description = nsn-alg
OID = 1 2 840 113533 7 66 3
Comment = Nortel Secure Networks alg
Description = cast3CBC
OID = 1 2 840 113533 7 66 10
Comment = Nortel Secure Networks alg
Description = cast5CBC
OID = 1 2 840 113533 7 66 11
Comment = Nortel Secure Networks alg
Description = cast5MAC
OID = 1 2 840 113533 7 66 12
Comment = Nortel Secure Networks alg
Description = pbeWithMD5AndCAST5-CBC
OID = 1 2 840 113533 7 66 13
Comment = Nortel Secure Networks alg
Description = passwordBasedMac
OID = 1 2 840 113533 7 67
Description = nsn-oc
OID = 1 2 840 113533 7 67 0
Comment = Nortel Secure Networks oc
Description = entrustUser
OID = 1 2 840 113533 7 68
Description = nsn-at
OID = 1 2 840 113533 7 68 0
Comment = Nortel Secure Networks at
Description = entrustCAInfo
OID = 1 2 840 113533 7 68 10
Comment = Nortel Secure Networks at
Description = attributeCertificate
# PKCS #1
OID = 1 2 840 113549 1 1
Description = pkcs-1
OID = 1 2 840 113549 1 1 1
Comment = PKCS #1
Description = rsaEncryption
OID = 1 2 840 113549 1 1 2
Comment = PKCS #1
Description = md2WithRSAEncryption
OID = 1 2 840 113549 1 1 3
Comment = PKCS #1
Description = md4WithRSAEncryption
OID = 1 2 840 113549 1 1 4
Comment = PKCS #1
Description = md5WithRSAEncryption
OID = 1 2 840 113549 1 1 5
Comment = PKCS #1
Description = sha1WithRSAEncryption
OID = 1 2 840 113549 1 1 7
Comment = PKCS #1
Description = rsaOAEP
# This is also used with PSS so it's given the more general label 'pkcs1-XXX'
# rather than 'rsaOAEP-XXX'.
OID = 1 2 840 113549 1 1 8
Comment = PKCS #1
Description = pkcs1-MGF
OID = 1 2 840 113549 1 1 9
Comment = PKCS #1
Description = rsaOAEP-pSpecified
OID = 1 2 840 113549 1 1 10
Comment = PKCS #1
Description = rsaPSS
OID = 1 2 840 113549 1 1 11
Comment = PKCS #1
Description = sha256WithRSAEncryption
OID = 1 2 840 113549 1 1 12
Comment = PKCS #1
Description = sha384WithRSAEncryption
OID = 1 2 840 113549 1 1 13
Comment = PKCS #1
Description = sha512WithRSAEncryption
OID = 1 2 840 113549 1 1 14
Comment = PKCS #1
Description = sha224WithRSAEncryption
# There is some confusion over the identity of the following OID. The OAEP
# one is more recent but independent vendors have already used the RIPEMD
# one, however it's likely that the SET usage will claim to be more
# authoritative so we report it as that.
OID = 1 2 840 113549 1 1 6
Comment = PKCS #1. This OID may also be assigned as ripemd160WithRSAEncryption
Description = rsaOAEPEncryptionSET
# ripemd160WithRSAEncryption (1 2 840 113549 1 1 6)
# BSAFE/PKCS #2 (obsolete)
OID = 1 2 840 113549 1 2
Comment = Obsolete BSAFE OID
Description = bsafeRsaEncr
Warning
# PKCS #3
OID = 1 2 840 113549 1 3
Description = pkcs-3
OID = 1 2 840 113549 1 3 1
Comment = PKCS #3
Description = dhKeyAgreement
# PKCS #5
OID = 1 2 840 113549 1 5
Description = pkcs-5
OID = 1 2 840 113549 1 5 1
Comment = PKCS #5
Description = pbeWithMD2AndDES-CBC
OID = 1 2 840 113549 1 5 3
Comment = PKCS #5
Description = pbeWithMD5AndDES-CBC
OID = 1 2 840 113549 1 5 4
Comment = PKCS #5
Description = pbeWithMD2AndRC2-CBC
OID = 1 2 840 113549 1 5 6
Comment = PKCS #5
Description = pbeWithMD5AndRC2-CBC
OID = 1 2 840 113549 1 5 9
Comment = PKCS #5, used in BSAFE only
Description = pbeWithMD5AndXOR
Warning
OID = 1 2 840 113549 1 5 10
Comment = PKCS #5
Description = pbeWithSHAAndDES-CBC
OID = 1 2 840 113549 1 5 12
Comment = PKCS #5 v2.0
Description = pkcs5PBKDF2
OID = 1 2 840 113549 1 5 13
Comment = PKCS #5 v2.0
Description = pkcs5PBES2
OID = 1 2 840 113549 1 5 14
Comment = PKCS #5 v2.0
Description = pkcs5PBMAC1
# PKCS #7
OID = 1 2 840 113549 1 7
Description = pkcs-7
OID = 1 2 840 113549 1 7 1
Comment = PKCS #7
Description = data
OID = 1 2 840 113549 1 7 2
Comment = PKCS #7
Description = signedData
OID = 1 2 840 113549 1 7 3
Comment = PKCS #7
Description = envelopedData
OID = 1 2 840 113549 1 7 4
Comment = PKCS #7
Description = signedAndEnvelopedData
OID = 1 2 840 113549 1 7 5
Comment = PKCS #7
Description = digestedData
OID = 1 2 840 113549 1 7 6
Comment = PKCS #7
Description = encryptedData
OID = 1 2 840 113549 1 7 7
Comment = PKCS #7 experimental
Description = dataWithAttributes
Warning
OID = 1 2 840 113549 1 7 8
Comment = PKCS #7 experimental
Description = encryptedPrivateKeyInfo
Warning
# PKCS #9
OID = 1 2 840 113549 1 9
Description = pkcs-9
OID = 1 2 840 113549 1 9 1
Comment = PKCS #9. Deprecated, use an altName extension instead
Description = emailAddress
OID = 1 2 840 113549 1 9 2
Comment = PKCS #9
Description = unstructuredName
OID = 1 2 840 113549 1 9 3
Comment = PKCS #9
Description = contentType
OID = 1 2 840 113549 1 9 4
Comment = PKCS #9
Description = messageDigest
OID = 1 2 840 113549 1 9 5
Comment = PKCS #9
Description = signingTime
OID = 1 2 840 113549 1 9 6
Comment = PKCS #9
Description = countersignature
OID = 1 2 840 113549 1 9 7
Comment = PKCS #9
Description = challengePassword
OID = 1 2 840 113549 1 9 8
Comment = PKCS #9
Description = unstructuredAddress
OID = 1 2 840 113549 1 9 9
Comment = PKCS #9
Description = extendedCertificateAttributes
OID = 1 2 840 113549 1 9 10
Comment = PKCS #9 experimental
Description = issuerAndSerialNumber
Warning
OID = 1 2 840 113549 1 9 11
Comment = PKCS #9 experimental
Description = passwordCheck
Warning
OID = 1 2 840 113549 1 9 12
Comment = PKCS #9 experimental
Description = publicKey
Warning
OID = 1 2 840 113549 1 9 13
Comment = PKCS #9
Description = signingDescription
OID = 1 2 840 113549 1 9 14
Comment = PKCS #9 via CRMF
Description = extensionRequest
# PKCS #9 for use with S/MIME
OID = 1 2 840 113549 1 9 15
Comment = PKCS #9. This OID was formerly assigned as symmetricCapabilities, then reassigned as SMIMECapabilities, then renamed to the current name
Description = sMIMECapabilities
OID = 1 2 840 113549 1 9 15 1
Comment = sMIMECapabilities
Description = preferSignedData
OID = 1 2 840 113549 1 9 15 2
Comment = sMIMECapabilities
Description = canNotDecryptAny
OID = 1 2 840 113549 1 9 15 3
Comment = sMIMECapabilities. Deprecated, use (1 2 840 113549 1 9 16 2 1) instead
Description = receiptRequest
Warning
OID = 1 2 840 113549 1 9 15 4
Comment = sMIMECapabilities. Deprecated, use (1 2 840 113549 1 9 16 1 1) instead
Description = receipt
Warning
OID = 1 2 840 113549 1 9 15 5
Comment = sMIMECapabilities. Deprecated, use (1 2 840 113549 1 9 16 2 4) instead
Description = contentHints
Warning
OID = 1 2 840 113549 1 9 15 6
Comment = sMIMECapabilities. Deprecated, use (1 2 840 113549 1 9 16 2 3) instead
Description = mlExpansionHistory
Warning
OID = 1 2 840 113549 1 9 16
Comment = PKCS #9
Description = id-sMIME
OID = 1 2 840 113549 1 9 16 0
Comment = id-sMIME
Description = id-mod
OID = 1 2 840 113549 1 9 16 0 1
Comment = S/MIME Modules
Description = id-mod-cms
OID = 1 2 840 113549 1 9 16 0 2
Comment = S/MIME Modules
Description = id-mod-ess
OID = 1 2 840 113549 1 9 16 0 3
Comment = S/MIME Modules
Description = id-mod-oid
OID = 1 2 840 113549 1 9 16 0 4
Comment = S/MIME Modules
Description = id-mod-msg-v3
OID = 1 2 840 113549 1 9 16 0 5
Comment = S/MIME Modules
Description = id-mod-ets-eSignature-88
OID = 1 2 840 113549 1 9 16 0 6
Comment = S/MIME Modules
Description = id-mod-ets-eSignature-97
OID = 1 2 840 113549 1 9 16 0 7
Comment = S/MIME Modules
Description = id-mod-ets-eSigPolicy-88
OID = 1 2 840 113549 1 9 16 0 8
Comment = S/MIME Modules
Description = id-mod-ets-eSigPolicy-88
# S/MIME content types
OID = 1 2 840 113549 1 9 16 1
Comment = S/MIME
Description = contentType
# RFC 6010
OID = 1 2 840 113549 1 9 16 1 0
Comment = S/MIME Content Types
Description = anyContentType
OID = 1 2 840 113549 1 9 16 1 1
Comment = S/MIME Content Types
Description = receipt
OID = 1 2 840 113549 1 9 16 1 2
Comment = S/MIME Content Types
Description = authData
OID = 1 2 840 113549 1 9 16 1 3
Comment = S/MIME Content Types
Description = publishCert
OID = 1 2 840 113549 1 9 16 1 4
Comment = S/MIME Content Types
Description = tSTInfo
OID = 1 2 840 113549 1 9 16 1 5
Comment = S/MIME Content Types
Description = tDTInfo
OID = 1 2 840 113549 1 9 16 1 6
Comment = S/MIME Content Types
Description = contentInfo
OID = 1 2 840 113549 1 9 16 1 7
Comment = S/MIME Content Types
Description = dVCSRequestData
OID = 1 2 840 113549 1 9 16 1 8
Comment = S/MIME Content Types
Description = dVCSResponseData
OID = 1 2 840 113549 1 9 16 1 9
Comment = S/MIME Content Types
Description = compressedData
OID = 1 2 840 113549 1 9 16 1 10
Comment = S/MIME Content Types
Description = scvpCertValRequest
OID = 1 2 840 113549 1 9 16 1 11
Comment = S/MIME Content Types
Description = scvpCertValResponse
OID = 1 2 840 113549 1 9 16 1 12
Comment = S/MIME Content Types
Description = scvpValPolRequest
OID = 1 2 840 113549 1 9 16 1 13
Comment = S/MIME Content Types
Description = scvpValPolResponse
OID = 1 2 840 113549 1 9 16 1 14
Comment = S/MIME Content Types
Description = attrCertEncAttrs
OID = 1 2 840 113549 1 9 16 1 15
Comment = S/MIME Content Types
Description = tSReq
OID = 1 2 840 113549 1 9 16 1 16
Comment = S/MIME Content Types
Description = firmwarePackage
OID = 1 2 840 113549 1 9 16 1 17
Comment = S/MIME Content Types
Description = firmwareLoadReceipt
OID = 1 2 840 113549 1 9 16 1 18
Comment = S/MIME Content Types
Description = firmwareLoadError
OID = 1 2 840 113549 1 9 16 1 19
Comment = S/MIME Content Types
Description = contentCollection
OID = 1 2 840 113549 1 9 16 1 20
Comment = S/MIME Content Types
Description = contentWithAttrs
OID = 1 2 840 113549 1 9 16 1 21
Comment = S/MIME Content Types
Description = encKeyWithID
OID = 1 2 840 113549 1 9 16 1 22
Comment = S/MIME Content Types
Description = encPEPSI
OID = 1 2 840 113549 1 9 16 1 23
Comment = S/MIME Content Types
Description = authEnvelopedData
OID = 1 2 840 113549 1 9 16 1 24
Comment = S/MIME Content Types
Description = routeOriginAttest
OID = 1 2 840 113549 1 9 16 1 25
Comment = S/MIME Content Types
Description = symmetricKeyPackage
OID = 1 2 840 113549 1 9 16 1 26
Comment = S/MIME Content Types
Description = rpkiManifest
OID = 1 2 840 113549 1 9 16 1 27
Comment = S/MIME Content Types
Description = asciiTextWithCRLF
OID = 1 2 840 113549 1 9 16 1 28
Comment = S/MIME Content Types
Description = xml
OID = 1 2 840 113549 1 9 16 1 29
Comment = S/MIME Content Types
Description = pdf
OID = 1 2 840 113549 1 9 16 1 30
Comment = S/MIME Content Types
Description = postscript
OID = 1 2 840 113549 1 9 16 1 31
Comment = S/MIME Content Types
Description = timestampedData
OID = 1 2 840 113549 1 9 16 1 32
Comment = S/MIME Content Types
Description = asAdjacencyAttest
Warning
OID = 1 2 840 113549 1 9 16 1 33
Comment = S/MIME Content Types
Description = rpkiTrustAnchor
OID = 1 2 840 113549 1 9 16 1 34
Comment = S/MIME Content Types
Description = trustAnchorList
# RFC 6493
OID = 1 2 840 113549 1 9 16 1 35
Comment = S/MIME Content Types
Description = rpkiGhostbusters
# draft-michaelson-rpki-rta
OID = 1 2 840 113549 1 9 16 1 36
Comment = S/MIME Content Types
Description = resourceTaggedAttest
# RFC 8358
OID = 1 2 840 113549 1 9 16 1 37
Comment = S/MIME Content Types
Description = utf8TextWithCRLF
OID = 1 2 840 113549 1 9 16 1 38
Comment = S/MIME Content Types
Description = htmlWithCRLF
OID = 1 2 840 113549 1 9 16 1 39
Comment = S/MIME Content Types
Description = epub
# RFC 8366
OID = 1 2 840 113549 1 9 16 1 40
Comment = S/MIME Content Types
Description = animaJSONVoucher
# RFC 8520
OID = 1 2 840 113549 1 9 16 1 41
Comment = S/MIME Content Types
Description = mudType
# RFC 8572
OID = 1 2 840 113549 1 9 16 1 42
Comment = S/MIME Content Types
Description = sztpConveyedInfoXML
OID = 1 2 840 113549 1 9 16 1 43
Comment = S/MIME Content Types
Description = sztpConveyedInfoJSON
# RFC 8769
OID = 1 2 840 113549 1 9 16 1 44
Comment = S/MIME Content Types
Description = cbor
OID = 1 2 840 113549 1 9 16 1 45
Comment = S/MIME Content Types
Description = cborSequence
# Reserved and Obsolete
OID = 1 2 840 113549 1 9 16 1 46
Comment = S/MIME Content Types
Description = animaCBORVoucher
Warning
# draft-ymbk-opsawg-finding-geofeeds
OID = 1 2 840 113549 1 9 16 1 47
Comment = S/MIME Content Types
Description = geofeedCSVwithCRLF
OID = 1 2 840 113549 1 9 16 1 48
Comment = S/MIME Content Types
Description = rpkiSignedChecklist
OID = 1 2 840 113549 1 9 16 1 49
Comment = S/MIME Content Types
Description = rpkiASPA
# S/MIME attributes
OID = 1 2 840 113549 1 9 16 2
Comment = S/MIME
Description = authenticatedAttributes
OID = 1 2 840 113549 1 9 16 2 1
Comment = S/MIME Authenticated Attributes
Description = receiptRequest
OID = 1 2 840 113549 1 9 16 2 2
Comment = S/MIME Authenticated Attributes
Description = securityLabel
OID = 1 2 840 113549 1 9 16 2 3
Comment = S/MIME Authenticated Attributes
Description = mlExpandHistory
OID = 1 2 840 113549 1 9 16 2 4
Comment = S/MIME Authenticated Attributes
Description = contentHint
OID = 1 2 840 113549 1 9 16 2 5
Comment = S/MIME Authenticated Attributes
Description = msgSigDigest
OID = 1 2 840 113549 1 9 16 2 6
Comment = S/MIME Authenticated Attributes. Obsolete
Description = encapContentType
Warning
OID = 1 2 840 113549 1 9 16 2 7
Comment = S/MIME Authenticated Attributes
Description = contentIdentifier
OID = 1 2 840 113549 1 9 16 2 8
Comment = S/MIME Authenticated Attributes. Obsolete
Description = macValue
Warning
OID = 1 2 840 113549 1 9 16 2 9
Comment = S/MIME Authenticated Attributes
Description = equivalentLabels
OID = 1 2 840 113549 1 9 16 2 10
Comment = S/MIME Authenticated Attributes
Description = contentReference
OID = 1 2 840 113549 1 9 16 2 11
Comment = S/MIME Authenticated Attributes
Description = encrypKeyPref
OID = 1 2 840 113549 1 9 16 2 12
Comment = S/MIME Authenticated Attributes
Description = signingCertificate
OID = 1 2 840 113549 1 9 16 2 13
Comment = S/MIME Authenticated Attributes
Description = smimeEncryptCerts
OID = 1 2 840 113549 1 9 16 2 14
Comment = S/MIME Authenticated Attributes
Description = timeStampToken
OID = 1 2 840 113549 1 9 16 2 15
Comment = S/MIME Authenticated Attributes
Description = sigPolicyId
OID = 1 2 840 113549 1 9 16 2 16
Comment = S/MIME Authenticated Attributes
Description = commitmentType
OID = 1 2 840 113549 1 9 16 2 17
Comment = S/MIME Authenticated Attributes
Description = signerLocation
OID = 1 2 840 113549 1 9 16 2 18
Comment = S/MIME Authenticated Attributes
Description = signerAttr
OID = 1 2 840 113549 1 9 16 2 19
Comment = S/MIME Authenticated Attributes
Description = otherSigCert
OID = 1 2 840 113549 1 9 16 2 20
Comment = S/MIME Authenticated Attributes
Description = contentTimestamp
OID = 1 2 840 113549 1 9 16 2 21
Comment = S/MIME Authenticated Attributes
Description = certificateRefs
OID = 1 2 840 113549 1 9 16 2 22
Comment = S/MIME Authenticated Attributes
Description = revocationRefs
OID = 1 2 840 113549 1 9 16 2 23
Comment = S/MIME Authenticated Attributes
Description = certValues
OID = 1 2 840 113549 1 9 16 2 24
Comment = S/MIME Authenticated Attributes
Description = revocationValues
OID = 1 2 840 113549 1 9 16 2 25
Comment = S/MIME Authenticated Attributes
Description = escTimeStamp
OID = 1 2 840 113549 1 9 16 2 26
Comment = S/MIME Authenticated Attributes
Description = certCRLTimestamp
OID = 1 2 840 113549 1 9 16 2 27
Comment = S/MIME Authenticated Attributes
Description = archiveTimeStamp
OID = 1 2 840 113549 1 9 16 2 28
Comment = S/MIME Authenticated Attributes
Description = signatureType
OID = 1 2 840 113549 1 9 16 2 29
Comment = S/MIME Authenticated Attributes
Description = dvcsDvc
OID = 1 2 840 113549 1 9 16 2 30
Comment = S/MIME Authenticated Attributes
Description = cekReference
OID = 1 2 840 113549 1 9 16 2 31
Comment = S/MIME Authenticated Attributes
Description = maxCEKDecrypts
OID = 1 2 840 113549 1 9 16 2 32
Comment = S/MIME Authenticated Attributes
Description = kekDerivationAlg
OID = 1 2 840 113549 1 9 16 2 33
Comment = S/MIME Authenticated Attributes. Obsolete
Description = intendedRecipients
Warning
OID = 1 2 840 113549 1 9 16 2 34
Comment = S/MIME Authenticated Attributes
Description = cmcUnsignedData
OID = 1 2 840 113549 1 9 16 2 35
Comment = S/MIME Authenticated Attributes
Description = fwPackageID
OID = 1 2 840 113549 1 9 16 2 36
Comment = S/MIME Authenticated Attributes
Description = fwTargetHardwareIDs
OID = 1 2 840 113549 1 9 16 2 37
Comment = S/MIME Authenticated Attributes
Description = fwDecryptKeyID
OID = 1 2 840 113549 1 9 16 2 38
Comment = S/MIME Authenticated Attributes
Description = fwImplCryptAlgs
OID = 1 2 840 113549 1 9 16 2 39
Comment = S/MIME Authenticated Attributes
Description = fwWrappedFirmwareKey
OID = 1 2 840 113549 1 9 16 2 40
Comment = S/MIME Authenticated Attributes
Description = fwCommunityIdentifiers
OID = 1 2 840 113549 1 9 16 2 41
Comment = S/MIME Authenticated Attributes
Description = fwPkgMessageDigest
OID = 1 2 840 113549 1 9 16 2 42
Comment = S/MIME Authenticated Attributes
Description = fwPackageInfo
OID = 1 2 840 113549 1 9 16 2 43
Comment = S/MIME Authenticated Attributes
Description = fwImplCompressAlgs
OID = 1 2 840 113549 1 9 16 2 44
Comment = S/MIME Authenticated Attributes
Description = etsAttrCertificateRefs
OID = 1 2 840 113549 1 9 16 2 45
Comment = S/MIME Authenticated Attributes
Description = etsAttrRevocationRefs
OID = 1 2 840 113549 1 9 16 2 46
Comment = S/MIME Authenticated Attributes
Description = binarySigningTime
OID = 1 2 840 113549 1 9 16 2 47
Comment = S/MIME Authenticated Attributes
Description = signingCertificateV2
OID = 1 2 840 113549 1 9 16 2 48
Comment = S/MIME Authenticated Attributes
Description = etsArchiveTimeStampV2
OID = 1 2 840 113549 1 9 16 2 49
Comment = S/MIME Authenticated Attributes
Description = erInternal
OID = 1 2 840 113549 1 9 16 2 50
Comment = S/MIME Authenticated Attributes
Description = erExternal
OID = 1 2 840 113549 1 9 16 2 51
Comment = S/MIME Authenticated Attributes
Description = multipleSignatures
# RFC 6211
OID = 1 2 840 113549 1 9 16 2 52
Comment = S/MIME Authenticated Attributes
Description = cmsAlgorithmProtect
# draft-herzog-setkey
OID = 1 2 840 113549 1 9 16 2 53
Comment = S/MIME Authenticated Attributes
Description = setKeyInformation
# RFC 7030 and RFC 8951
OID = 1 2 840 113549 1 9 16 2 54
Comment = S/MIME Authenticated Attributes
Description = asymmDecryptKeyID
# RFC 7508
OID = 1 2 840 113549 1 9 16 2 55
Comment = S/MIME Authenticated Attributes
Description = secureHeaderFieldsIdentifier
# RFC 7894
OID = 1 2 840 113549 1 9 16 2 56
Comment = S/MIME Authenticated Attributes
Description = otpChallenge
OID = 1 2 840 113549 1 9 16 2 57
Comment = S/MIME Authenticated Attributes
Description = revocationChallenge
OID = 1 2 840 113549 1 9 16 2 58
Comment = S/MIME Authenticated Attributes
Description = estIdentityLinking
# S/MIME algorithms
OID = 1 2 840 113549 1 9 16 3 1
Comment = S/MIME Algorithms. Obsolete
Description = esDHwith3DES
Warning
OID = 1 2 840 113549 1 9 16 3 2
Comment = S/MIME Algorithms. Obsolete
Description = esDHwithRC2
Warning
OID = 1 2 840 113549 1 9 16 3 3
Comment = S/MIME Algorithms. Obsolete
Description = 3desWrap
Warning
OID = 1 2 840 113549 1 9 16 3 4
Comment = S/MIME Algorithms. Obsolete
Description = rc2Wrap
Warning
OID = 1 2 840 113549 1 9 16 3 5
Comment = S/MIME Algorithms
Description = esDH
OID = 1 2 840 113549 1 9 16 3 6
Comment = S/MIME Algorithms
Description = cms3DESwrap
OID = 1 2 840 113549 1 9 16 3 7
Comment = S/MIME Algorithms
Description = cmsRC2wrap
OID = 1 2 840 113549 1 9 16 3 8
Comment = S/MIME Algorithms
Description = zlib
OID = 1 2 840 113549 1 9 16 3 9
Comment = S/MIME Algorithms
Description = pwriKEK
OID = 1 2 840 113549 1 9 16 3 10
Comment = S/MIME Algorithms
Description = ssDH
OID = 1 2 840 113549 1 9 16 3 11
Comment = S/MIME Algorithms
Description = hmacWith3DESwrap
OID = 1 2 840 113549 1 9 16 3 12
Comment = S/MIME Algorithms
Description = hmacWithAESwrap
OID = 1 2 840 113549 1 9 16 3 13
Comment = S/MIME Algorithms. Experimental
Description = md5XorExperiment
Warning
OID = 1 2 840 113549 1 9 16 3 14
Comment = S/MIME Algorithms
Description = rsaKEM
OID = 1 2 840 113549 1 9 16 3 15
Comment = S/MIME Algorithms
Description = authEnc128
OID = 1 2 840 113549 1 9 16 3 16
Comment = S/MIME Algorithms
Description = authEnc256
OID = 1 2 840 113549 1 9 16 3 17
Comment = S/MIME Algorithms
Description = hssLmsHashSig
OID = 1 2 840 113549 1 9 16 3 18
Comment = S/MIME Algorithms
Description = chaCha20Poly1305
OID = 1 2 840 113549 1 9 16 3 19
Comment = S/MIME Algorithms
Description = ecdhHKDF-SHA256
OID = 1 2 840 113549 1 9 16 3 20
Comment = S/MIME Algorithms
Description = ecdhHKDF-SHA384
OID = 1 2 840 113549 1 9 16 3 21
Comment = S/MIME Algorithms
Description = ecdhHKDF-SHA512
OID = 1 2 840 113549 1 9 16 3 22
Comment = S/MIME Algorithms
Description = aesSIV-CMAC-256
OID = 1 2 840 113549 1 9 16 3 23
Comment = S/MIME Algorithms
Description = aesSIV-CMAC-384
OID = 1 2 840 113549 1 9 16 3 24
Comment = S/MIME Algorithms
Description = aesSIV-CMAC-512
OID = 1 2 840 113549 1 9 16 3 25
Comment = S/MIME Algorithms
Description = aesSIV-CMAC-wrap256
OID = 1 2 840 113549 1 9 16 3 26
Comment = S/MIME Algorithms
Description = aesSIV-CMAC-wrap384
OID = 1 2 840 113549 1 9 16 3 27
Comment = S/MIME Algorithms
Description = aesSIV-CMAC-wrap512
OID = 1 2 840 113549 1 9 16 3 28
Comment = S/MIME Algorithms
Description = hkdfWithSha256
OID = 1 2 840 113549 1 9 16 3 29
Comment = S/MIME Algorithms
Description = hkdfWithSha384
OID = 1 2 840 113549 1 9 16 3 30
Comment = S/MIME Algorithms
Description = hkdfWithSha512
# S/MIME miscellaneous
OID = 1 2 840 113549 1 9 16 4 1
Comment = S/MIME Certificate Distribution
Description = certDist-ldap
OID = 1 2 840 113549 1 9 16 5 1
Comment = S/MIME Signature Policy Qualifiers
Description = sigPolicyQualifier-spuri x
OID = 1 2 840 113549 1 9 16 5 2
Comment = S/MIME Signature Policy Qualifiers
Description = sigPolicyQualifier-spUserNotice
OID = 1 2 840 113549 1 9 16 6 1
Comment = S/MIME Commitment Type Identifiers
Description = proofOfOrigin
OID = 1 2 840 113549 1 9 16 6 2
Comment = S/MIME Commitment Type Identifiers
Description = proofOfReceipt
OID = 1 2 840 113549 1 9 16 6 3
Comment = S/MIME Commitment Type Identifiers
Description = proofOfDelivery
OID = 1 2 840 113549 1 9 16 6 4
Comment = S/MIME Commitment Type Identifiers
Description = proofOfSender
OID = 1 2 840 113549 1 9 16 6 5
Comment = S/MIME Commitment Type Identifiers
Description = proofOfApproval
OID = 1 2 840 113549 1 9 16 6 6
Comment = S/MIME Commitment Type Identifiers
Description = proofOfCreation
# RFC3114
OID = 1 2 840 113549 1 9 16 7 1
Comment = S/MIMETest Security Policies
Description = testAmoco
OID = 1 2 840 113549 1 9 16 7 2
Comment = S/MIMETest Security Policies
Description = testCaterpillar
OID = 1 2 840 113549 1 9 16 7 3
Comment = S/MIMETest Security Policies
Description = testWhirlpool
OID = 1 2 840 113549 1 9 16 7 4
Comment = S/MIMETest Security Policies
Description = testWhirlpoolCategories
OID = 1 2 840 113549 1 9 16 8 1
Comment = S/MIME Symmetric Key Distribution Attributes
Description = glUseKEK
OID = 1 2 840 113549 1 9 16 8 2
Comment = S/MIME Symmetric Key Distribution Attributes
Description = glDelete
OID = 1 2 840 113549 1 9 16 8 3
Comment = S/MIME Symmetric Key Distribution Attributes
Description = glAddMember
OID = 1 2 840 113549 1 9 16 8 4
Comment = S/MIME Symmetric Key Distribution Attributes
Description = glDeleteMember
OID = 1 2 840 113549 1 9 16 8 5
Comment = S/MIME Symmetric Key Distribution Attributes
Description = glRekey
OID = 1 2 840 113549 1 9 16 8 6
Comment = S/MIME Symmetric Key Distribution Attributes
Description = glAddOwner
OID = 1 2 840 113549 1 9 16 8 7
Comment = S/MIME Symmetric Key Distribution Attributes
Description = glRemoveOwner
OID = 1 2 840 113549 1 9 16 8 8
Comment = S/MIME Symmetric Key Distribution Attributes
Description = glkCompromise
OID = 1 2 840 113549 1 9 16 8 9
Comment = S/MIME Symmetric Key Distribution Attributes
Description = glkRefresh
OID = 1 2 840 113549 1 9 16 8 10
Comment = S/MIME Symmetric Key Distribution Attributes. Obsolete
Description = glFailInfo
Warning
OID = 1 2 840 113549 1 9 16 8 11
Comment = S/MIME Symmetric Key Distribution Attributes
Description = glaQueryRequest
OID = 1 2 840 113549 1 9 16 8 12
Comment = S/MIME Symmetric Key Distribution Attributes
Description = glaQueryResponse
OID = 1 2 840 113549 1 9 16 8 13
Comment = S/MIME Symmetric Key Distribution Attributes
Description = glProvideCert
OID = 1 2 840 113549 1 9 16 8 14
Comment = S/MIME Symmetric Key Distribution Attributes
Description = glUpdateCert
OID = 1 2 840 113549 1 9 16 8 15
Comment = S/MIME Symmetric Key Distribution Attributes
Description = glKey
OID = 1 2 840 113549 1 9 16 9
Comment = S/MIME
Description = signatureTypeIdentifier
OID = 1 2 840 113549 1 9 16 9 1
Comment = S/MIME Signature Type Identifier
Description = originatorSig
OID = 1 2 840 113549 1 9 16 9 2
Comment = S/MIME Signature Type Identifier
Description = domainSig
OID = 1 2 840 113549 1 9 16 9 3
Comment = S/MIME Signature Type Identifier
Description = additionalAttributesSig
OID = 1 2 840 113549 1 9 16 9 4
Comment = S/MIME Signature Type Identifier
Description = reviewSig
# RFC 3855
OID = 1 2 840 113549 1 9 16 10 1
Comment = S/MIME X.400 Encoded Information Types
Description = envelopedData
OID = 1 2 840 113549 1 9 16 10 2
Comment = S/MIME X.400 Encoded Information Types
Description = signedData
OID = 1 2 840 113549 1 9 16 10 3
Comment = S/MIME X.400 Encoded Information Types
Description = certsOnly
OID = 1 2 840 113549 1 9 16 10 4
Comment = S/MIME X.400 Encoded Information Types
Description = signedReceipt
OID = 1 2 840 113549 1 9 16 10 5
Comment = S/MIME X.400 Encoded Information Types
Description = envelopedX400
OID = 1 2 840 113549 1 9 16 10 6
Comment = S/MIME X.400 Encoded Information Types
Description = signedX400
OID = 1 2 840 113549 1 9 16 10 7
Comment = S/MIME X.400 Encoded Information Types
Description = compressedData
OID = 1 2 840 113549 1 9 16 11
Comment = S/MIME
Description = capabilities
OID = 1 2 840 113549 1 9 16 11 1
Comment = S/MIME Capability
Description = preferBinaryInside
OID = 1 2 840 113549 1 9 16 12
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcAttributes
OID = 1 2 840 113549 1 9 16 12 1
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcManufacturer
OID = 1 2 840 113549 1 9 16 12 2
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcSerialNo
OID = 1 2 840 113549 1 9 16 12 3
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcModel
OID = 1 2 840 113549 1 9 16 12 4
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcIssueno
OID = 1 2 840 113549 1 9 16 12 5
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcDevicebinding
OID = 1 2 840 113549 1 9 16 12 6
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcDevicestartdate
OID = 1 2 840 113549 1 9 16 12 7
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcDeviceexpirydate
OID = 1 2 840 113549 1 9 16 12 8
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcModuleid
OID = 1 2 840 113549 1 9 16 12 9
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcKeyid
OID = 1 2 840 113549 1 9 16 12 10
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcAlgorithm
OID = 1 2 840 113549 1 9 16 12 11
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcIssuer
OID = 1 2 840 113549 1 9 16 12 12
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcKeyprofileid
OID = 1 2 840 113549 1 9 16 12 13
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcKeyreference
OID = 1 2 840 113549 1 9 16 12 14
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcFriendlyname
OID = 1 2 840 113549 1 9 16 12 15
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcAlgorithmparams
OID = 1 2 840 113549 1 9 16 12 16
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcCounter
OID = 1 2 840 113549 1 9 16 12 17
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcTime
OID = 1 2 840 113549 1 9 16 12 18
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcTimeinterval
OID = 1 2 840 113549 1 9 16 12 19
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcTimedrift
OID = 1 2 840 113549 1 9 16 12 20
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcValuemac
OID = 1 2 840 113549 1 9 16 12 21
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcKeystartdate
OID = 1 2 840 113549 1 9 16 12 22
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcKeyexpirydate
OID = 1 2 840 113549 1 9 16 12 23
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcNooftransactions
OID = 1 2 840 113549 1 9 16 12 24
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcKeyusages
OID = 1 2 840 113549 1 9 16 12 25
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcPinpolicy
OID = 1 2 840 113549 1 9 16 12 26
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcDeviceuserid
OID = 1 2 840 113549 1 9 16 12 27
Comment = S/MIME Portable Symmetric Key Container Attributes
Description = pskcKeyuserid
OID = 1 2 840 113549 1 9 16 13
Comment = S/MIME Other Recipient Info Identifiers
Description = otherRecipientInfoIds
OID = 1 2 840 113549 1 9 16 13 1
Comment = S/MIME Other Recipient Info Identifiers
Description = keyTransPSK
OID = 1 2 840 113549 1 9 16 13 2
Comment = S/MIME Other Recipient Info Identifiers
Description = keyAgreePSK
# PKCS #9 for use with PKCS #12
OID = 1 2 840 113549 1 9 20
Comment = PKCS #9 via PKCS #12
Description = friendlyName (for PKCS #12)
OID = 1 2 840 113549 1 9 21
Comment = PKCS #9 via PKCS #12
Description = localKeyID (for PKCS #12)
OID = 1 2 840 113549 1 9 22
Comment = PKCS #9 via PKCS #12
Description = certTypes (for PKCS #12)
OID = 1 2 840 113549 1 9 22 1
Comment = PKCS #9 via PKCS #12
Description = x509Certificate (for PKCS #12)
OID = 1 2 840 113549 1 9 22 2
Comment = PKCS #9 via PKCS #12
Description = sdsiCertificate (for PKCS #12)
OID = 1 2 840 113549 1 9 23
Comment = PKCS #9 via PKCS #12
Description = crlTypes (for PKCS #12)
OID = 1 2 840 113549 1 9 23 1
Comment = PKCS #9 via PKCS #12
Description = x509Crl (for PKCS #12)
# PKCS #9, another set of branches used for accumulating further cruft
OID = 1 2 840 113549 1 9 24
Comment = PKCS #9/RFC 2985
Description = pkcs9objectClass
OID = 1 2 840 113549 1 9 25
Comment = PKCS #9/RFC 2985
Description = pkcs9attributes
OID = 1 2 840 113549 1 9 25 1
Comment = PKCS #9/RFC 2985 attribute
Description = pkcs15Token
OID = 1 2 840 113549 1 9 25 2
Comment = PKCS #9/RFC 2985 attribute
Description = encryptedPrivateKeyInfo
OID = 1 2 840 113549 1 9 25 3
Comment = PKCS #9/RFC 2985 attribute
Description = randomNonce
OID = 1 2 840 113549 1 9 25 4
Comment = PKCS #9/RFC 2985 attribute
Description = sequenceNumber
OID = 1 2 840 113549 1 9 25 5
Comment = PKCS #9/RFC 2985 attribute
Description = pkcs7PDU
OID = 1 2 840 113549 1 9 26
Comment = PKCS #9/RFC 2985
Description = pkcs9syntax
OID = 1 2 840 113549 1 9 27
Comment = PKCS #9/RFC 2985
Description = pkcs9matchingRules
# Miscellaneous further RFCs using the 1 2 840 113549 1 9 ... arc
OID = 1 2 840 113549 1 9 52
Comment = RFC 6211
Description = cmsAlgorithmProtection
# PKCS #12. Note that current PKCS #12 implementations tend to be strange and
# peculiar, with implementors misusing OIDs or basing their work on earlier PFX
# drafts or defining their own odd OIDs. In addition the PFX/PKCS #12 spec
# itself is full of errors and inconsistencies and a number of OIDs have been
# redefined in different drafts (often multiple times), which doesn't make the
# implementor's job any easier.
OID = 1 2 840 113549 1 12
Description = pkcs-12
OID = 1 2 840 113549 1 12 1
Comment = This OID was formerly assigned as PKCS #12 modeID
Description = pkcs-12-PbeIds
OID = 1 2 840 113549 1 12 1 1
Comment = PKCS #12 PbeIds. This OID was formerly assigned as pkcs-12-OfflineTransportMode
Description = pbeWithSHAAnd128BitRC4
OID = 1 2 840 113549 1 12 1 2
Comment = PKCS #12 PbeIds. This OID was formerly assigned as pkcs-12-OnlineTransportMode
Description = pbeWithSHAAnd40BitRC4
OID = 1 2 840 113549 1 12 1 3
Comment = PKCS #12 PbeIds
Description = pbeWithSHAAnd3-KeyTripleDES-CBC
OID = 1 2 840 113549 1 12 1 4
Comment = PKCS #12 PbeIds
Description = pbeWithSHAAnd2-KeyTripleDES-CBC
OID = 1 2 840 113549 1 12 1 5
Comment = PKCS #12 PbeIds
Description = pbeWithSHAAnd128BitRC2-CBC
OID = 1 2 840 113549 1 12 1 6
Comment = PKCS #12 PbeIds
Description = pbeWithSHAAnd40BitRC2-CBC
OID = 1 2 840 113549 1 12 2
Comment = Deprecated
Description = pkcs-12-ESPVKID
Warning
OID = 1 2 840 113549 1 12 2 1
Comment = PKCS #12 ESPVKID. Deprecated, use (1 2 840 113549 1 12 3 5) instead
Description = pkcs-12-PKCS8KeyShrouding
Warning
# The following appear to have been redefined yet again at 12 10 in the latest
# PKCS #12 spec.
OID = 1 2 840 113549 1 12 3
Description = pkcs-12-BagIds
OID = 1 2 840 113549 1 12 3 1
Comment = PKCS #12 BagIds
Description = pkcs-12-keyBagId
OID = 1 2 840 113549 1 12 3 2
Comment = PKCS #12 BagIds
Description = pkcs-12-certAndCRLBagId
OID = 1 2 840 113549 1 12 3 3
Comment = PKCS #12 BagIds
Description = pkcs-12-secretBagId
OID = 1 2 840 113549 1 12 3 4
Comment = PKCS #12 BagIds
Description = pkcs-12-safeContentsId
OID = 1 2 840 113549 1 12 3 5
Comment = PKCS #12 BagIds
Description = pkcs-12-pkcs-8ShroudedKeyBagId
OID = 1 2 840 113549 1 12 4
Comment = Deprecated
Description = pkcs-12-CertBagID
Warning
OID = 1 2 840 113549 1 12 4 1
Comment = PKCS #12 CertBagID. This OID was formerly assigned as pkcs-12-X509CertCRLBag
Description = pkcs-12-X509CertCRLBagID
OID = 1 2 840 113549 1 12 4 2
Comment = PKCS #12 CertBagID. This OID was formerly assigned as pkcs-12-SDSICertBag
Description = pkcs-12-SDSICertBagID
# The following are from PFX. The ... 5 1 values have been reassigned to OIDs
# with incompatible algorithms at ... 1, the 5 2 values seem to have vanished.
OID = 1 2 840 113549 1 12 5
Description = pkcs-12-OID
Warning
OID = 1 2 840 113549 1 12 5 1
Comment = PKCS #12 OID. Deprecated, use the partially compatible (1 2 840 113549 1 12 1) OIDs instead
Description = pkcs-12-PBEID
Warning
OID = 1 2 840 113549 1 12 5 1 1
Comment = PKCS #12 OID PBEID. Deprecated, use (1 2 840 113549 1 12 1 1) instead
Description = pkcs-12-PBEWithSha1And128BitRC4
Warning
OID = 1 2 840 113549 1 12 5 1 2
Comment = PKCS #12 OID PBEID. Deprecated, use (1 2 840 113549 1 12 1 2) instead
Description = pkcs-12-PBEWithSha1And40BitRC4
Warning
OID = 1 2 840 113549 1 12 5 1 3
Comment = PKCS #12 OID PBEID. Deprecated, use the incompatible but similar (1 2 840 113549 1 12 1 3) or (1 2 840 113549 1 12 1 4) instead
Description = pkcs-12-PBEWithSha1AndTripleDESCBC
Warning
OID = 1 2 840 113549 1 12 5 1 4
Comment = PKCS #12 OID PBEID. Deprecated, use (1 2 840 113549 1 12 1 5) instead
Description = pkcs-12-PBEWithSha1And128BitRC2CBC
Warning
OID = 1 2 840 113549 1 12 5 1 5
Comment = PKCS #12 OID PBEID. Deprecated, use (1 2 840 113549 1 12 1 6) instead
Description = pkcs-12-PBEWithSha1And40BitRC2CBC
Warning
OID = 1 2 840 113549 1 12 5 1 6
Comment = PKCS #12 OID PBEID. Deprecated, use the incompatible but similar (1 2 840 113549 1 12 1 1) or (1 2 840 113549 1 12 1 2) instead
Description = pkcs-12-PBEWithSha1AndRC4
Warning
OID = 1 2 840 113549 1 12 5 1 7
Comment = PKCS #12 OID PBEID. Deprecated, use the incompatible but similar (1 2 840 113549 1 12 1 5) or (1 2 840 113549 1 12 1 6) instead
Description = pkcs-12-PBEWithSha1AndRC2CBC
Warning
OID = 1 2 840 113549 1 12 5 2
Comment = PKCS #12 OID. Deprecated, use the conventional PKCS #1 OIDs instead
Description = pkcs-12-EnvelopingID
OID = 1 2 840 113549 1 12 5 2 1
Comment = PKCS #12 OID EnvelopingID. Deprecated, use the conventional PKCS #1 OIDs instead
Description = pkcs-12-RSAEncryptionWith128BitRC4
Warning
OID = 1 2 840 113549 1 12 5 2 2
Comment = PKCS #12 OID EnvelopingID. Deprecated, use the conventional PKCS #1 OIDs instead
Description = pkcs-12-RSAEncryptionWith40BitRC4
Warning
OID = 1 2 840 113549 1 12 5 2 3
Comment = PKCS #12 OID EnvelopingID. Deprecated, use the conventional PKCS #1 OIDs instead
Description = pkcs-12-RSAEncryptionWithTripleDES
Warning
OID = 1 2 840 113549 1 12 5 3
Comment = PKCS #12 OID EnvelopingID. Deprecated, use the conventional PKCS #1 OIDs instead
Description = pkcs-12-SignatureID
Warning
OID = 1 2 840 113549 1 12 5 3 1
Comment = PKCS #12 OID SignatureID. Deprecated, use the conventional PKCS #1 OIDs instead
Description = pkcs-12-RSASignatureWithSHA1Digest
Warning
# Yet *another* redefinition of the PKCS #12 "bag" ID's, now in a different
# order than the last redefinition at ... 12 3.
OID = 1 2 840 113549 1 12 10
Description = pkcs-12Version1
OID = 1 2 840 113549 1 12 10 1
Description = pkcs-12BadIds
OID = 1 2 840 113549 1 12 10 1 1
Comment = PKCS #12 BagIds
Description = pkcs-12-keyBag
OID = 1 2 840 113549 1 12 10 1 2
Comment = PKCS #12 BagIds
Description = pkcs-12-pkcs-8ShroudedKeyBag
OID = 1 2 840 113549 1 12 10 1 3
Comment = PKCS #12 BagIds
Description = pkcs-12-certBag
OID = 1 2 840 113549 1 12 10 1 4
Comment = PKCS #12 BagIds
Description = pkcs-12-crlBag
OID = 1 2 840 113549 1 12 10 1 5
Comment = PKCS #12 BagIds
Description = pkcs-12-secretBag
OID = 1 2 840 113549 1 12 10 1 6
Comment = PKCS #12 BagIds
Description = pkcs-12-safeContentsBag
# PKCS #15
OID = 1 2 840 113549 1 15 1
Comment = PKCS #15
Description = pkcs15modules
OID = 1 2 840 113549 1 15 2
Comment = PKCS #15
Description = pkcs15attributes
OID = 1 2 840 113549 1 15 3
Comment = PKCS #15
Description = pkcs15contentType
OID = 1 2 840 113549 1 15 3 1
Comment = PKCS #15 content type
Description = pkcs15content
# RSADSI digest algorithms
OID = 1 2 840 113549 2
Description = digestAlgorithm
OID = 1 2 840 113549 2 2
Comment = RSADSI digestAlgorithm
Description = md2
OID = 1 2 840 113549 2 4
Comment = RSADSI digestAlgorithm
Description = md4
OID = 1 2 840 113549 2 5
Comment = RSADSI digestAlgorithm
Description = md5
OID = 1 2 840 113549 2 7
Comment = RSADSI digestAlgorithm
Description = hmacWithSHA1
OID = 1 2 840 113549 2 8
Comment = RSADSI digestAlgorithm
Description = hmacWithSHA224
OID = 1 2 840 113549 2 9
Comment = RSADSI digestAlgorithm
Description = hmacWithSHA256
OID = 1 2 840 113549 2 10
Comment = RSADSI digestAlgorithm
Description = hmacWithSHA384
OID = 1 2 840 113549 2 11
Comment = RSADSI digestAlgorithm
Description = hmacWithSHA512
# RSADSI encryption algorithms
OID = 1 2 840 113549 3
Description = encryptionAlgorithm
OID = 1 2 840 113549 3 2
Comment = RSADSI encryptionAlgorithm
Description = rc2CBC
OID = 1 2 840 113549 3 3
Comment = RSADSI encryptionAlgorithm
Description = rc2ECB
OID = 1 2 840 113549 3 4
Comment = RSADSI encryptionAlgorithm
Description = rc4
OID = 1 2 840 113549 3 5
Comment = RSADSI encryptionAlgorithm
Description = rc4WithMAC
OID = 1 2 840 113549 3 6
Comment = RSADSI encryptionAlgorithm
Description = desx-CBC
OID = 1 2 840 113549 3 7
Comment = RSADSI encryptionAlgorithm
Description = des-EDE3-CBC
OID = 1 2 840 113549 3 8
Comment = RSADSI encryptionAlgorithm
Description = rc5CBC
OID = 1 2 840 113549 3 9
Comment = RSADSI encryptionAlgorithm
Description = rc5-CBCPad
OID = 1 2 840 113549 3 10
Comment = RSADSI encryptionAlgorithm. Formerly called CDMFCBCPad
Description = desCDMF
# Identrus
OID = 1 2 840 114021 1 6 1
Comment = Identrus
Description = Identrus unknown policyIdentifier
OID = 1 2 840 114021 4 1
Comment = Identrus
Description = identrusOCSP
# Microsoft (both 1 2 840 and 1 3 6 1 4 1 arcs)
OID = 1 2 840 113556 1 2 241
Comment = Microsoft Exchange Server - attribute
Description = deliveryMechanism
OID = 1 2 840 113556 1 2 281
Comment = Microsoft Cert Template - attribute
Description = ntSecurityDescriptor
OID = 1 2 840 113556 1 3 0
Comment = Microsoft Exchange Server - object class
Description = site-Addressing
OID = 1 2 840 113556 1 3 13
Comment = Microsoft Exchange Server - object class
Description = classSchema
OID = 1 2 840 113556 1 3 14
Comment = Microsoft Exchange Server - object class
Description = attributeSchema
OID = 1 2 840 113556 1 3 17
Comment = Microsoft Exchange Server - object class
Description = mailbox-Agent
OID = 1 2 840 113556 1 3 22
Comment = Microsoft Exchange Server - object class
Description = mailbox
OID = 1 2 840 113556 1 3 23
Comment = Microsoft Exchange Server - object class
Description = container
OID = 1 2 840 113556 1 3 46
Comment = Microsoft Exchange Server - object class
Description = mailRecipient
OID = 1 2 840 113556 1 4 145
Comment = Microsoft Cert Template - attribute
Description = revision
OID = 1 2 840 113556 1 4 1327
Comment = Microsoft Cert Template - attribute
Description = pKIDefaultKeySpec
OID = 1 2 840 113556 1 4 1328
Comment = Microsoft Cert Template - attribute
Description = pKIKeyUsage
OID = 1 2 840 113556 1 4 1329
Comment = Microsoft Cert Template - attribute
Description = pKIMaxIssuingDepth
OID = 1 2 840 113556 1 4 1330
Comment = Microsoft Cert Template - attribute
Description = pKICriticalExtensions
OID = 1 2 840 113556 1 4 1331
Comment = Microsoft Cert Template - attribute
Description = pKIExpirationPeriod
OID = 1 2 840 113556 1 4 1332
Comment = Microsoft Cert Template - attribute
Description = pKIOverlapPeriod
OID = 1 2 840 113556 1 4 1333
Comment = Microsoft Cert Template - attribute
Description = pKIExtendedKeyUsage
OID = 1 2 840 113556 1 4 1334
Comment = Microsoft Cert Template - attribute
Description = pKIDefaultCSPs
OID = 1 2 840 113556 1 4 1335
Comment = Microsoft Cert Template - attribute
Description = pKIEnrollmentAccess
OID = 1 2 840 113556 1 4 1429
Comment = Microsoft Cert Template - attribute
Description = msPKI-RA-Signature
OID = 1 2 840 113556 1 4 1430
Comment = Microsoft Cert Template - attribute
Description = msPKI-Enrollment-Flag
OID = 1 2 840 113556 1 4 1431
Comment = Microsoft Cert Template - attribute
Description = msPKI-Private-Key-Flag
OID = 1 2 840 113556 1 4 1432
Comment = Microsoft Cert Template - attribute
Description = msPKI-Certificate-Name-Flag
OID = 1 2 840 113556 1 4 1433
Comment = Microsoft Cert Template - attribute
Description = msPKI-Minimal-Key-Size
OID = 1 2 840 113556 1 4 1434
Comment = Microsoft Cert Template - attribute
Description = msPKI-Template-Schema-Version
OID = 1 2 840 113556 1 4 1435
Comment = Microsoft Cert Template - attribute
Description = msPKI-Template-Minor-Revision
OID = 1 2 840 113556 1 4 1436
Comment = Microsoft Cert Template - attribute
Description = msPKI-Cert-Template-OID
OID = 1 2 840 113556 1 4 1437
Comment = Microsoft Cert Template - attribute
Description = msPKI-Supersede-Templates
OID = 1 2 840 113556 1 4 1438
Comment = Microsoft Cert Template - attribute
Description = msPKI-RA-Policies
OID = 1 2 840 113556 1 4 1439
Comment = Microsoft Cert Template - attribute
Description = msPKI-Certificate-Policy
OID = 1 2 840 113556 1 4 1674
Comment = Microsoft Cert Template - attribute
Description = msPKI-Certificate-Application-Policy
OID = 1 2 840 113556 1 4 1675
Comment = Microsoft Cert Template - attribute
Description = msPKI-RA-Application-Policies
OID = 1 2 840 113556 4 3
Comment = Microsoft
Description = microsoftExcel
OID = 1 2 840 113556 4 4
Comment = Microsoft
Description = titledWithOID
OID = 1 2 840 113556 4 5
Comment = Microsoft
Description = microsoftPowerPoint
# Adobe
OID = 1 2 840 113583 1
Comment = Adobe Acrobat
Description = adobeAcrobat
OID = 1 2 840 113583 1 1
Comment = Adobe Acrobat security
Description = acrobatSecurity
OID = 1 2 840 113583 1 1 1
Comment = Adobe Acrobat security
Description = pdfPassword
OID = 1 2 840 113583 1 1 2
Comment = Adobe Acrobat security
Description = pdfDefaultSigningCredential
OID = 1 2 840 113583 1 1 3
Comment = Adobe Acrobat security
Description = pdfDefaultEncryptionCredential
OID = 1 2 840 113583 1 1 4
Comment = Adobe Acrobat security
Description = pdfPasswordTimeout
OID = 1 2 840 113583 1 1 5
Comment = Adobe Acrobat security
Description = pdfAuthenticDocumentsTrust
OID = 1 2 840 113583 1 1 6
Comment = Adobe Acrobat security
Description = pdfDynamicContentTrust
Warning
OID = 1 2 840 113583 1 1 7
Comment = Adobe Acrobat security
Description = pdfUbiquityTrust
OID = 1 2 840 113583 1 1 8
Comment = Adobe Acrobat security
Description = pdfRevocationInfoArchival
OID = 1 2 840 113583 1 1 9
Comment = Adobe Acrobat security
Description = pdfX509Extension
OID = 1 2 840 113583 1 1 9 1
Comment = Adobe Acrobat security
Description = pdfTimeStamp
OID = 1 2 840 113583 1 1 9 2
Comment = Adobe Acrobat security
Description = pdfArchiveRevInfo
OID = 1 2 840 113583 1 1 10
Comment = Adobe Acrobat security
Description = pdfPPLKLiteCredential
OID = 1 2 840 113583 1 2
Comment = Adobe Acrobat CPS
Description = acrobatCPS
OID = 1 2 840 113583 1 2 1
Comment = Adobe Acrobat CPS
Description = pdfAuthenticDocumentsCPS
OID = 1 2 840 113583 1 2 2
Comment = Adobe Acrobat CPS
Description = pdfTestCPS
OID = 1 2 840 113583 1 2 3
Comment = Adobe Acrobat CPS
Description = pdfUbiquityCPS
OID = 1 2 840 113583 1 2 4
Comment = Adobe Acrobat CPS
Description = pdfAdhocCPS
OID = 1 2 840 113583 1 7
Comment = Adobe Acrobat ubiquity
Description = acrobatUbiquity
OID = 1 2 840 113583 1 7 1
Comment = Adobe Acrobat ubiquity
Description = pdfUbiquitySubRights
# The following arc is explicitly reserved for extensions that don't fall
# under 1 2 840 113583 1 1 9. In other words someone at Adobe either made
# an editing error or codified an OID-encoding error.
OID = 1 2 840 113583 1 9
Comment = Adobe Acrobat X.509 extension
Description = acrobatExtension
# Another Adobe(?)
OID = 1 2 840 113628 114 1 7
Comment = Adobe
Description = adobePKCS7
# Apple
OID = 1 2 840 113635 100
Comment = Apple
Description = appleDataSecurity
OID = 1 2 840 113635 100 1
Comment = Apple
Description = appleTrustPolicy
OID = 1 2 840 113635 100 1 1
Comment = Apple trust policy
Description = appleISignTP
OID = 1 2 840 113635 100 1 2
Comment = Apple trust policy
Description = appleX509Basic
OID = 1 2 840 113635 100 1 3
Comment = Apple trust policy
Description = appleSSLPolicy
OID = 1 2 840 113635 100 1 4
Comment = Apple trust policy
Description = appleLocalCertGenPolicy
OID = 1 2 840 113635 100 1 5
Comment = Apple trust policy
Description = appleCSRGenPolicy
OID = 1 2 840 113635 100 1 6
Comment = Apple trust policy
Description = appleCRLPolicy
OID = 1 2 840 113635 100 1 7
Comment = Apple trust policy
Description = appleOCSPPolicy
OID = 1 2 840 113635 100 1 8
Comment = Apple trust policy
Description = appleSMIMEPolicy
OID = 1 2 840 113635 100 1 9
Comment = Apple trust policy
Description = appleEAPPolicy
OID = 1 2 840 113635 100 1 10
Comment = Apple trust policy
Description = appleSWUpdateSigningPolicy
OID = 1 2 840 113635 100 1 11
Comment = Apple trust policy
Description = appleIPSecPolicy
OID = 1 2 840 113635 100 1 12
Comment = Apple trust policy
Description = appleIChatPolicy
OID = 1 2 840 113635 100 1 13
Comment = Apple trust policy
Description = appleResourceSignPolicy
OID = 1 2 840 113635 100 1 14
Comment = Apple trust policy
Description = applePKINITClientPolicy
OID = 1 2 840 113635 100 1 15
Comment = Apple trust policy
Description = applePKINITServerPolicy
OID = 1 2 840 113635 100 1 16
Comment = Apple trust policy
Description = appleCodeSigningPolicy
OID = 1 2 840 113635 100 1 17
Comment = Apple trust policy
Description = applePackageSigningPolicy
OID = 1 2 840 113635 100 2
Comment = Apple
Description = appleSecurityAlgorithm
OID = 1 2 840 113635 100 2 1
Comment = Apple security algorithm
Description = appleFEE
OID = 1 2 840 113635 100 2 2
Comment = Apple security algorithm
Description = appleASC
OID = 1 2 840 113635 100 2 3
Comment = Apple security algorithm
Description = appleFEE_MD5
OID = 1 2 840 113635 100 2 4
Comment = Apple security algorithm
Description = appleFEE_SHA1
OID = 1 2 840 113635 100 2 5
Comment = Apple security algorithm
Description = appleFEED
OID = 1 2 840 113635 100 2 6
Comment = Apple security algorithm
Description = appleFEEDEXP
OID = 1 2 840 113635 100 2 7
Comment = Apple security algorithm
Description = appleECDSA
OID = 1 2 840 113635 100 3
Comment = Apple
Description = appleDotMacCertificate
# There are lots more subtypes under the following arcs, who knows
# what they're used for or whether they've ever been used at all.
OID = 1 2 840 113635 100 3 1
Comment = Apple dotMac certificate
Description = appleDotMacCertificateRequest
OID = 1 2 840 113635 100 3 2
Comment = Apple dotMac certificate
Description = appleDotMacCertificateExtension
OID = 1 2 840 113635 100 3 3
Comment = Apple dotMac certificate
Description = appleDotMacCertificateRequestValues
OID = 1 2 840 113635 100 4
Comment = Apple
Description = appleExtendedKeyUsage
OID = 1 2 840 113635 100 4 1
Comment = Apple extended key usage
Description = appleCodeSigning
OID = 1 2 840 113635 100 4 1 1
Comment = Apple extended key usage
Description = appleCodeSigningDevelopment
OID = 1 2 840 113635 100 4 1 2
Comment = Apple extended key usage
Description = appleSoftwareUpdateSigning
OID = 1 2 840 113635 100 4 1 3
Comment = Apple extended key usage
Description = appleCodeSigningThirdParty
OID = 1 2 840 113635 100 4 1 4
Comment = Apple extended key usage
Description = appleResourceSigning
OID = 1 2 840 113635 100 4 2
Comment = Apple extended key usage
Description = appleIChatSigning
OID = 1 2 840 113635 100 4 3
Comment = Apple extended key usage
Description = appleIChatEncryption
OID = 1 2 840 113635 100 4 4
Comment = Apple extended key usage
Description = appleSystemIdentity
OID = 1 2 840 113635 100 4 5
Comment = Apple extended key usage
Description = appleCryptoEnv
OID = 1 2 840 113635 100 4 5 1
Comment = Apple extended key usage
Description = appleCryptoProductionEnv
OID = 1 2 840 113635 100 4 5 2
Comment = Apple extended key usage
Description = appleCryptoMaintenanceEnv
OID = 1 2 840 113635 100 4 5 3
Comment = Apple extended key usage
Description = appleCryptoTestEnv
OID = 1 2 840 113635 100 4 5 4
Comment = Apple extended key usage
Description = appleCryptoDevelopmentEnv
OID = 1 2 840 113635 100 4 6
Comment = Apple extended key usage
Description = appleCryptoQoS
OID = 1 2 840 113635 100 4 6 1
Comment = Apple extended key usage
Description = appleCryptoTier0QoS
OID = 1 2 840 113635 100 4 6 2
Comment = Apple extended key usage
Description = appleCryptoTier1QoS
OID = 1 2 840 113635 100 4 6 3
Comment = Apple extended key usage
Description = appleCryptoTier2QoS
OID = 1 2 840 113635 100 4 6 4
Comment = Apple extended key usage
Description = appleCryptoTier3QoS
OID = 1 2 840 113635 100 5
Comment = Apple
Description = appleCertificatePolicies
OID = 1 2 840 113635 100 5 1
Comment = Apple
Description = appleCertificatePolicyID
OID = 1 2 840 113635 100 5 2
Comment = Apple
Description = appleDotMacCertificatePolicyID
OID = 1 2 840 113635 100 5 3
Comment = Apple
Description = appleADCCertificatePolicyID
OID = 1 2 840 113635 100 6
Comment = Apple
Description = appleCertificateExtensions
OID = 1 2 840 113635 100 6 1
Comment = Apple certificate extension
Description = appleCertificateExtensionCodeSigning
OID = 1 2 840 113635 100 6 1 1
Comment = Apple certificate extension
Description = appleCertificateExtensionAppleSigning
OID = 1 2 840 113635 100 6 1 2
Comment = Apple certificate extension
Description = appleCertificateExtensionADCDeveloperSigning
OID = 1 2 840 113635 100 6 1 3
Comment = Apple certificate extension
Description = appleCertificateExtensionADCAppleSigning
OID = 1 2 840 113635 100 15 1
Comment = Apple custom certificate extension
Description = appleCustomCertificateExtension1
OID = 1 2 840 113635 100 15 2
Comment = Apple custom certificate extension
Description = appleCustomCertificateExtension2
OID = 1 2 840 113635 100 15 3
Comment = Apple custom certificate extension
Description = appleCustomCertificateExtension3
# More Microsoft under the IETF arc
OID = 1 3 6 1 4 1 311 2 1 4
Comment = Microsoft code signing
Description = spcIndirectDataContext
OID = 1 3 6 1 4 1 311 2 1 10
Comment = Microsoft code signing. Also assigned as policyLink
Description = spcAgencyInfo
OID = 1 3 6 1 4 1 311 2 1 11
Comment = Microsoft code signing
Description = spcStatementType
OID = 1 3 6 1 4 1 311 2 1 12
Comment = Microsoft code signing
Description = spcSpOpusInfo
OID = 1 3 6 1 4 1 311 2 1 14
Comment = Microsoft
Description = certReqExtensions
OID = 1 3 6 1 4 1 311 2 1 15
Comment = Microsoft code signing
Description = spcPEImageData
OID = 1 3 6 1 4 1 311 2 1 18
Comment = Microsoft code signing
Description = spcRawFileData
OID = 1 3 6 1 4 1 311 2 1 19
Comment = Microsoft code signing
Description = spcStructuredStorageData
OID = 1 3 6 1 4 1 311 2 1 20
Comment = Microsoft code signing. Formerly "link extension" aka "glue extension"
Description = spcJavaClassData (type 1)
OID = 1 3 6 1 4 1 311 2 1 21
Comment = Microsoft
Description = individualCodeSigning
OID = 1 3 6 1 4 1 311 2 1 22
Comment = Microsoft
Description = commercialCodeSigning
OID = 1 3 6 1 4 1 311 2 1 25
Comment = Microsoft code signing. Also assigned as "glue extension"
Description = spcLink (type 2)
OID = 1 3 6 1 4 1 311 2 1 26
Comment = Microsoft code signing
Description = spcMinimalCriteriaInfo
OID = 1 3 6 1 4 1 311 2 1 27
Comment = Microsoft code signing
Description = spcFinancialCriteriaInfo
OID = 1 3 6 1 4 1 311 2 1 28
Comment = Microsoft code signing. Also assigned as "glue extension"
Description = spcLink (type 3)
OID = 1 3 6 1 4 1 311 2 1 29
Comment = Microsoft code signing
Description = spcHashInfoObjID
OID = 1 3 6 1 4 1 311 2 1 30
Comment = Microsoft code signing
Description = spcSipInfoObjID
OID = 1 3 6 1 4 1 311 2 2
Comment = Microsoft CTL
Description = ctl
OID = 1 3 6 1 4 1 311 2 2 1
Comment = Microsoft CTL
Description = ctlTrustedCodesigningCAList
OID = 1 3 6 1 4 1 311 2 2 2
Comment = Microsoft CTL
Description = ctlTrustedClientAuthCAList
OID = 1 3 6 1 4 1 311 2 2 3
Comment = Microsoft CTL
Description = ctlTrustedServerAuthCAList
OID = 1 3 6 1 4 1 311 3 2 1
Comment = Microsoft code signing
Description = timestampRequest
OID = 1 3 6 1 4 1 311 10 1
Comment = Microsoft contentType
Description = certTrustList
OID = 1 3 6 1 4 1 311 10 1 1
Comment = Microsoft contentType
Description = sortedCtl
OID = 1 3 6 1 4 1 311 10 2
Comment = Microsoft
Description = nextUpdateLocation
OID = 1 3 6 1 4 1 311 10 3 1
Comment = Microsoft extended key usage
Description = certTrustListSigning
OID = 1 3 6 1 4 1 311 10 3 2
Comment = Microsoft extended key usage
Description = timeStampSigning
OID = 1 3 6 1 4 1 311 10 3 3
Comment = Microsoft extended key usage
Description = serverGatedCrypto
OID = 1 3 6 1 4 1 311 10 3 3 1
Comment = Microsoft
Description = serialized
OID = 1 3 6 1 4 1 311 10 3 4
Comment = Microsoft extended key usage
Description = encryptedFileSystem
OID = 1 3 6 1 4 1 311 10 3 5
Comment = Microsoft extended key usage
Description = whqlCrypto
OID = 1 3 6 1 4 1 311 10 3 6
Comment = Microsoft extended key usage
Description = nt5Crypto
OID = 1 3 6 1 4 1 311 10 3 7
Comment = Microsoft extended key usage
Description = oemWHQLCrypto
OID = 1 3 6 1 4 1 311 10 3 8
Comment = Microsoft extended key usage
Description = embeddedNTCrypto
OID = 1 3 6 1 4 1 311 10 3 9
Comment = Microsoft extended key usage
Description = rootListSigner
OID = 1 3 6 1 4 1 311 10 3 10
Comment = Microsoft extended 3key usage
Description = qualifiedSubordination
OID = 1 3 6 1 4 1 311 10 3 11
Comment = Microsoft extended key usage
Description = keyRecovery
OID = 1 3 6 1 4 1 311 10 3 12
Comment = Microsoft extended key usage
Description = documentSigning
OID = 1 3 6 1 4 1 311 10 3 13
Comment = Microsoft extended key usage
Description = lifetimeSigning
OID = 1 3 6 1 4 1 311 10 3 14
Comment = Microsoft extended key usage
Description = mobileDeviceSoftware
OID = 1 3 6 1 4 1 311 10 3 15
Comment = Microsoft extended key usage
Description = smartDisplay
OID = 1 3 6 1 4 1 311 10 3 16
Comment = Microsoft extended key usage
Description = cspSignature
OID = 1 3 6 1 4 1 311 10 3 4 1
Comment = Microsoft extended key usage
Description = efsRecovery
OID = 1 3 6 1 4 1 311 10 4 1
Comment = Microsoft attribute
Description = yesnoTrustAttr
OID = 1 3 6 1 4 1 311 10 5 1
Comment = Microsoft extended key usage
Description = drm
OID = 1 3 6 1 4 1 311 10 5 2
Comment = Microsoft extended key usage
Description = drmIndividualization
OID = 1 3 6 1 4 1 311 10 6 1
Comment = Microsoft extended key usage
Description = licenses
OID = 1 3 6 1 4 1 311 10 6 2
Comment = Microsoft extended key usage
Description = licenseServer
OID = 1 3 6 1 4 1 311 10 7 1
Comment = Microsoft attribute
Description = keyidRdn
OID = 1 3 6 1 4 1 311 10 8 1
Comment = Microsoft attribute
Description = removeCertificate
OID = 1 3 6 1 4 1 311 10 9 1
Comment = Microsoft attribute
Description = crossCertDistPoints
OID = 1 3 6 1 4 1 311 10 10 1
Comment = Microsoft
Description = cmcAddAttributes
OID = 1 3 6 1 4 1 311 10 11
Comment = Microsoft
Description = certPropIdPrefix
OID = 1 3 6 1 4 1 311 10 11 4
Comment = Microsoft
Description = certMd5HashPropId
OID = 1 3 6 1 4 1 311 10 11 20
Comment = Microsoft
Description = certKeyIdentifierPropId
OID = 1 3 6 1 4 1 311 10 11 28
Comment = Microsoft
Description = certIssuerSerialNumberMd5HashPropId
OID = 1 3 6 1 4 1 311 10 11 29
Comment = Microsoft
Description = certSubjectNameMd5HashPropId
OID = 1 3 6 1 4 1 311 10 12 1
Comment = Microsoft attribute
Description = anyApplicationPolicy
OID = 1 3 6 1 4 1 311 12
Comment = Microsoft attribute
Description = catalog
OID = 1 3 6 1 4 1 311 12 1 1
Comment = Microsoft attribute
Description = catalogList
OID = 1 3 6 1 4 1 311 12 1 2
Comment = Microsoft attribute
Description = catalogListMember
OID = 1 3 6 1 4 1 311 12 2 1
Comment = Microsoft attribute
Description = catalogNameValueObjID
OID = 1 3 6 1 4 1 311 12 2 2
Comment = Microsoft attribute
Description = catalogMemberInfoObjID
# Certificate signing a renewal request
OID = 1 3 6 1 4 1 311 13 1
Comment = Microsoft attribute
Description = renewalCertificate
# Name-and-value string pairs
OID = 1 3 6 1 4 1 311 13 2 1
Comment = Microsoft attribute
Description = enrolmentNameValuePair
# CAPI cert enrolment CSP, contains a BMPString describing the CAPI level and
# a BIT STRING blob containing a key spec
OID = 1 3 6 1 4 1 311 13 2 2
Comment = Microsoft attribute
Description = enrolmentCSP
# Windows OS version
OID = 1 3 6 1 4 1 311 13 2 3
Comment = Microsoft attribute
Description = osVersion
# This is just the normal issuerAndSerialNumber but with a MS-specific OID.
# Apparently it's used for CryptEncode/DecodeObject, whatever that is.
OID = 1 3 6 1 4 1 311 16 4
Comment = Microsoft attribute
Description = microsoftRecipientInfo
OID = 1 3 6 1 4 1 311 17 1
Comment = Microsoft attribute
Description = pkcs12KeyProviderNameAttr
OID = 1 3 6 1 4 1 311 17 2
Comment = Microsoft attribute
Description = localMachineKeyset
OID = 1 3 6 1 4 1 311 17 3
Comment = Microsoft attribute
Description = pkcs12ExtendedAttributes
OID = 1 3 6 1 4 1 311 20 1
Comment = Microsoft
Description = autoEnrollCtlUsage
OID = 1 3 6 1 4 1 311 20 2
Comment = Microsoft CAPICOM certificate template, V1
Description = enrollCerttypeExtension
OID = 1 3 6 1 4 1 311 20 2 1
Comment = Microsoft extended key usage
Description = enrollmentAgent
OID = 1 3 6 1 4 1 311 20 2 2
Comment = Microsoft extended key usage
Description = smartcardLogon
OID = 1 3 6 1 4 1 311 20 2 3
Comment = Microsoft UPN
Description = userPrincipalName
OID = 1 3 6 1 4 1 311 20 3
Comment = Microsoft
Description = certManifold
# Win2K CA certificate key/cert counter, high 16 bits = key index, low 16 bits
# = cert index. Key index is inc'd when a CA gets a new key, cert index is
# inc'd when a CA gets a new cert (ie recertifies a current key). This
# extension has two purposes, as a hint to rebuild key/cert lists when a Win2K
# CA is restored, and as a poster boy for the kind of crap that people are
# shovelling into certs that has no place there
OID = 1 3 6 1 4 1 311 21 1
Comment = Microsoft attribute. Also assigned as certsrvCaVersion
Description = cAKeyCertIndexPair
OID = 1 3 6 1 4 1 311 21 2
Comment = Microsoft
Description = certSrvPreviousCertHash
OID = 1 3 6 1 4 1 311 21 3
Comment = Microsoft
Description = crlVirtualBase
OID = 1 3 6 1 4 1 311 21 4
Comment = Microsoft
Description = crlNextPublish
# EKU: Encryption certificate for sending the private key to the CA
OID = 1 3 6 1 4 1 311 21 5
Comment = Microsoft extended key usage
Description = caExchange
Warning
# EKU: keyRecovery
OID = 1 3 6 1 4 1 311 21 6
Comment = Microsoft extended key usage
Description = keyRecovery
Warning
OID = 1 3 6 1 4 1 311 21 7
Comment = Microsoft CAPICOM certificate template, V2
Description = certificateTemplate
# This one is at least as bad as cAKeyCertIndexPair: The first part of
# the arc, 1 3 6 1 4 1 311 21 8, is fixed, then 6 32-bit values are
# randomly generated and appended to create the full semi-random OID.
# Obviously it's not possible to usefully display these things...
# Comment = Microsoft braindamage
# Description = autoEnrollEFS (1 3 6 1 4 1 311 21 8 x x x x x x)
OID = 1 3 6 1 4 1 311 21 9
Comment = Microsoft
Description = rdnDummySigner
OID = 1 3 6 1 4 1 311 21 10
Comment = Microsoft
Description = applicationCertPolicies
OID = 1 3 6 1 4 1 311 21 11
Comment = Microsoft
Description = applicationPolicyMappings
OID = 1 3 6 1 4 1 311 21 12
Comment = Microsoft
Description = applicationPolicyConstraints
# Encrypted private key
OID = 1 3 6 1 4 1 311 21 13
Comment = Microsoft attribute
Description = archivedKey
OID = 1 3 6 1 4 1 311 21 14
Comment = Microsoft
Description = crlSelfCDP
OID = 1 3 6 1 4 1 311 21 15
Comment = Microsoft
Description = requireCertChainPolicy
OID = 1 3 6 1 4 1 311 21 16
Comment = Microsoft
Description = archivedKeyCertHash
OID = 1 3 6 1 4 1 311 21 17
Comment = Microsoft
Description = issuedCertHash
OID = 1 3 6 1 4 1 311 21 19
Comment = Microsoft
Description = dsEmailReplication
# Identity of the client application/ActiveX control, user, and machine
# that generated the request
OID = 1 3 6 1 4 1 311 21 20
Comment = Microsoft attribute
Description = requestClientInfo
# Hash of private key
OID = 1 3 6 1 4 1 311 21 21
Comment = Microsoft attribute
Description = encryptedKeyHash
OID = 1 3 6 1 4 1 311 21 22
Comment = Microsoft
Description = certsrvCrossCaVersion
OID = 1 3 6 1 4 1 311 25 1
Comment = Microsoft
Description = ntdsReplication
OID = 1 3 6 1 4 1 311 25 2
Comment = Microsoft
Description = ntdsCASecurityExt
OID = 1 3 6 1 4 1 311 25 2 1
Comment = Microsoft
Description = ntdsObjectSID
OID = 1 3 6 1 4 1 311 31 1
Comment = Microsoft attribute
Description = productUpdate
# EKU: Health (= proof of compliance with system security policy) certificate
# (This may also be a policy OID rather than an EKU OID)
OID = 1 3 6 1 4 1 311 47 1 1
Comment = Microsoft extended key usage
Description = systemHealth
# EKU: Extended health (= proof of compliance with system security policy)
# certificate This is an interesting example of the triumph of politics
# over security, the "Health" key usage is meant to indicate compliance with
# a system or corporate security policy, and this key usage is for systems
# that don't comply with the policy but that need a "Health" certificate
# anyway
OID = 1 3 6 1 4 1 311 47 1 3
Comment = Microsoft extended key usage
Description = systemHealthLoophole
OID = 1 3 6 1 4 1 311 60 1 1
Comment = Microsoft policy attribute
Description = rootProgramFlags
OID = 1 3 6 1 4 1 311 61 1 1
Comment = Microsoft extended key usage
Description = kernelModeCodeSigning
OID = 1 3 6 1 4 1 311 60 2 1 1
Comment = Microsoft (???)
Description = jurisdictionOfIncorporationL
OID = 1 3 6 1 4 1 311 60 2 1 2
Comment = Microsoft (???)
Description = jurisdictionOfIncorporationSP
OID = 1 3 6 1 4 1 311 60 2 1 3
Comment = Microsoft (???)
Description = jurisdictionOfIncorporationC
OID = 1 3 6 1 4 1 311 76 509 1 1
Comment = Microsoft PKI services
Description = microsoftCPS
OID = 1 3 6 1 4 1 311 88
Comment = Microsoft attribute
Description = capiCom
OID = 1 3 6 1 4 1 311 88 1
Comment = Microsoft attribute
Description = capiComVersion
OID = 1 3 6 1 4 1 311 88 2
Comment = Microsoft attribute
Description = capiComAttribute
OID = 1 3 6 1 4 1 311 88 2 1
Comment = Microsoft attribute
Description = capiComDocumentName
OID = 1 3 6 1 4 1 311 88 2 2
Comment = Microsoft attribute
Description = capiComDocumentDescription
OID = 1 3 6 1 4 1 311 88 3
Comment = Microsoft attribute
Description = capiComEncryptedData
OID = 1 3 6 1 4 1 311 88 3 1
Comment = Microsoft attribute
Description = capiComEncryptedContent
# Ascom Systech
OID = 1 3 6 1 4 1 188 7 1 1
Comment = Ascom Systech
Description = ascom
OID = 1 3 6 1 4 1 188 7 1 1 1
Comment = Ascom Systech
Description = ideaECB
OID = 1 3 6 1 4 1 188 7 1 1 2
Comment = Ascom Systech
Description = ideaCBC
OID = 1 3 6 1 4 1 188 7 1 1 3
Comment = Ascom Systech
Description = ideaCFB
OID = 1 3 6 1 4 1 188 7 1 1 4
Comment = Ascom Systech
Description = ideaOFB
# Eurocontrol
OID = 1 3 6 1 4 1 2363 3 2
Comment = Eurocontrol certificate policy
Description = euroControlUntrustedEA
OID = 1 3 6 1 4 1 2363 4 3
Comment = Eurocontrol certificate policy
Description = euroControlEARootCA
OID = 1 3 6 1 4 1 2363 4 3 1
Comment = Eurocontrol certificate policy
Description = euroControlEABridgeCA
OID = 1 3 6 1 4 1 2363 4 3 1 1
Comment = Eurocontrol certificate policy
Description = euroControlEAIssuingCA
OID = 1 3 6 1 4 1 2363 4 3 1 1 1
Comment = Eurocontrol certificate policy
Description = euroControlEAClientCertificate
OID = 1 3 6 1 4 1 2363 4 3 1 1 2
Comment = Eurocontrol certificate policy
Description = euroControlEAServerCertificate
OID = 1 3 6 1 4 1 2363 4 3 1 1 3
Comment = Eurocontrol certificate policy
Description = euroControlEASWIMSigningCertificate
# UNINETT
OID = 1 3 6 1 4 1 2428 10 1 1
Comment = UNINETT PCA
Description = UNINETT policyIdentifier
# ICE-TEL
OID = 1 3 6 1 4 1 2712 10
Comment = ICE-TEL CA
Description = ICE-TEL policyIdentifier
OID = 1 3 6 1 4 1 2786 1 1 1
Comment = ICE-TEL CA policy
Description = ICE-TEL Italian policyIdentifier
# cryptlib
OID = 1 3 6 1 4 1 3029 1 1 1
Comment = cryptlib encryption algorithm
Description = blowfishECB
OID = 1 3 6 1 4 1 3029 1 1 2
Comment = cryptlib encryption algorithm
Description = blowfishCBC
OID = 1 3 6 1 4 1 3029 1 1 3
Comment = cryptlib encryption algorithm
Description = blowfishCFB
OID = 1 3 6 1 4 1 3029 1 1 4
Comment = cryptlib encryption algorithm
Description = blowfishOFB
OID = 1 3 6 1 4 1 3029 1 2 1
Comment = cryptlib public-key algorithm
Description = elgamal
OID = 1 3 6 1 4 1 3029 1 2 1 1
Comment = cryptlib public-key algorithm
Description = elgamalWithSHA-1
OID = 1 3 6 1 4 1 3029 1 2 1 2
Comment = cryptlib public-key algorithm
Description = elgamalWithRIPEMD-160
OID = 1 3 6 1 4 1 3029 3 1 1
Comment = cryptlib attribute type
Description = cryptlibPresenceCheck
OID = 1 3 6 1 4 1 3029 3 1 2
Comment = cryptlib attribute type
Description = pkiBoot
OID = 1 3 6 1 4 1 3029 3 1 4
Comment = cryptlib attribute type
Description = crlExtReason
OID = 1 3 6 1 4 1 3029 3 1 5
Comment = cryptlib attribute type
Description = keyFeatures
OID = 1 3 6 1 4 1 3029 4 1
Comment = cryptlib
Description = cryptlibContent
OID = 1 3 6 1 4 1 3029 4 1 1
Comment = cryptlib content type
Description = cryptlibConfigData
OID = 1 3 6 1 4 1 3029 4 1 2
Comment = cryptlib content type
Description = cryptlibUserIndex
OID = 1 3 6 1 4 1 3029 4 1 3
Comment = cryptlib content type
Description = cryptlibUserInfo
OID = 1 3 6 1 4 1 3029 4 1 4
Comment = cryptlib content type
Description = rtcsRequest
OID = 1 3 6 1 4 1 3029 4 1 5
Comment = cryptlib content type
Description = rtcsResponse
OID = 1 3 6 1 4 1 3029 4 1 6
Comment = cryptlib content type
Description = rtcsResponseExt
OID = 1 3 6 1 4 1 3029 42 11172 1
Comment = cryptlib special MPEG-of-cat OID
Description = mpeg-1
# Hex OID = 06 0A 2B 06 01 04 01 97 36 DD 24 36, TSA policy that's needed
# because TSP requires a policy OID in responses. This is the 'snooze
# policy, "Anything that arrives, we sign".
OID = 1 3 6 1 4 1 3029 54 11940 54
Comment = cryptlib TSA policy
Description = TSA policy "Anything that arrives, we sign"
# Hex OID = 06 0C 2B 06 01 04 01 97 55 58 59 5A 5A 59, last values are
# 'xyzzy'.
OID = 1 3 6 1 4 1 3029 88 89 90 90 89
Comment = cryptlib certificate policy
Description = xYZZY policyIdentifier
# PGP Inc.
OID = 1 3 6 1 4 1 3401 8 1 1
Comment = PGP key information
Description = pgpExtension
# EDI messaging for TMN Interactive Agents
OID = 1 3 6 1 4 1 3576 7
Comment = TMN EDI for Interactive Agents
Description = eciaAscX12Edi
OID = 1 3 6 1 4 1 3576 7 1
Comment = TMN EDI for Interactive Agents
Description = plainEDImessage
OID = 1 3 6 1 4 1 3576 7 2
Comment = TMN EDI for Interactive Agents
Description = signedEDImessage
OID = 1 3 6 1 4 1 3576 7 5
Comment = TMN EDI for Interactive Agents
Description = integrityEDImessage
OID = 1 3 6 1 4 1 3576 7 65
Comment = TMN EDI for Interactive Agents
Description = iaReceiptMessage
OID = 1 3 6 1 4 1 3576 7 97
Comment = TMN EDI for Interactive Agents
Description = iaStatusMessage
OID = 1 3 6 1 4 1 3576 8
Comment = TMN EDI for Interactive Agents
Description = eciaEdifact
OID = 1 3 6 1 4 1 3576 9
Comment = TMN EDI for Interactive Agents
Description = eciaNonEdi
# Globalsign
OID = 1 3 6 1 4 1 4146
Comment = Globalsign
Description = Globalsign
OID = 1 3 6 1 4 1 4146 1
Comment = Globalsign
Description = globalsignPolicy
# Present in the EV policy OID collection at the end of this list
#OID = 1 3 6 1 4 1 4146 1 1
#Comment = Globalsign policy
#Description = globalsignEVPolicy
OID = 1 3 6 1 4 1 4146 1 10
Comment = Globalsign policy
Description = globalsignDVPolicy
OID = 1 3 6 1 4 1 4146 1 20
Comment = Globalsign policy
Description = globalsignOVPolicy
OID = 1 3 6 1 4 1 4146 1 30
Comment = Globalsign policy
Description = globalsignTSAPolicy
OID = 1 3 6 1 4 1 4146 1 40
Comment = Globalsign policy
Description = globalsignClientCertPolicy
OID = 1 3 6 1 4 1 4146 1 50
Comment = Globalsign policy
Description = globalsignCodeSignPolicy
OID = 1 3 6 1 4 1 4146 1 60
Comment = Globalsign policy
Description = globalsignRootSignPolicy
OID = 1 3 6 1 4 1 4146 1 70
Comment = Globalsign policy
Description = globalsignTrustedRootPolicy
OID = 1 3 6 1 4 1 4146 1 80
Comment = Globalsign policy
Description = globalsignEDIClientPolicy
OID = 1 3 6 1 4 1 4146 1 81
Comment = Globalsign policy
Description = globalsignEDIServerPolicy
OID = 1 3 6 1 4 1 4146 1 90
Comment = Globalsign policy
Description = globalsignTPMRootPolicy
OID = 1 3 6 1 4 1 4146 1 95
Comment = Globalsign policy
Description = globalsignOCSPPolicy
# EdelWeb, http://timestamping.edelweb.fr
OID = 1 3 6 1 4 1 5309 1
Comment = EdelWeb policy
Description = edelWebPolicy
OID = 1 3 6 1 4 1 5309 1 2
Comment = EdelWeb policy
Description = edelWebCustomerPolicy
OID = 1 3 6 1 4 1 5309 1 2 1
Comment = EdelWeb policy
Description = edelWebClepsydrePolicy
OID = 1 3 6 1 4 1 5309 1 2 2
Comment = EdelWeb policy
Description = edelWebExperimentalTSAPolicy
OID = 1 3 6 1 4 1 5309 1 2 3
Comment = EdelWeb policy
Description = edelWebOpenEvidenceTSAPolicy
# Timeproof (www.timeproof.de)
OID = 1 3 6 1 4 1 5472
Comment = enterprise
Description = timeproof
OID = 1 3 6 1 4 1 5472 1
Comment = timeproof
Description = tss
OID = 1 3 6 1 4 1 5472 1 1
Comment = timeproof TSS
Description = tss80
OID = 1 3 6 1 4 1 5472 1 2
Comment = timeproof TSS
Description = tss380
OID = 1 3 6 1 4 1 5472 1 3
Comment = timeproof TSS
Description = tss400
# MEDePass
OID = 1 3 6 1 4 1 5770 0 3
Comment = MEDePass
Description = secondaryPractices
OID = 1 3 6 1 4 1 5770 0 4
Comment = MEDePass
Description = physicianIdentifiers
# Comodo (formerly WoTrust) CA
OID = 1 3 6 1 4 1 6449 1 2 1 3 1
Comment = Comodo CA
Description = comodoPolicy
OID = 1 3 6 1 4 1 6449 1 2 2 15
Comment = WoTrust (Comodo) CA
Description = wotrustPolicy
# This is actually called "unknownKeyUsage" but that's rather misleading,
# since it's used for Comodo's Certified Delivery Service receive facility
# we label it as such.
OID = 1 3 6 1 4 1 6449 1 3 5 2
Comment = Comodo CA
Description = comodoCertifiedDeliveryService
OID = 1 3 6 1 4 1 6449 2 1 1
Comment = Comodo CA
Description = comodoTimestampingPolicy
# TU Darmstadt ValidityModel
# http://www.cdc.informatik.tu-darmstadt.de/TI/Forschung/FlexiPKI/validitymodel/index.html
OID = 1 3 6 1 4 1 8301 3 5 1
Comment = TU Darmstadt ValidityModel
Description = validityModelChain
OID = 1 3 6 1 4 1 8301 3 5 2
Comment = ValidityModel
Description = validityModelShell
# Chilean Government
OID = 1 3 6 1 4 1 8231 1
Comment = Chilean Government national unique roll number
Description = rolUnicoNacional
# Google. These are CT OIDs but are never named anywhere in RFC 6962
# or the followup RFC 9162, which just refers back to 6962. The
# following names follow the pattern of <organisation>+<description>
# used elsewhere.
OID = 1 3 6 1 4 1 11129 2 4 2
Comment = Google Certificate Transparency
Description = googleSignedCertificateTimestamp
OID = 1 3 6 1 4 1 11129 2 4 3
Comment = Google Certificate Transparency
Description = googlePrecertificatePoison
OID = 1 3 6 1 4 1 11129 2 4 4
Comment = Google Certificate Transparency
Description = googlePrecertificateCA
OID = 1 3 6 1 4 1 11129 2 4 5
Comment = Google Certificate Transparency
Description = googleOcspSignedCertificateTimestamp
# GNU (GPG) Project
OID = 1 3 6 1 4 1 11591
Comment = GNU Project (see https://www.gnupg.org/oids.html)
Description = gnu
OID = 1 3 6 1 4 1 11591 1
Comment = GNU Radius
Description = gnuRadius
OID = 1 3 6 1 4 1 11591 2 2 1
Comment = Cert is intentionally self-signed.
Description = gpgX509StandaloneCert
OID = 1 3 6 1 4 1 11591 2 2 2
Comment = Mark cert as having a well known key
Description = gpgX509WellKnownPrivateKey
OID = 1 3 6 1 4 1 11591 2 2 10
Comment = Description of ECC params
Description = gpgX509PgpKdfKekParm
OID = 1 3 6 1 4 1 11591 2 3 1
Comment = CMS ct for a binary PGP keyblock
Description = gpgCtPgpKeyblock
OID = 1 3 6 1 4 1 11591 2 4 1 1
Comment = LDAP keyserver attribute
Description = gpgFingerprint
OID = 1 3 6 1 4 1 11591 2 4 1 2
Comment = LDAP keyserver attribute
Description = gpgSubFingerprint
OID = 1 3 6 1 4 1 11591 2 4 1 3
Comment = LDAP keyserver attribute
Description = gpgMailbox
OID = 1 3 6 1 4 1 11591 2 4 1 4
Comment = LDAP keyserver attribute
Description = gpgSubCertID
OID = 1 3 6 1 4 1 11591 2 5 1
Comment = LDAP URL ext, auth with current AD user
Description = gpgNtds
OID = 1 3 6 1 4 1 11591 2 6 1
Comment = X.509 encoded OpenPGP key usage
Description = gpgX509PgpUseCert
OID = 1 3 6 1 4 1 11591 2 6 2
Comment = X.509 encoded PGP key usage
Description = gpgX509PgpUseSign
OID = 1 3 6 1 4 1 11591 2 6 3
Comment = X.509 encoded PGP key usage
Description = gpgX509PgpUseEncr
OID = 1 3 6 1 4 1 11591 2 6 4
Comment = X.509 encoded PGP key usage
Description = gpgX509PgpUseAuth
OID = 1 3 6 1 4 1 11591 2 12242973
Comment = 0xBAD01D to indicate an invalid encoded OID
Description = gpgInvalidOid
OID = 1 3 6 1 4 1 11591 3
Comment = GNU Radar
Description = gnuRadar
OID = 1 3 6 1 4 1 11591 4 11
Comment = GNU Generic Security Service
Description = scrypt
OID = 1 3 6 1 4 1 11591 12
Comment = GNU digest algorithm
Description = gnuDigestAlgorithm
OID = 1 3 6 1 4 1 11591 12 2
Comment = GNU digest algorithm
Description = tiger
OID = 1 3 6 1 4 1 11591 13
Comment = GNU encryption algorithm
Description = gnuEncryptionAlgorithm
OID = 1 3 6 1 4 1 11591 13 2
Comment = GNU encryption algorithm
Description = serpent
OID = 1 3 6 1 4 1 11591 13 2 1
Comment = GNU encryption algorithm
Description = serpent128_ECB
OID = 1 3 6 1 4 1 11591 13 2 2
Comment = GNU encryption algorithm
Description = serpent128_CBC
OID = 1 3 6 1 4 1 11591 13 2 3
Comment = GNU encryption algorithm
Description = serpent128_OFB
OID = 1 3 6 1 4 1 11591 13 2 4
Comment = GNU encryption algorithm
Description = serpent128_CFB
OID = 1 3 6 1 4 1 11591 13 2 21
Comment = GNU encryption algorithm
Description = serpent192_ECB
OID = 1 3 6 1 4 1 11591 13 2 22
Comment = GNU encryption algorithm
Description = serpent192_CBC
OID = 1 3 6 1 4 1 11591 13 2 23
Comment = GNU encryption algorithm
Description = serpent192_OFB
OID = 1 3 6 1 4 1 11591 13 2 24
Comment = GNU encryption algorithm
Description = serpent192_CFB
OID = 1 3 6 1 4 1 11591 13 2 41
Comment = GNU encryption algorithm
Description = serpent256_ECB
OID = 1 3 6 1 4 1 11591 13 2 42
Comment = GNU encryption algorithm
Description = serpent256_CBC
OID = 1 3 6 1 4 1 11591 13 2 43
Comment = GNU encryption algorithm
Description = serpent256_OFB
OID = 1 3 6 1 4 1 11591 13 2 44
Comment = GNU encryption algorithm
Description = serpent256_CFB
OID = 1 3 6 1 4 1 11591 15 1
Comment = GNU encryption algorithm
Description = curve25519
OID = 1 3 6 1 4 1 11591 15 2
Comment = GNU encryption algorithm
Description = curve448
OID = 1 3 6 1 4 1 11591 15 3
Comment = GNU encryption algorithm
Description = curve25519ph
OID = 1 3 6 1 4 1 11591 15 4
Comment = GNU encryption algorithm
Description = curve448ph
# Northrop Grumman Mission Systems
OID = 1 3 6 1 4 1 16334 509 1 1
Comment = Northrop Grumman extended key usage
Description = Northrop Grumman extKeyUsage?
OID = 1 3 6 1 4 1 16334 509 2 1
Comment = Northrop Grumman policy
Description = ngcClass1
OID = 1 3 6 1 4 1 16334 509 2 2
Comment = Northrop Grumman policy
Description = ngcClass2
OID = 1 3 6 1 4 1 16334 509 2 3
Comment = Northrop Grumman policy
Description = ngcClass3
# Safenet
OID = 1 3 6 1 4 1 23629 1 4 2 1 1
Comment = SafeNet
Description = safenetUsageLimit
OID = 1 3 6 1 4 1 23629 1 4 2 1 2
Comment = SafeNet
Description = safenetEndDate
OID = 1 3 6 1 4 1 23629 1 4 2 1 3
Comment = SafeNet
Description = safenetStartDate
OID = 1 3 6 1 4 1 23629 1 4 2 1 4
Comment = SafeNet
Description = safenetAdminCert
OID = 1 3 6 1 4 1 23629 1 4 2 2 1
Comment = SafeNet
Description = safenetKeyDigest
# Carillon
OID = 1 3 6 1 4 1 25054 3
Comment = Carillon security
Description = carillonSecurity
OID = 1 3 6 1 4 1 25054 3 1
Comment = Carillon security
Description = carillonCommercialPKI
OID = 1 3 6 1 4 1 25054 3 2
Comment = Carillon security
Description = carillonCommercialTSA
OID = 1 3 6 1 4 1 25054 3 3
Comment = Carillon security
Description = carillonCommercialSCVP
OID = 1 3 6 1 4 1 25054 3 3 1
Comment = Carillon security
Description = carillonSCVPExtendedStatusInfo
OID = 1 3 6 1 4 1 25054 3 4
Comment = Carillon security
Description = carillonCommercialCMS
OID = 1 3 6 1 4 1 25054 3 4 1
Comment = Carillon security
Description = carillonExtKeyUsageCIVCardAuth
OID = 1 3 6 1 4 1 25054 3 4 2
Comment = Carillon security
Description = carillonExtKeyUsageCIVContentSigning
OID = 1 3 6 1 4 1 25054 3 5
Comment = Carillon security
Description = carillonCommercialLSAP
OID = 1 3 6 1 4 1 25054 3 5 1
Comment = Carillon security
Description = carillonExtKeyUsageLSAPCodeSigning
OID = 1 3 6 1 4 1 25054 3 6
Comment = Carillon security
Description = carillonCommercialCE
OID = 1 3 6 1 4 1 25054 3 7
Comment = Carillon security
Description = carillonCommercialLicense
OID = 1 3 6 1 4 1 25054 3 7 1
Comment = Carillon security
Description = carillonExtKeyUsageLicenseSigning
OID = 1 3 6 1 4 1 25054 3 8
Comment = Carillon security
Description = carillonCommercialSecret
# RFC 8649
OID = 1 3 6 1 4 1 51483 2 1
Comment = CTIA
Description = hashOfRootKey
# RFC 4556 / Kerberos
OID = 1 3 6 1 5 2 3 1
Comment = Kerberos
Description = authData
OID = 1 3 6 1 5 2 3 2
Comment = Kerberos
Description = dHKeyData
OID = 1 3 6 1 5 2 3 3
Comment = Kerberos
Description = rkeyData
OID = 1 3 6 1 5 2 3 4
Comment = Kerberos
Description = keyPurposeClientAuth
OID = 1 3 6 1 5 2 3 5
Comment = Kerberos
Description = keyPurposeKdc
OID = 1 3 6 1 5 2 3 6
Comment = Kerberos
Description = kdf
# PKIX
OID = 1 3 6 1 5 5 7
Description = pkix
OID = 1 3 6 1 5 5 7 0 12
Comment = PKIX
Description = attributeCert
OID = 1 3 6 1 5 5 7 1
Comment = PKIX
Description = privateExtension
OID = 1 3 6 1 5 5 7 1 1
Comment = PKIX private extension
Description = authorityInfoAccess
OID = 1 3 6 1 5 5 7 1 2
Comment = PKIX private extension
Description = biometricInfo
OID = 1 3 6 1 5 5 7 1 3
Comment = PKIX private extension
Description = qcStatements
OID = 1 3 6 1 5 5 7 1 4
Comment = PKIX private extension
Description = acAuditIdentity
OID = 1 3 6 1 5 5 7 1 5
Comment = PKIX private extension
Description = acTargeting
OID = 1 3 6 1 5 5 7 1 6
Comment = PKIX private extension
Description = acAaControls
OID = 1 3 6 1 5 5 7 1 7
Comment = PKIX private extension
Description = ipAddrBlocks
OID = 1 3 6 1 5 5 7 1 8
Comment = PKIX private extension
Description = autonomousSysIds
OID = 1 3 6 1 5 5 7 1 9
Comment = PKIX private extension
Description = routerIdentifier
OID = 1 3 6 1 5 5 7 1 10
Comment = PKIX private extension
Description = acProxying
OID = 1 3 6 1 5 5 7 1 11
Comment = PKIX private extension
Description = subjectInfoAccess
OID = 1 3 6 1 5 5 7 1 12
Comment = PKIX private extension
Description = logoType
OID = 1 3 6 1 5 5 7 1 13
Comment = PKIX private extension
Description = wlanSSID
OID = 1 3 6 1 5 5 7 1 14
Comment = PKIX private extension
Description = proxyCertInfo
OID = 1 3 6 1 5 5 7 1 15
Comment = PKIX private extension
Description = acPolicies
OID = 1 3 6 1 5 5 7 1 16
Comment = PKIX private extension
Description = certificateWarranty
# Never used, and the name is confusing.
#OID = 1 3 6 1 5 5 7 1 17
#Comment = PKIX private extension
#Description = sim
OID = 1 3 6 1 5 5 7 1 18
Comment = PKIX private extension
Description = cmsContentConstraints
OID = 1 3 6 1 5 5 7 1 19
Comment = PKIX private extension
Description = otherCerts
OID = 1 3 6 1 5 5 7 1 20
Comment = PKIX private extension
Description = wrappedApexContinKey
OID = 1 3 6 1 5 5 7 1 21
Comment = PKIX private extension
Description = clearanceConstraints
OID = 1 3 6 1 5 5 7 1 22
Comment = PKIX private extension
Description = skiSemantics
OID = 1 3 6 1 5 5 7 1 23
Comment = PKIX private extension
Description = noSecrecyAfforded
OID = 1 3 6 1 5 5 7 1 24
Comment = PKIX private extension
Description = tlsFeature
OID = 1 3 6 1 5 5 7 1 25
Comment = PKIX private extension
Description = manufacturerUsageDescription
OID = 1 3 6 1 5 5 7 1 26
Comment = PKIX private extension
Description = tnAuthList
OID = 1 3 6 1 5 5 7 1 27
Comment = PKIX private extension
Description = jwtClaimConstraints
OID = 1 3 6 1 5 5 7 1 28
Comment = PKIX private extension
Description = ipAddrBlocksV2
OID = 1 3 6 1 5 5 7 1 29
Comment = PKIX private extension
Description = autonomousSysIdsV2
OID = 1 3 6 1 5 5 7 1 30
Comment = PKIX private extension
Description = manufacturerUsageDescriptionSigner
OID = 1 3 6 1 5 5 7 1 31
Comment = PKIX private extension
Description = acmeIdentifier
# draft-ietf-anima-bootstrapping-keyinfra
OID = 1 3 6 1 5 5 7 1 32
Comment = PKIX private extension
Description = masaURL
OID = 1 3 6 1 5 5 7 1 33
Comment = PKIX private extension
Description = enhancedJWTClaimConstraints
OID = 1 3 6 1 5 5 7 1 34
Comment = PKIX private extension
Description = nfTypes
OID = 1 3 6 1 5 5 7 2
Comment = PKIX
Description = policyQualifierIds
OID = 1 3 6 1 5 5 7 2 1
Comment = PKIX policy qualifier
Description = cps
OID = 1 3 6 1 5 5 7 2 2
Comment = PKIX policy qualifier
Description = unotice
OID = 1 3 6 1 5 5 7 2 3
Comment = PKIX policy qualifier
Description = textNotice
# RFC 4476
OID = 1 3 6 1 5 5 7 2 4
Comment = PKIX policy qualifier
Description = acps
OID = 1 3 6 1 5 5 7 2 5
Comment = PKIX policy qualifier
Description = acunotice
OID = 1 3 6 1 5 5 7 3
Comment = PKIX
Description = keyPurpose
OID = 1 3 6 1 5 5 7 3 1
Comment = PKIX key purpose
Description = serverAuth
OID = 1 3 6 1 5 5 7 3 2
Comment = PKIX key purpose
Description = clientAuth
OID = 1 3 6 1 5 5 7 3 3
Comment = PKIX key purpose
Description = codeSigning
OID = 1 3 6 1 5 5 7 3 4
Comment = PKIX key purpose
Description = emailProtection
OID = 1 3 6 1 5 5 7 3 5
Comment = PKIX key purpose
Description = ipsecEndSystem
Warning
OID = 1 3 6 1 5 5 7 3 6
Comment = PKIX key purpose
Description = ipsecTunnel
Warning
OID = 1 3 6 1 5 5 7 3 7
Comment = PKIX key purpose
Description = ipsecUser
Warning
OID = 1 3 6 1 5 5 7 3 8
Comment = PKIX key purpose
Description = timeStamping
OID = 1 3 6 1 5 5 7 3 9
Comment = PKIX key purpose
Description = ocspSigning
OID = 1 3 6 1 5 5 7 3 10
Comment = PKIX key purpose
Description = dvcs
OID = 1 3 6 1 5 5 7 3 11
Comment = PKIX key purpose
Description = sbgpCertAAServerAuth
Warning
OID = 1 3 6 1 5 5 7 3 12
Comment = PKIX key purpose
Description = scvpResponder
Warning
OID = 1 3 6 1 5 5 7 3 13
Comment = PKIX key purpose
Description = eapOverPPP
OID = 1 3 6 1 5 5 7 3 14
Comment = PKIX key purpose
Description = eapOverLAN
OID = 1 3 6 1 5 5 7 3 15
Comment = PKIX key purpose
Description = scvpServer
OID = 1 3 6 1 5 5 7 3 16
Comment = PKIX key purpose
Description = scvpClient
OID = 1 3 6 1 5 5 7 3 17
Comment = PKIX key purpose
Description = ipsecIKE
OID = 1 3 6 1 5 5 7 3 18
Comment = PKIX key purpose
Description = capwapAC
OID = 1 3 6 1 5 5 7 3 19
Comment = PKIX key purpose
Description = capwapWTP
OID = 1 3 6 1 5 5 7 3 20
Comment = PKIX key purpose
Description = sipDomain
OID = 1 3 6 1 5 5 7 3 21
Comment = PKIX key purpose
Description = secureShellClient
OID = 1 3 6 1 5 5 7 3 22
Comment = PKIX key purpose
Description = secureShellServer
OID = 1 3 6 1 5 5 7 3 23
Comment = PKIX key purpose
Description = sendRouter
OID = 1 3 6 1 5 5 7 3 24
Comment = PKIX key purpose
Description = sendProxiedRouter
OID = 1 3 6 1 5 5 7 3 25
Comment = PKIX key purpose
Description = sendOwner
OID = 1 3 6 1 5 5 7 3 26
Comment = PKIX key purpose
Description = sendProxiedOwner
OID = 1 3 6 1 5 5 7 3 27
Comment = PKIX key purpose
Description = cmcCA
OID = 1 3 6 1 5 5 7 3 28
Comment = PKIX key purpose
Description = cmcRA
OID = 1 3 6 1 5 5 7 3 29
Comment = PKIX key purpose
Description = cmcArchive
OID = 1 3 6 1 5 5 7 3 30
Comment = PKIX key purpose
Description = bgpsecRouter
# draft-chuang-bimi-certificate
OID = 1 3 6 1 5 5 7 3 31
Comment = PKIX key purpose
Description = bimi
# draft-ietf-lamps-cmp-updates
OID = 1 3 6 1 5 5 7 3 32
Comment = PKIX key purpose
Description = cmKGA
# draft-ietf-nfsv4-rpc-tls
OID = 1 3 6 1 5 5 7 3 33
Comment = PKIX key purpose
Description = rpcTLSClient
OID = 1 3 6 1 5 5 7 3 34
Comment = PKIX key purpose
Description = rpcTLSServer
OID = 1 3 6 1 5 5 7 3 35
Comment = PKIX key purpose
Description = bundleSecurity
OID = 1 3 6 1 5 5 7 3 36
Comment = PKIX key purpose
Description = documentSigning
OID = 1 3 6 1 5 5 7 4
Comment = PKIX
Description = cmpInformationTypes
OID = 1 3 6 1 5 5 7 4 1
Comment = PKIX CMP information
Description = caProtEncCert
OID = 1 3 6 1 5 5 7 4 2
Comment = PKIX CMP information
Description = signKeyPairTypes
OID = 1 3 6 1 5 5 7 4 3
Comment = PKIX CMP information
Description = encKeyPairTypes
OID = 1 3 6 1 5 5 7 4 4
Comment = PKIX CMP information
Description = preferredSymmAlg
OID = 1 3 6 1 5 5 7 4 5
Comment = PKIX CMP information
Description = caKeyUpdateInfo
OID = 1 3 6 1 5 5 7 4 6
Comment = PKIX CMP information
Description = currentCRL
OID = 1 3 6 1 5 5 7 4 7
Comment = PKIX CMP information
Description = unsupportedOIDs
OID = 1 3 6 1 5 5 7 4 10
Comment = PKIX CMP information
Description = keyPairParamReq
OID = 1 3 6 1 5 5 7 4 11
Comment = PKIX CMP information
Description = keyPairParamRep
OID = 1 3 6 1 5 5 7 4 12
Comment = PKIX CMP information
Description = revPassphrase
OID = 1 3 6 1 5 5 7 4 13
Comment = PKIX CMP information
Description = implicitConfirm
OID = 1 3 6 1 5 5 7 4 14
Comment = PKIX CMP information
Description = confirmWaitTime
OID = 1 3 6 1 5 5 7 4 15
Comment = PKIX CMP information
Description = origPKIMessage
OID = 1 3 6 1 5 5 7 4 16
Comment = PKIX CMP information
Description = suppLangTags
OID = 1 3 6 1 5 5 7 5
Comment = PKIX
Description = crmfRegistration
OID = 1 3 6 1 5 5 7 5 1
Comment = PKIX CRMF registration
Description = regCtrl
OID = 1 3 6 1 5 5 7 5 1 1
Comment = PKIX CRMF registration control
Description = regToken
OID = 1 3 6 1 5 5 7 5 1 2
Comment = PKIX CRMF registration control
Description = authenticator
OID = 1 3 6 1 5 5 7 5 1 3
Comment = PKIX CRMF registration control
Description = pkiPublicationInfo
OID = 1 3 6 1 5 5 7 5 1 4
Comment = PKIX CRMF registration control
Description = pkiArchiveOptions
OID = 1 3 6 1 5 5 7 5 1 5
Comment = PKIX CRMF registration control
Description = oldCertID
OID = 1 3 6 1 5 5 7 5 1 6
Comment = PKIX CRMF registration control
Description = protocolEncrKey
OID = 1 3 6 1 5 5 7 5 1 7
Comment = PKIX CRMF registration control
Description = altCertTemplate
OID = 1 3 6 1 5 5 7 5 1 8
Comment = PKIX CRMF registration control
Description = wtlsTemplate
OID = 1 3 6 1 5 5 7 5 2
Comment = PKIX CRMF registration
Description = utf8Pairs
OID = 1 3 6 1 5 5 7 5 2 1
Comment = PKIX CRMF registration control
Description = utf8Pairs
OID = 1 3 6 1 5 5 7 5 2 2
Comment = PKIX CRMF registration control
Description = certReq
OID = 1 3 6 1 5 5 7 6
Comment = PKIX
Description = algorithms
OID = 1 3 6 1 5 5 7 6 1
Comment = PKIX algorithm
Description = des40
OID = 1 3 6 1 5 5 7 6 2
Comment = PKIX algorithm
Description = noSignature
OID = 1 3 6 1 5 5 7 6 3
Comment = PKIX algorithm
Description = dhSigHmacSha1
OID = 1 3 6 1 5 5 7 6 4
Comment = PKIX algorithm
Description = dhPop
OID = 1 3 6 1 5 5 7 6 5
Comment = PKIX algorithm
Description = dhPopSha224
OID = 1 3 6 1 5 5 7 6 6
Comment = PKIX algorithm
Description = dhPopSha256
OID = 1 3 6 1 5 5 7 6 7
Comment = PKIX algorithm
Description = dhPopSha384
OID = 1 3 6 1 5 5 7 6 8
Comment = PKIX algorithm
Description = dhPopSha512
OID = 1 3 6 1 5 5 7 6 15
Comment = PKIX algorithm
Description = dhPopStaticSha224HmacSha224
OID = 1 3 6 1 5 5 7 6 16
Comment = PKIX algorithm
Description = dhPopStaticSha256HmacSha256
OID = 1 3 6 1 5 5 7 6 17
Comment = PKIX algorithm
Description = dhPopStaticSha384HmacSha384
OID = 1 3 6 1 5 5 7 6 18
Comment = PKIX algorithm
Description = dhPopStaticSha512HmacSha512
OID = 1 3 6 1 5 5 7 6 25
Comment = PKIX algorithm
Description = ecdhPopStaticSha224HmacSha224
OID = 1 3 6 1 5 5 7 6 26
Comment = PKIX algorithm
Description = ecdhPopStaticSha256HmacSha256
OID = 1 3 6 1 5 5 7 6 27
Comment = PKIX algorithm
Description = ecdhPopStaticSha384HmacSha384
OID = 1 3 6 1 5 5 7 6 28
Comment = PKIX algorithm
Description = ecdhPopStaticSha512HmacSha512
OID = 1 3 6 1 5 5 7 6 30
Comment = PKIX algorithm
Description = rsaPssShake128
OID = 1 3 6 1 5 5 7 6 31
Comment = PKIX algorithm
Description = rsaPssShake256
OID = 1 3 6 1 5 5 7 6 32
Comment = PKIX algorithm
Description = ecdsaShake128
OID = 1 3 6 1 5 5 7 6 33
Comment = PKIX algorithm
Description = ecdsaShake256
OID = 1 3 6 1 5 5 7 7
Comment = PKIX
Description = cmcControls
OID = 1 3 6 1 5 5 7 8
Comment = PKIX
Description = otherNames
OID = 1 3 6 1 5 5 7 8 1
Comment = PKIX other name
Description = personalData
OID = 1 3 6 1 5 5 7 8 2
Comment = PKIX other name
Description = userGroup
OID = 1 3 6 1 5 5 7 8 3
Comment = PKIX other name
Description = permanentIdentifier
OID = 1 3 6 1 5 5 7 8 5
Comment = PKIX other name
Description = xmppAddr
OID = 1 3 6 1 5 5 7 8 6
Comment = PKIX other name
Description = SIM
OID = 1 3 6 1 5 5 7 8 7
Comment = PKIX other name
Description = dnsSRV
OID = 1 3 6 1 5 5 7 8 8
Comment = PKIX other name
Description = naiRealm
OID = 1 3 6 1 5 5 7 8 9
Comment = PKIX other name
Description = smtpUTF8Mailbox
OID = 1 3 6 1 5 5 7 8 10
Comment = PKIX other name
Description = acpNodeName
OID = 1 3 6 1 5 5 7 8 11
Comment = PKIX other name
Description = bundleEID
OID = 1 3 6 1 5 5 7 9
Comment = PKIX qualified certificates
Description = personalData
OID = 1 3 6 1 5 5 7 9 1
Comment = PKIX personal data
Description = dateOfBirth
OID = 1 3 6 1 5 5 7 9 2
Comment = PKIX personal data
Description = placeOfBirth
OID = 1 3 6 1 5 5 7 9 3
Comment = PKIX personal data
Description = gender
OID = 1 3 6 1 5 5 7 9 4
Comment = PKIX personal data
Description = countryOfCitizenship
OID = 1 3 6 1 5 5 7 9 5
Comment = PKIX personal data
Description = countryOfResidence
OID = 1 3 6 1 5 5 7 10
Comment = PKIX
Description = attributeCertificate
OID = 1 3 6 1 5 5 7 10 1
Comment = PKIX attribute certificate extension
Description = authenticationInfo
OID = 1 3 6 1 5 5 7 10 2
Comment = PKIX attribute certificate extension
Description = accessIdentity
OID = 1 3 6 1 5 5 7 10 3
Comment = PKIX attribute certificate extension
Description = chargingIdentity
OID = 1 3 6 1 5 5 7 10 4
Comment = PKIX attribute certificate extension
Description = group
OID = 1 3 6 1 5 5 7 10 5
Comment = PKIX attribute certificate extension
Description = role
OID = 1 3 6 1 5 5 7 10 6
Comment = PKIX attribute-certificate extension
Description = wlanSSID
OID = 1 3 6 1 5 5 7 11
Comment = PKIX qualified certificates
Description = personalData
OID = 1 3 6 1 5 5 7 11 1
Comment = PKIX qualified certificates
Description = pkixQCSyntax-v1
OID = 1 3 6 1 5 5 7 11 2
Comment = PKIX qualified certificates
Description = pkixQCSyntax-v2
OID = 1 3 6 1 5 5 7 12
Comment = PKIX CMC Content Types
Description = pkixCCT
OID = 1 3 6 1 5 5 7 12 2
Comment = PKIX CMC Content Types
Description = pkiData
OID = 1 3 6 1 5 5 7 12 3
Comment = PKIX CMC Content Types
Description = pkiResponse
OID = 1 3 6 1 5 5 7 14 2
Comment = PKIX policies
Description = resourceCertificatePolicy
# Simple^H^H^H^H^H^Server-based Certificate Validation Protocol
OID = 1 3 6 1 5 5 7 17
Comment = PKIX SCVP check
Description = scvpCheck
OID = 1 3 6 1 5 5 7 17 1
Comment = SCVP
Description = scvpCheckBuildPath
OID = 1 3 6 1 5 5 7 17 2
Comment = SCVP
Description = scvpCheckBuildValidPath
OID = 1 3 6 1 5 5 7 17 3
Comment = SCVP
Description = scvpCheckBuildStatusCheckedPath
OID = 1 3 6 1 5 5 7 17 4
Comment = SCVP
Description = scvpCheckBuildAaPath
OID = 1 3 6 1 5 5 7 17 5
Comment = SCVP
Description = scvpCheckBuildValidAaPath
OID = 1 3 6 1 5 5 7 17 6
Comment = SCVP
Description = scvpCheckBuildStatusCheckedAaPath
OID = 1 3 6 1 5 5 7 17 7
Comment = SCVP
Description = scvpCheckStatusCheckAcAndBuildStatusCheckedAaPath
OID = 1 3 6 1 5 5 7 18
Comment = PKIX SCVP wantback
Description = scvpWantBack
OID = 1 3 6 1 5 5 7 18 1
Comment = SCVP wantback
Description = scvpWantbackBestCertPath
OID = 1 3 6 1 5 5 7 18 2
Comment = SCVP wantback
Description = scvpWantbackRevocationInfo
OID = 1 3 6 1 5 5 7 18 4
Comment = SCVP wantback
Description = scvpWantbackPublicKeyInfo
OID = 1 3 6 1 5 5 7 18 5
Comment = SCVP wantback
Description = scvpWantbackAaCertPath
OID = 1 3 6 1 5 5 7 18 6
Comment = SCVP wantback
Description = scvpWantbackAaRevocationInfo
OID = 1 3 6 1 5 5 7 18 7
Comment = SCVP wantback
Description = scvpWantbackAcRevocationInfo
OID = 1 3 6 1 5 5 7 18 9
Comment = SCVP wantback
Description = scvpWantbackRelayedResponses
OID = 1 3 6 1 5 5 7 18 10
Comment = SCVP wantback
Description = scvpWantbackCert
OID = 1 3 6 1 5 5 7 18 11
Comment = SCVP wantback
Description = scvpWantbackAcCert
OID = 1 3 6 1 5 5 7 18 12
Comment = SCVP wantback
Description = scvpWantbackAllCertPaths
OID = 1 3 6 1 5 5 7 18 13
Comment = SCVP wantback
Description = scvpWantbackEeRevocationInfo
OID = 1 3 6 1 5 5 7 18 14
Comment = SCVP wantback
Description = scvpWantbackCAsRevocationInfo
OID = 1 3 6 1 5 5 7 19
Comment = SCVP validation policy
Description = scvpValPolicy
OID = 1 3 6 1 5 5 7 19 1
Comment = SCVP validation policy
Description = scvpDefaultValPolicy
OID = 1 3 6 1 5 5 7 19 2
Comment = SCVP validation policy
Description = scvpNameValAlg
OID = 1 3 6 1 5 5 7 19 2 1
Comment = SCVP validation policy
Description = scvpNameErrorNameMismatch
OID = 1 3 6 1 5 5 7 19 2 2
Comment = SCVP validation policy
Description = scvpNameErrorNoName
OID = 1 3 6 1 5 5 7 19 2 3
Comment = SCVP validation policy
Description = scvpNameErrorUnknownAlg
OID = 1 3 6 1 5 5 7 19 2 4
Comment = SCVP validation policy
Description = scvpNameErrorBadName
OID = 1 3 6 1 5 5 7 19 2 5
Comment = SCVP validation policy
Description = scvpNameErrorBadNameType
OID = 1 3 6 1 5 5 7 19 2 6
Comment = SCVP validation policy
Description = scvpNameErrorMixedNames
OID = 1 3 6 1 5 5 7 19 3
Comment = SCVP validation policy
Description = scvpBasicValAlg
OID = 1 3 6 1 5 5 7 19 3 1
Comment = SCVP validation policy error
Description = scvpValErrorExpired
OID = 1 3 6 1 5 5 7 19 3 2
Comment = SCVP validation policy error
Description = scvpValErrorNotYetValid
OID = 1 3 6 1 5 5 7 19 3 3
Comment = SCVP validation policy error
Description = scvpValErrorWrongTrustAnchor
OID = 1 3 6 1 5 5 7 19 3 4
Comment = SCVP validation policy error
Description = scvpValErrorNoValidCertPath
OID = 1 3 6 1 5 5 7 19 3 5
Comment = SCVP validation policy error
Description = scvpValErrorRevoked
OID = 1 3 6 1 5 5 7 19 3 9
Comment = SCVP validation policy error
Description = scvpValErrorInvalidKeyPurpose
OID = 1 3 6 1 5 5 7 19 3 10
Comment = SCVP validation policy error
Description = scvpValErrorInvalidKeyUsage
OID = 1 3 6 1 5 5 7 19 3 11
Comment = SCVP validation policy error
Description = scvpValErrorInvalidCertPolicy
# Qualified Certificates
OID = 1 3 6 1 5 5 7 20
Comment = Qualified Certificate
Description = logo
OID = 1 3 6 1 5 5 7 20 1
Comment = Qualified Certificate
Description = logoLoyalty
OID = 1 3 6 1 5 5 7 20 2
Comment = Qualified Certificate
Description = logoBackground
# OCSP
OID = 1 3 6 1 5 5 7 48 1
Comment = PKIX OCSP
Description = ocsp
OID = 1 3 6 1 5 5 7 48 1 1
Comment = OCSP
Description = ocspBasic
OID = 1 3 6 1 5 5 7 48 1 2
Comment = OCSP
Description = ocspNonce
OID = 1 3 6 1 5 5 7 48 1 3
Comment = OCSP
Description = ocspCRL
OID = 1 3 6 1 5 5 7 48 1 4
Comment = OCSP
Description = ocspResponse
OID = 1 3 6 1 5 5 7 48 1 5
Comment = OCSP
Description = ocspNoCheck
OID = 1 3 6 1 5 5 7 48 1 6
Comment = OCSP
Description = ocspArchiveCutoff
OID = 1 3 6 1 5 5 7 48 1 7
Comment = OCSP
Description = ocspServiceLocator
# Subject/AuthorityInfo types (OCSP is already listed above)
OID = 1 3 6 1 5 5 7 48 2
Comment = PKIX subject/authority info access descriptor
Description = caIssuers
OID = 1 3 6 1 5 5 7 48 3
Comment = PKIX subject/authority info access descriptor
Description = timeStamping
OID = 1 3 6 1 5 5 7 48 4
Comment = PKIX subject/authority info access descriptor
Description = dvcs
OID = 1 3 6 1 5 5 7 48 5
Comment = PKIX subject/authority info access descriptor
Description = caRepository
OID = 1 3 6 1 5 5 7 48 7
Comment = PKIX subject/authority info access descriptor
Description = signedObjectRepository
OID = 1 3 6 1 5 5 7 48 10
Comment = PKIX subject/authority info access descriptor
Description = rpkiManifest
OID = 1 3 6 1 5 5 7 48 11
Comment = PKIX subject/authority info access descriptor
Description = signedObject
# ISAKMP
OID = 1 3 6 1 5 5 8 1 1
Comment = ISAKMP HMAC algorithm
Description = hmacMD5
OID = 1 3 6 1 5 5 8 1 2
Comment = ISAKMP HMAC algorithm
Description = hmacSHA
OID = 1 3 6 1 5 5 8 1 3
Comment = ISAKMP HMAC algorithm
Description = hmacTiger
OID = 1 3 6 1 5 5 8 2 2
Comment = IKE ???
Description = iKEIntermediate
# DEC (via ECMA)
OID = 1 3 12 2 1011 7 1
Comment = DASS algorithm
Description = decEncryptionAlgorithm
OID = 1 3 12 2 1011 7 1 2
Comment = DASS encryption algorithm
Description = decDEA
OID = 1 3 12 2 1011 7 2
Comment = DASS algorithm
Description = decHashAlgorithm
OID = 1 3 12 2 1011 7 2 1
Comment = DASS hash algorithm
Description = decMD2
OID = 1 3 12 2 1011 7 2 2
Comment = DASS hash algorithm
Description = decMD4
OID = 1 3 12 2 1011 7 3
Comment = DASS algorithm
Description = decSignatureAlgorithm
OID = 1 3 12 2 1011 7 3 1
Comment = DASS signature algorithm
Description = decMD2withRSA
OID = 1 3 12 2 1011 7 3 2
Comment = DASS signature algorithm
Description = decMD4withRSA
OID = 1 3 12 2 1011 7 3 3
Comment = DASS signature algorithm
Description = decDEAMAC
# NIST Open Systems Environment (OSE) Implementor's Workshop (OIW),
# specialising in oddball and partially-defunct OIDs
OID = 1 3 14 2 26 5
Comment = Unsure about this OID
Description = sha
OID = 1 3 14 3 2 1 1
Comment = X.509. Unsure about this OID
Description = rsa
OID = 1 3 14 3 2 2
Comment = Oddball OIW OID
Description = md4WitRSA
OID = 1 3 14 3 2 3
Comment = Oddball OIW OID
Description = md5WithRSA
OID = 1 3 14 3 2 4
Comment = Oddball OIW OID
Description = md4WithRSAEncryption
OID = 1 3 14 3 2 2 1
Comment = X.509. Deprecated
Description = sqmod-N
Warning
OID = 1 3 14 3 2 3 1
Comment = X.509. Deprecated
Description = sqmod-NwithRSA
Warning
OID = 1 3 14 3 2 6
Description = desECB
OID = 1 3 14 3 2 7
Description = desCBC
OID = 1 3 14 3 2 8
Description = desOFB
OID = 1 3 14 3 2 9
Description = desCFB
OID = 1 3 14 3 2 10
Description = desMAC
OID = 1 3 14 3 2 11
Comment = ISO 9796-2, also X9.31 Part 1
Description = rsaSignature
OID = 1 3 14 3 2 12
Comment = OIW?, supposedly from an incomplete version of SDN.701 (doesn't match final SDN.701)
Description = dsa
Warning
OID = 1 3 14 3 2 13
Comment = Oddball OIW OID. Incorrectly used by JDK 1.1 in place of (1 3 14 3 2 27)
# Their response was that they know it's wrong, but noone uses SHA0 so it won't
# cause any problems, right?
Description = dsaWithSHA
Warning
# The various md<x>WithRSASignature OIDs are for the ANSI X9.31 draft and use
# ISO 9796-2 padding rules. This work was derailed during the PKP brouhaha and
# is still in progress (and probably will remain so)
OID = 1 3 14 3 2 14
Comment = Oddball OIW OID using 9796-2 padding rules
Description = mdc2WithRSASignature
OID = 1 3 14 3 2 15
Comment = Oddball OIW OID using 9796-2 padding rules
Description = shaWithRSASignature
OID = 1 3 14 3 2 16
Comment = Oddball OIW OID. Deprecated, use a plain DH OID instead
Description = dhWithCommonModulus
Warning
OID = 1 3 14 3 2 17
Comment = Oddball OIW OID. Mode is ECB
Description = desEDE
OID = 1 3 14 3 2 18
Comment = Oddball OIW OID
Description = sha
OID = 1 3 14 3 2 19
Comment = Oddball OIW OID, DES-based hash, planned for X9.31 Part 2
Description = mdc-2
OID = 1 3 14 3 2 20
Comment = Oddball OIW OID. Deprecated, use a plain DSA OID instead
Description = dsaCommon
Warning
OID = 1 3 14 3 2 21
Comment = Oddball OIW OID. Deprecated, use a plain dsaWithSHA OID instead
Description = dsaCommonWithSHA
Warning
OID = 1 3 14 3 2 22
Comment = Oddball OIW OID
Description = rsaKeyTransport
OID = 1 3 14 3 2 23
Comment = Oddball OIW OID
Description = keyed-hash-seal
OID = 1 3 14 3 2 24
Comment = Oddball OIW OID using 9796-2 padding rules
Description = md2WithRSASignature
OID = 1 3 14 3 2 25
Comment = Oddball OIW OID using 9796-2 padding rules
Description = md5WithRSASignature
OID = 1 3 14 3 2 26
Comment = OIW
Description = sha1
# Yet another multiply-assigned OID
OID = 1 3 14 3 2 27
Comment = OIW. This OID may also be assigned as ripemd-160
Description = dsaWithSHA1
OID = 1 3 14 3 2 28
Comment = OIW
Description = dsaWithCommonSHA1
OID = 1 3 14 3 2 29
Comment = Oddball OIW OID
Description = sha-1WithRSAEncryption
OID = 1 3 14 3 3 1
Comment = Oddball OIW OID
Description = simple-strong-auth-mechanism
OID = 1 3 14 7 2 1 1
Comment = Unsure about this OID
Description = ElGamal
OID = 1 3 14 7 2 3 1
Comment = Unsure about this OID
Description = md2WithRSA
OID = 1 3 14 7 2 3 2
Comment = Unsure about this OID
Description = md2WithElGamal
# IBM
OID = 1 3 18 0 2 18 1
Comment = IBM RACF ID mapping
Description = hostIDMapping
# FAA
OID = 1 3 27 16
Comment = ICAO security
Description = icaoSecurity
OID = 1 3 27 16 0
Comment = ICAO security test?
Description = icaoSecurity
OID = 1 3 27 16 0 1 1 1 1 1 1 0
Comment = ICAO security test?
Description = icaoTestValidationPolicy
OID = 1 3 27 16 1
Comment = ICAO certificate policies
Description = icaoCertPolicy
OID = 1 3 27 16 1 2
Comment = ICAO certificate policies
Description = icaoIATFRootCA
OID = 1 3 27 16 1 2 0 1
Comment = ICAO certificate policies
Description = icaoIdentityAssurance
OID = 1 3 27 16 1 2 0 1 1
Comment = ICAO certificate policies
Description = icaoIdentityAssuranceLow
OID = 1 3 27 16 1 2 0 1 2
Comment = ICAO certificate policies
Description = icaoIdentityAssuranceLowDevice
OID = 1 3 27 16 1 2 0 1 3
Comment = ICAO certificate policies
Description = icaoIdentityAssuranceLowTSPMediated
OID = 1 3 27 16 1 2 0 1 4
Comment = ICAO certificate policies
Description = icaoIdentityAssuranceMedium
OID = 1 3 27 16 1 2 0 1 5
Comment = ICAO certificate policies
Description = icaoIdentityAssuranceMediumDevice
OID = 1 3 27 16 1 2 0 1 6
Comment = ICAO certificate policies
Description = icaoIdentityAssuranceMediumTSPMediated
OID = 1 3 27 16 1 2 0 1 7
Comment = ICAO certificate policies
Description = icaoIdentityAssuranceMediumHardware
OID = 1 3 27 16 1 2 0 1 8
Comment = ICAO certificate policies
Description = icaoIdentityAssuranceMediumDeviceHardware
OID = 1 3 27 16 1 2 0 1 9
Comment = ICAO certificate policies
Description = icaoIdentityAssuranceHigh
OID = 1 3 27 16 1 2 0 1 10
Comment = ICAO certificate policies
Description = icaoIdentityAssuranceHighCardAuth
OID = 1 3 27 16 1 2 0 1 11
Comment = ICAO certificate policies
Description = icaoIdentityAssuranceHighContentSigning
OID = 1 3 27 16 1 2 1
Comment = ICAO certificate policies
Description = icaoIATFBridgeCA
OID = 1 3 27 16 1 2 1 0
Comment = ICAO certificate policies
Description = icaoCAODRootCA
OID = 1 3 27 16 1 2 1 1
Comment = ICAO certificate policies
Description = icaoCAODBridgeCA
OID = 1 3 27 16 1 2 1 1 1
Comment = ICAO certificate policies
Description = icaoUSBridgeCA
OID = 1 3 27 16 1 2 1 1 1 1
Comment = ICAO certificate policies
Description = icaoFAARootCA
OID = 1 3 27 16 1 2 1 1 1 1 1
Comment = ICAO certificate policies
Description = icaoFAAIssuingCA
OID = 1 3 27 16 1 2 1 1 1 1 1 1
Comment = ICAO certificate policies
Description = icaoFAAClientCertificate
OID = 1 3 27 16 1 2 1 1 1 1 1 2
Comment = ICAO certificate policies
Description = icaoFAAServerCertificate
OID = 1 3 27 16 1 2 1 1 1 1 1 3
Comment = ICAO certificate policies
Description = icaoFAASWIMSigningCertificate
# The OID value is wrong and the original document it came from
# isn't publicly available.
#OID = 1 3 27 16 1 2 1 1 1 1 1 1
#Comment = ICAO certificate policies
#Description = icaoFAAUntrustedDomain
OID = 1 3 27 16 1 4 1 1
Comment = ICAO extended key usage
Description = icaoSWIMSigning
# Teletrust
OID = 1 3 36 1
Comment = Teletrust document
Description = document
OID = 1 3 36 1 1
Comment = Teletrust document
Description = finalVersion
OID = 1 3 36 1 2
Comment = Teletrust document
Description = draft
OID = 1 3 36 2
Comment = Teletrust sio
Description = sio
OID = 1 3 36 2 1
Comment = Teletrust sio
Description = sedu
OID = 1 3 36 3
Comment = Teletrust algorithm
Description = algorithm
OID = 1 3 36 3 1
Comment = Teletrust algorithm
Description = encryptionAlgorithm
OID = 1 3 36 3 1 1
Comment = Teletrust encryption algorithm
Description = des
OID = 1 3 36 3 1 1 1
Comment = Teletrust encryption algorithm
Description = desECB_pad
OID = 1 3 36 3 1 1 1 1
Comment = Teletrust encryption algorithm
Description = desECB_ISOpad
OID = 1 3 36 3 1 1 2 1
Comment = Teletrust encryption algorithm
Description = desCBC_pad
OID = 1 3 36 3 1 1 2 1 1
Comment = Teletrust encryption algorithm
Description = desCBC_ISOpad
OID = 1 3 36 3 1 3
Comment = Teletrust encryption algorithm
Description = des_3
OID = 1 3 36 3 1 3 1 1
Comment = Teletrust encryption algorithm. EDE triple DES
Description = des_3ECB_pad
OID = 1 3 36 3 1 3 1 1 1
Comment = Teletrust encryption algorithm. EDE triple DES
Description = des_3ECB_ISOpad
OID = 1 3 36 3 1 3 2 1
Comment = Teletrust encryption algorithm. EDE triple DES
Description = des_3CBC_pad
OID = 1 3 36 3 1 3 2 1 1
Comment = Teletrust encryption algorithm. EDE triple DES
Description = des_3CBC_ISOpad
OID = 1 3 36 3 1 2
Comment = Teletrust encryption algorithm
Description = idea
OID = 1 3 36 3 1 2 1
Comment = Teletrust encryption algorithm
Description = ideaECB
OID = 1 3 36 3 1 2 1 1
Comment = Teletrust encryption algorithm
Description = ideaECB_pad
OID = 1 3 36 3 1 2 1 1 1
Comment = Teletrust encryption algorithm
Description = ideaECB_ISOpad
OID = 1 3 36 3 1 2 2
Comment = Teletrust encryption algorithm
Description = ideaCBC
OID = 1 3 36 3 1 2 2 1
Comment = Teletrust encryption algorithm
Description = ideaCBC_pad
OID = 1 3 36 3 1 2 2 1 1
Comment = Teletrust encryption algorithm
Description = ideaCBC_ISOpad
OID = 1 3 36 3 1 2 3
Comment = Teletrust encryption algorithm
Description = ideaOFB
OID = 1 3 36 3 1 2 4
Comment = Teletrust encryption algorithm
Description = ideaCFB
OID = 1 3 36 3 1 4
Comment = Teletrust encryption algorithm
Description = rsaEncryption
OID = 1 3 36 3 1 4 512 17
Comment = Teletrust encryption algorithm
Description = rsaEncryptionWithlmod512expe17
OID = 1 3 36 3 1 5
Comment = Teletrust encryption algorithm
Description = bsi-1
OID = 1 3 36 3 1 5 1
Comment = Teletrust encryption algorithm
Description = bsi_1ECB_pad
OID = 1 3 36 3 1 5 2
Comment = Teletrust encryption algorithm
Description = bsi_1CBC_pad
OID = 1 3 36 3 1 5 2 1
Comment = Teletrust encryption algorithm
Description = bsi_1CBC_PEMpad
OID = 1 3 36 3 2
Comment = Teletrust algorithm
Description = hashAlgorithm
OID = 1 3 36 3 2 1
Comment = Teletrust hash algorithm
Description = ripemd160
OID = 1 3 36 3 2 2
Comment = Teletrust hash algorithm
Description = ripemd128
OID = 1 3 36 3 2 3
Comment = Teletrust hash algorithm
Description = ripemd256
OID = 1 3 36 3 2 4
Comment = Teletrust hash algorithm
Description = mdc2singleLength
OID = 1 3 36 3 2 5
Comment = Teletrust hash algorithm
Description = mdc2doubleLength
OID = 1 3 36 3 3
Comment = Teletrust algorithm
Description = signatureAlgorithm
OID = 1 3 36 3 3 1
Comment = Teletrust signature algorithm
Description = rsaSignature
OID = 1 3 36 3 3 1 1
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1
# What *were* they thinking?
OID = 1 3 36 3 3 1 1 512 2
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l512_l2
OID = 1 3 36 3 3 1 1 640 2
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l640_l2
OID = 1 3 36 3 3 1 1 768 2
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l768_l2
OID = 1 3 36 3 3 1 1 896 2
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l896_l2
OID = 1 3 36 3 3 1 1 1024 2
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l1024_l2
OID = 1 3 36 3 3 1 1 512 3
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l512_l3
OID = 1 3 36 3 3 1 1 640 3
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l640_l3
OID = 1 3 36 3 3 1 1 768 3
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l768_l3
OID = 1 3 36 3 3 1 1 896 3
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l896_l3
OID = 1 3 36 3 3 1 1 1024 3
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l1024_l3
OID = 1 3 36 3 3 1 1 512 5
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l512_l5
OID = 1 3 36 3 3 1 1 640 5
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l640_l5
OID = 1 3 36 3 3 1 1 768 5
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l768_l5
OID = 1 3 36 3 3 1 1 896 5
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l896_l5
OID = 1 3 36 3 3 1 1 1024 5
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l1024_l5
OID = 1 3 36 3 3 1 1 512 9
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l512_l9
OID = 1 3 36 3 3 1 1 640 9
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l640_l9
OID = 1 3 36 3 3 1 1 768 9
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l768_l9
OID = 1 3 36 3 3 1 1 896 9
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l896_l9
OID = 1 3 36 3 3 1 1 1024 9
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l1024_l9
OID = 1 3 36 3 3 1 1 512 11
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l512_l11
OID = 1 3 36 3 3 1 1 640 11
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l640_l11
OID = 1 3 36 3 3 1 1 768 11
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l768_l11
OID = 1 3 36 3 3 1 1 896 11
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l896_l11
OID = 1 3 36 3 3 1 1 1024 11
Comment = Teletrust signature algorithm
Description = rsaSignatureWithsha1_l1024_l11
OID = 1 3 36 3 3 1 2
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160
OID = 1 3 36 3 3 1 2 512 2
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l512_l2
OID = 1 3 36 3 3 1 2 640 2
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l640_l2
OID = 1 3 36 3 3 1 2 768 2
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l768_l2
OID = 1 3 36 3 3 1 2 896 2
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l896_l2
OID = 1 3 36 3 3 1 2 1024 2
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l1024_l2
OID = 1 3 36 3 3 1 2 512 3
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l512_l3
OID = 1 3 36 3 3 1 2 640 3
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l640_l3
OID = 1 3 36 3 3 1 2 768 3
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l768_l3
OID = 1 3 36 3 3 1 2 896 3
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l896_l3
OID = 1 3 36 3 3 1 2 1024 3
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l1024_l3
OID = 1 3 36 3 3 1 2 512 5
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l512_l5
OID = 1 3 36 3 3 1 2 640 5
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l640_l5
OID = 1 3 36 3 3 1 2 768 5
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l768_l5
OID = 1 3 36 3 3 1 2 896 5
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l896_l5
OID = 1 3 36 3 3 1 2 1024 5
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l1024_l5
OID = 1 3 36 3 3 1 2 512 9
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l512_l9
OID = 1 3 36 3 3 1 2 640 9
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l640_l9
OID = 1 3 36 3 3 1 2 768 9
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l768_l9
OID = 1 3 36 3 3 1 2 896 9
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l896_l9
OID = 1 3 36 3 3 1 2 1024 9
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l1024_l9
OID = 1 3 36 3 3 1 2 512 11
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l512_l11
OID = 1 3 36 3 3 1 2 640 11
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l640_l11
OID = 1 3 36 3 3 1 2 768 11
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l768_l11
OID = 1 3 36 3 3 1 2 896 11
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l896_l11
OID = 1 3 36 3 3 1 2 1024 11
Comment = Teletrust signature algorithm
Description = rsaSignatureWithripemd160_l1024_l11
OID = 1 3 36 3 3 1 3
Comment = Teletrust signature algorithm
Description = rsaSignatureWithrimpemd128
OID = 1 3 36 3 3 1 4
Comment = Teletrust signature algorithm
Description = rsaSignatureWithrimpemd256
OID = 1 3 36 3 3 2
Comment = Teletrust signature algorithm
Description = ecsieSign
OID = 1 3 36 3 3 2 1
Comment = Teletrust signature algorithm
Description = ecsieSignWithsha1
OID = 1 3 36 3 3 2 2
Comment = Teletrust signature algorithm
Description = ecsieSignWithripemd160
OID = 1 3 36 3 3 2 3
Comment = Teletrust signature algorithm
Description = ecsieSignWithmd2
OID = 1 3 36 3 3 2 4
Comment = Teletrust signature algorithm
Description = ecsieSignWithmd5
# Brainpool ECC Curves. Note that these fall under the Teletrust ECC
# signature algorithm arc (ecsieSign, 1 3 36 3 3 2) but they're listed
# separately here because they were standardised under the Brainpool
# initiative.
OID = 1 3 36 3 3 2 8 1 1 1
Comment = ECC Brainpool Standard Curves and Curve Generation
Description = brainpoolP160r1
OID = 1 3 36 3 3 2 8 1 1 2
Comment = ECC Brainpool Standard Curves and Curve Generation
Description = brainpoolP160t1
OID = 1 3 36 3 3 2 8 1 1 3
Comment = ECC Brainpool Standard Curves and Curve Generation
Description = brainpoolP192r1
OID = 1 3 36 3 3 2 8 1 1 4
Comment = ECC Brainpool Standard Curves and Curve Generation
Description = brainpoolP192t1
OID = 1 3 36 3 3 2 8 1 1 5
Comment = ECC Brainpool Standard Curves and Curve Generation
Description = brainpoolP224r1
OID = 1 3 36 3 3 2 8 1 1 6
Comment = ECC Brainpool Standard Curves and Curve Generation
Description = brainpoolP224t1
OID = 1 3 36 3 3 2 8 1 1 7
Comment = ECC Brainpool Standard Curves and Curve Generation
Description = brainpoolP256r1
OID = 1 3 36 3 3 2 8 1 1 8
Comment = ECC Brainpool Standard Curves and Curve Generation
Description = brainpoolP256t1
OID = 1 3 36 3 3 2 8 1 1 9
Comment = ECC Brainpool Standard Curves and Curve Generation
Description = brainpoolP320r1
OID = 1 3 36 3 3 2 8 1 1 10
Comment = ECC Brainpool Standard Curves and Curve Generation
Description = brainpoolP320t1
OID = 1 3 36 3 3 2 8 1 1 11
Comment = ECC Brainpool Standard Curves and Curve Generation
Description = brainpoolP384r1
OID = 1 3 36 3 3 2 8 1 1 12
Comment = ECC Brainpool Standard Curves and Curve Generation
Description = brainpoolP384t1
OID = 1 3 36 3 3 2 8 1 1 13
Comment = ECC Brainpool Standard Curves and Curve Generation
Description = brainpoolP512r1
OID = 1 3 36 3 3 2 8 1 1 14
Comment = ECC Brainpool Standard Curves and Curve Generation
Description = brainpoolP512t1
OID = 1 3 36 3 4
Comment = Teletrust algorithm
Description = signatureScheme
OID = 1 3 36 3 4 1
Comment = Teletrust signature scheme
Description = sigS_ISO9796-1
OID = 1 3 36 3 4 2
Comment = Teletrust signature scheme
Description = sigS_ISO9796-2
OID = 1 3 36 3 4 2 1
Comment = Teletrust signature scheme. Unsure what this is supposed to be
Description = sigS_ISO9796-2Withred
OID = 1 3 36 3 4 2 2
Comment = Teletrust signature scheme. Unsure what this is supposed to be
Description = sigS_ISO9796-2Withrsa
OID = 1 3 36 3 4 2 3
Comment = Teletrust signature scheme. 9796-2 with random number in padding field
Description = sigS_ISO9796-2Withrnd
OID = 1 3 36 4
Comment = Teletrust attribute
Description = attribute
OID = 1 3 36 5
Comment = Teletrust policy
Description = policy
OID = 1 3 36 6
Comment = Teletrust API
Description = api
OID = 1 3 36 6 1
Comment = Teletrust API
Description = manufacturer-specific_api
OID = 1 3 36 6 1 1
Comment = Teletrust API
Description = utimaco-api
OID = 1 3 36 6 2
Comment = Teletrust API
Description = functionality-specific_api
OID = 1 3 36 7
Comment = Teletrust key management
Description = keymgmnt
OID = 1 3 36 7 1
Comment = Teletrust key management
Description = keyagree
OID = 1 3 36 7 1 1
Comment = Teletrust key management
Description = bsiPKE
OID = 1 3 36 7 2
Comment = Teletrust key management
Description = keytrans
OID = 1 3 36 7 2 1
Comment = Teletrust key management. 9796-2 with key stored in hash field
Description = encISO9796-2Withrsa
OID = 1 3 36 8 1 1
Comment = Teletrust policy
Description = Teletrust SigGConform policyIdentifier
OID = 1 3 36 8 2 1
Comment = Teletrust extended key usage
Description = directoryService
OID = 1 3 36 8 3 1
Comment = Teletrust attribute
Description = dateOfCertGen
OID = 1 3 36 8 3 2
Comment = Teletrust attribute
Description = procuration
OID = 1 3 36 8 3 3
Comment = Teletrust attribute
Description = admission
OID = 1 3 36 8 3 4
Comment = Teletrust attribute
Description = monetaryLimit
OID = 1 3 36 8 3 5
Comment = Teletrust attribute
Description = declarationOfMajority
OID = 1 3 36 8 3 6
Comment = Teletrust attribute
Description = integratedCircuitCardSerialNumber
OID = 1 3 36 8 3 7
Comment = Teletrust attribute
Description = pKReference
OID = 1 3 36 8 3 8
Comment = Teletrust attribute
Description = restriction
OID = 1 3 36 8 3 9
Comment = Teletrust attribute
Description = retrieveIfAllowed
OID = 1 3 36 8 3 10
Comment = Teletrust attribute
Description = requestedCertificate
# The following are left in German because there's no clear
# equivalent for many of the terms in English. Tut mir sorry.
# (Note that they actually genderise the OIDs, which is quite
# bizarre since they're simply role identifiers. Being
# courteous, they let the, um, female OIDs go first).
OID = 1 3 36 8 3 11
Comment = Teletrust attribute
Description = namingAuthorities
OID = 1 3 36 8 3 11 1
Comment = Teletrust naming authorities
Description = rechtWirtschaftSteuern
OID = 1 3 36 8 3 11 1 1
Comment = Teletrust ProfessionInfo
Description = rechtsanwaeltin
OID = 1 3 36 8 3 11 1 2
Comment = Teletrust ProfessionInfo
Description = rechtsanwalt
OID = 1 3 36 8 3 11 1 3
Comment = Teletrust ProfessionInfo
Description = rechtsBeistand
OID = 1 3 36 8 3 11 1 4
Comment = Teletrust ProfessionInfo
Description = steuerBeraterin
OID = 1 3 36 8 3 11 1 5
Comment = Teletrust ProfessionInfo
Description = steuerBerater
OID = 1 3 36 8 3 11 1 6
Comment = Teletrust ProfessionInfo
Description = steuerBevollmaechtigte
OID = 1 3 36 8 3 11 1 7
Comment = Teletrust ProfessionInfo
Description = steuerBevollmaechtigter
OID = 1 3 36 8 3 11 1 8
Comment = Teletrust ProfessionInfo
Description = notarin
OID = 1 3 36 8 3 11 1 9
Comment = Teletrust ProfessionInfo
Description = notar
OID = 1 3 36 8 3 11 1 10
Comment = Teletrust ProfessionInfo
Description = notarVertreterin
OID = 1 3 36 8 3 11 1 11
Comment = Teletrust ProfessionInfo
Description = notarVertreter
OID = 1 3 36 8 3 11 1 12
Comment = Teletrust ProfessionInfo
Description = notariatsVerwalterin
OID = 1 3 36 8 3 11 1 13
Comment = Teletrust ProfessionInfo
Description = notariatsVerwalter
OID = 1 3 36 8 3 11 1 14
Comment = Teletrust ProfessionInfo
Description = wirtschaftsPrueferin
OID = 1 3 36 8 3 11 1 15
Comment = Teletrust ProfessionInfo
Description = wirtschaftsPruefer
OID = 1 3 36 8 3 11 1 16
Comment = Teletrust ProfessionInfo
Description = vereidigteBuchprueferin
OID = 1 3 36 8 3 11 1 17
Comment = Teletrust ProfessionInfo
Description = vereidigterBuchpruefer
OID = 1 3 36 8 3 11 1 18
Comment = Teletrust ProfessionInfo
Description = patentAnwaeltin
OID = 1 3 36 8 3 11 1 19
Comment = Teletrust ProfessionInfo
Description = patentAnwalt
OID = 1 3 36 8 3 12
Comment = Teletrust OCSP attribute (obsolete)
Description = certInDirSince
Warning
OID = 1 3 36 8 3 13
Comment = Teletrust OCSP attribute
Description = certHash
OID = 1 3 36 8 3 14
Comment = Teletrust attribute
Description = nameAtBirth
OID = 1 3 36 8 3 15
Comment = Teletrust attribute
Description = additionalInformation
OID = 1 3 36 8 4 1
Comment = Teletrust OtherName attribute
Description = personalData
OID = 1 3 36 8 4 8
Comment = Teletrust attribute certificate attribute
Description = restriction
OID = 1 3 36 8 5 1 1 1
Comment = Teletrust signature algorithm
Description = rsaIndicateSHA1
OID = 1 3 36 8 5 1 1 2
Comment = Teletrust signature algorithm
Description = rsaIndicateRIPEMD160
OID = 1 3 36 8 5 1 1 3
Comment = Teletrust signature algorithm
Description = rsaWithSHA1
OID = 1 3 36 8 5 1 1 4
Comment = Teletrust signature algorithm
Description = rsaWithRIPEMD160
OID = 1 3 36 8 5 1 2 1
Comment = Teletrust signature algorithm
Description = dsaExtended
OID = 1 3 36 8 5 1 2 2
Comment = Teletrust signature algorithm
Description = dsaWithRIPEMD160
OID = 1 3 36 8 6 1
Comment = Teletrust signature attributes
Description = cert
OID = 1 3 36 8 6 2
Comment = Teletrust signature attributes
Description = certRef
OID = 1 3 36 8 6 3
Comment = Teletrust signature attributes
Description = attrCert
OID = 1 3 36 8 6 4
Comment = Teletrust signature attributes
Description = attrRef
OID = 1 3 36 8 6 5
Comment = Teletrust signature attributes
Description = fileName
OID = 1 3 36 8 6 6
Comment = Teletrust signature attributes
Description = storageTime
OID = 1 3 36 8 6 7
Comment = Teletrust signature attributes
Description = fileSize
OID = 1 3 36 8 6 8
Comment = Teletrust signature attributes
Description = location
OID = 1 3 36 8 6 9
Comment = Teletrust signature attributes
Description = sigNumber
OID = 1 3 36 8 6 10
Comment = Teletrust signature attributes
Description = autoGen
OID = 1 3 36 8 7 1 1
Comment = Teletrust presentation types
Description = ptAdobeILL
OID = 1 3 36 8 7 1 2
Comment = Teletrust presentation types
Description = ptAmiPro
OID = 1 3 36 8 7 1 3
Comment = Teletrust presentation types
Description = ptAutoCAD
OID = 1 3 36 8 7 1 4
Comment = Teletrust presentation types
Description = ptBinary
OID = 1 3 36 8 7 1 5
Comment = Teletrust presentation types
Description = ptBMP
OID = 1 3 36 8 7 1 6
Comment = Teletrust presentation types
Description = ptCGM
OID = 1 3 36 8 7 1 7
Comment = Teletrust presentation types
Description = ptCorelCRT
OID = 1 3 36 8 7 1 8
Comment = Teletrust presentation types
Description = ptCorelDRW
OID = 1 3 36 8 7 1 9
Comment = Teletrust presentation types
Description = ptCorelEXC
OID = 1 3 36 8 7 1 10
Comment = Teletrust presentation types
Description = ptCorelPHT
OID = 1 3 36 8 7 1 11
Comment = Teletrust presentation types
Description = ptDraw
OID = 1 3 36 8 7 1 12
Comment = Teletrust presentation types
Description = ptDVI
OID = 1 3 36 8 7 1 13
Comment = Teletrust presentation types
Description = ptEPS
OID = 1 3 36 8 7 1 14
Comment = Teletrust presentation types
Description = ptExcel
OID = 1 3 36 8 7 1 15
Comment = Teletrust presentation types
Description = ptGEM
OID = 1 3 36 8 7 1 16
Comment = Teletrust presentation types
Description = ptGIF
OID = 1 3 36 8 7 1 17
Comment = Teletrust presentation types
Description = ptHPGL
OID = 1 3 36 8 7 1 18
Comment = Teletrust presentation types
Description = ptJPEG
OID = 1 3 36 8 7 1 19
Comment = Teletrust presentation types
Description = ptKodak
OID = 1 3 36 8 7 1 20
Comment = Teletrust presentation types
Description = ptLaTeX
OID = 1 3 36 8 7 1 21
Comment = Teletrust presentation types
Description = ptLotus
OID = 1 3 36 8 7 1 22
Comment = Teletrust presentation types
Description = ptLotusPIC
OID = 1 3 36 8 7 1 23
Comment = Teletrust presentation types
Description = ptMacPICT
OID = 1 3 36 8 7 1 24
Comment = Teletrust presentation types
Description = ptMacWord
OID = 1 3 36 8 7 1 25
Comment = Teletrust presentation types
Description = ptMSWfD
OID = 1 3 36 8 7 1 26
Comment = Teletrust presentation types
Description = ptMSWord
OID = 1 3 36 8 7 1 27
Comment = Teletrust presentation types
Description = ptMSWord2
OID = 1 3 36 8 7 1 28
Comment = Teletrust presentation types
Description = ptMSWord6
OID = 1 3 36 8 7 1 29
Comment = Teletrust presentation types
Description = ptMSWord8
OID = 1 3 36 8 7 1 30
Comment = Teletrust presentation types
Description = ptPDF
OID = 1 3 36 8 7 1 31
Comment = Teletrust presentation types
Description = ptPIF
OID = 1 3 36 8 7 1 32
Comment = Teletrust presentation types
Description = ptPostscript
OID = 1 3 36 8 7 1 33
Comment = Teletrust presentation types
Description = ptRTF
OID = 1 3 36 8 7 1 34
Comment = Teletrust presentation types
Description = ptSCITEX
OID = 1 3 36 8 7 1 35
Comment = Teletrust presentation types
Description = ptTAR
OID = 1 3 36 8 7 1 36
Comment = Teletrust presentation types
Description = ptTarga
OID = 1 3 36 8 7 1 37
Comment = Teletrust presentation types
Description = ptTeX
OID = 1 3 36 8 7 1 38
Comment = Teletrust presentation types
Description = ptText
OID = 1 3 36 8 7 1 39
Comment = Teletrust presentation types
Description = ptTIFF
OID = 1 3 36 8 7 1 40
Comment = Teletrust presentation types
Description = ptTIFF-FC
OID = 1 3 36 8 7 1 41
Comment = Teletrust presentation types
Description = ptUID
OID = 1 3 36 8 7 1 42
Comment = Teletrust presentation types
Description = ptUUEncode
OID = 1 3 36 8 7 1 43
Comment = Teletrust presentation types
Description = ptWMF
OID = 1 3 36 8 7 1 44
Comment = Teletrust presentation types
Description = ptWordPerfect
OID = 1 3 36 8 7 1 45
Comment = Teletrust presentation types
Description = ptWPGrph
# Thawte
OID = 1 3 101 1 4
Comment = Thawte
Description = thawte-ce
OID = 1 3 101 1 4 1
Comment = Thawte certificate extension
Description = strongExtranet
# Symantec, who seem to have taken over the Thawte arc via Verisign.
OID = 1 3 101 110
Comment = ECDH 25519 key agreement algorithm
Description = curveX25519
OID = 1 3 101 111
Comment = ECDH 448 key agreement algorithm
Description = curveX448
OID = 1 3 101 112
Comment = EdDSA 25519 signature algorithm
Description = curveEd25519
OID = 1 3 101 113
Comment = EdDSA 448 signature algorithm
Description = curveEd448
OID = 1 3 101 114
Comment = EdDSA 25519 pre-hash signature algorithm
Description = curveEd25519ph
OID = 1 3 101 115
Comment = EdDSA 448 pre-hash signature algorithm
Description = curveEd448ph
# SECG (Standards for Efficient Cryptography Group), who are just
# Certicom "All your curves are belong to us" named elliptic curves
OID = 1 3 132 0 1
Comment = SECG (Certicom) named elliptic curve
Description = sect163k1
OID = 1 3 132 0 2
Comment = SECG (Certicom) named elliptic curve
Description = sect163r1
OID = 1 3 132 0 3
Comment = SECG (Certicom) named elliptic curve
Description = sect239k1
OID = 1 3 132 0 4
Comment = SECG (Certicom) named elliptic curve
Description = sect113r1
OID = 1 3 132 0 5
Comment = SECG (Certicom) named elliptic curve
Description = sect113r2
OID = 1 3 132 0 6
Comment = SECG (Certicom) named elliptic curve
Description = secp112r1
OID = 1 3 132 0 7
Comment = SECG (Certicom) named elliptic curve
Description = secp112r2
OID = 1 3 132 0 8
Comment = SECG (Certicom) named elliptic curve
Description = secp160r1
OID = 1 3 132 0 9
Comment = SECG (Certicom) named elliptic curve
Description = secp160k1
OID = 1 3 132 0 10
Comment = SECG (Certicom) named elliptic curve
Description = secp256k1
OID = 1 3 132 0 15
Comment = SECG (Certicom) named elliptic curve
Description = sect163r2
OID = 1 3 132 0 16
Comment = SECG (Certicom) named elliptic curve
Description = sect283k1
OID = 1 3 132 0 17
Comment = SECG (Certicom) named elliptic curve
Description = sect283r1
OID = 1 3 132 0 22
Comment = SECG (Certicom) named elliptic curve
Description = sect131r1
OID = 1 3 132 0 23
Comment = SECG (Certicom) named elliptic curve
Description = sect131r2
OID = 1 3 132 0 24
Comment = SECG (Certicom) named elliptic curve
Description = sect193r1
OID = 1 3 132 0 25
Comment = SECG (Certicom) named elliptic curve
Description = sect193r2
OID = 1 3 132 0 26
Comment = SECG (Certicom) named elliptic curve
Description = sect233k1
OID = 1 3 132 0 27
Comment = SECG (Certicom) named elliptic curve
Description = sect233r1
OID = 1 3 132 0 28
Comment = SECG (Certicom) named elliptic curve
Description = secp128r1
OID = 1 3 132 0 29
Comment = SECG (Certicom) named elliptic curve
Description = secp128r2
OID = 1 3 132 0 30
Comment = SECG (Certicom) named elliptic curve
Description = secp160r2
OID = 1 3 132 0 31
Comment = SECG (Certicom) named elliptic curve
Description = secp192k1
OID = 1 3 132 0 32
Comment = SECG (Certicom) named elliptic curve
Description = secp224k1
OID = 1 3 132 0 33
Comment = SECG (Certicom) named elliptic curve
Description = secp224r1
OID = 1 3 132 0 34
Comment = SECG (Certicom) named elliptic curve
Description = secp384r1
OID = 1 3 132 0 35
Comment = SECG (Certicom) named elliptic curve
Description = secp521r1
OID = 1 3 132 0 36
Comment = SECG (Certicom) named elliptic curve
Description = sect409k1
OID = 1 3 132 0 37
Comment = SECG (Certicom) named elliptic curve
Description = sect409r1
OID = 1 3 132 0 38
Comment = SECG (Certicom) named elliptic curve
Description = sect571k1
OID = 1 3 132 0 39
Comment = SECG (Certicom) named elliptic curve
Description = sect571r1
OID = 1 3 132 1 11 0
Comment = SECG (Certicom) elliptic curve key agreement
Description = ecdhX963KDF-SHA224
OID = 1 3 132 1 11 1
Comment = SECG (Certicom) elliptic curve key agreement
Description = ecdhX963KDF-SHA256
OID = 1 3 132 1 11 2
Comment = SECG (Certicom) elliptic curve key agreement
Description = ecdhX963KDF-SHA384
OID = 1 3 132 1 11 3
Comment = SECG (Certicom) elliptic curve key agreement
Description = ecdhX963KDF-SHA512
OID = 1 3 132 1 14 0
Comment = SECG (Certicom) elliptic curve key agreement
Description = eccofactordhX963KDF-SHA224
OID = 1 3 132 1 14 1
Comment = SECG (Certicom) elliptic curve key agreement
Description = eccofactordhX963KDF-SHA256
OID = 1 3 132 1 14 2
Comment = SECG (Certicom) elliptic curve key agreement
Description = eccofactordhX963KDF-SHA384
OID = 1 3 132 1 14 3
Comment = SECG (Certicom) elliptic curve key agreement
Description = eccofactordhX963KDF-SHA512
OID = 1 3 132 1 15 0
Comment = SECG (Certicom) elliptic curve key agreement
Description = ecmqv-X963KDF-SHA224
OID = 1 3 132 1 15 1
Comment = SECG (Certicom) elliptic curve key agreement
Description = ecmqv-X963KDF-SHA256
OID = 1 3 132 1 15 2
Comment = SECG (Certicom) elliptic curve key agreement
Description = ecmqv-X963KDF-SHA384
OID = 1 3 132 1 15 3
Comment = SECG (Certicom) elliptic curve key agreement
Description = ecmqv-X963KDF-SHA512
# X9.44
OID = 1 3 133 16 840 9 44
Comment = X9.44
Description = x944
OID = 1 3 133 16 840 9 44 1
Comment = X9.44
Description = x944Components
OID = 1 3 133 16 840 9 44 1 1
Comment = X9.44
Description = x944Kdf2
OID = 1 3 133 16 840 9 44 1 2
Comment = X9.44
Description = x944Kdf3
# X9.84
OID = 1 3 133 16 840 9 84
Comment = X9.84
Description = x984
OID = 1 3 133 16 840 9 84 0
Comment = X9.84
Description = x984Module
OID = 1 3 133 16 840 9 84 0 1
Comment = X9.84 Module
Description = x984Biometrics
OID = 1 3 133 16 840 9 84 0 2
Comment = X9.84 Module
Description = x984CMS
OID = 1 3 133 16 840 9 84 0 3
Comment = X9.84 Module
Description = x984Identifiers
OID = 1 3 133 16 840 9 84 1
Comment = X9.84
Description = x984Biometric
OID = 1 3 133 16 840 9 84 1 0
Comment = X9.84 Biometric
Description = biometricUnknownType
OID = 1 3 133 16 840 9 84 1 1
Comment = X9.84 Biometric
Description = biometricBodyOdor
OID = 1 3 133 16 840 9 84 1 2
Comment = X9.84 Biometric
Description = biometricDNA
OID = 1 3 133 16 840 9 84 1 3
Comment = X9.84 Biometric
Description = biometricEarShape
OID = 1 3 133 16 840 9 84 1 4
Comment = X9.84 Biometric
Description = biometricFacialFeatures
OID = 1 3 133 16 840 9 84 1 5
Comment = X9.84 Biometric
Description = biometricFingerImage
OID = 1 3 133 16 840 9 84 1 6
Comment = X9.84 Biometric
Description = biometricFingerGeometry
OID = 1 3 133 16 840 9 84 1 7
Comment = X9.84 Biometric
Description = biometricHandGeometry
OID = 1 3 133 16 840 9 84 1 8
Comment = X9.84 Biometric
Description = biometricIrisFeatures
OID = 1 3 133 16 840 9 84 1 9
Comment = X9.84 Biometric
Description = biometricKeystrokeDynamics
OID = 1 3 133 16 840 9 84 1 10
Comment = X9.84 Biometric
Description = biometricPalm
OID = 1 3 133 16 840 9 84 1 11
Comment = X9.84 Biometric
Description = biometricRetina
OID = 1 3 133 16 840 9 84 1 12
Comment = X9.84 Biometric
Description = biometricSignature
OID = 1 3 133 16 840 9 84 1 13
Comment = X9.84 Biometric
Description = biometricSpeechPattern
OID = 1 3 133 16 840 9 84 1 14
Comment = X9.84 Biometric
Description = biometricThermalImage
OID = 1 3 133 16 840 9 84 1 15
Comment = X9.84 Biometric
Description = biometricVeinPattern
OID = 1 3 133 16 840 9 84 1 16
Comment = X9.84 Biometric
Description = biometricThermalFaceImage
OID = 1 3 133 16 840 9 84 1 17
Comment = X9.84 Biometric
Description = biometricThermalHandImage
OID = 1 3 133 16 840 9 84 1 18
Comment = X9.84 Biometric
Description = biometricLipMovement
OID = 1 3 133 16 840 9 84 1 19
Comment = X9.84 Biometric
Description = biometricGait
OID = 1 3 133 16 840 9 84 3
Comment = X9.84
Description = x984MatchingMethod
OID = 1 3 133 16 840 9 84 4
Comment = X9.84
Description = x984FormatOwner
OID = 1 3 133 16 840 9 84 4 0
Comment = X9.84 Format Owner
Description = x984CbeffOwner
OID = 1 3 133 16 840 9 84 4 1
Comment = X9.84 Format Owner
Description = x984IbiaOwner
OID = 1 3 133 16 840 9 84 4 1 1
Comment = X9.84 IBIA Format Owner
Description = ibiaOwnerSAFLINK
OID = 1 3 133 16 840 9 84 4 1 2
Comment = X9.84 IBIA Format Owner
Description = ibiaOwnerBioscrypt
OID = 1 3 133 16 840 9 84 4 1 3
Comment = X9.84 IBIA Format Owner
Description = ibiaOwnerVisionics
OID = 1 3 133 16 840 9 84 4 1 4
Comment = X9.84 IBIA Format Owner
Description = ibiaOwnerInfineonTechnologiesAG
OID = 1 3 133 16 840 9 84 4 1 5
Comment = X9.84 IBIA Format Owner
Description = ibiaOwnerIridianTechnologies
OID = 1 3 133 16 840 9 84 4 1 6
Comment = X9.84 IBIA Format Owner
Description = ibiaOwnerVeridicom
OID = 1 3 133 16 840 9 84 4 1 7
Comment = X9.84 IBIA Format Owner
Description = ibiaOwnerCyberSIGN
OID = 1 3 133 16 840 9 84 4 1 8
Comment = X9.84 IBIA Format Owner
Description = ibiaOwnereCryp
OID = 1 3 133 16 840 9 84 4 1 9
Comment = X9.84 IBIA Format Owner
Description = ibiaOwnerFingerprintCardsAB
OID = 1 3 133 16 840 9 84 4 1 10
Comment = X9.84 IBIA Format Owner
Description = ibiaOwnerSecuGen
OID = 1 3 133 16 840 9 84 4 1 11
Comment = X9.84 IBIA Format Owner
Description = ibiaOwnerPreciseBiometric
OID = 1 3 133 16 840 9 84 4 1 12
Comment = X9.84 IBIA Format Owner
Description = ibiaOwnerIdentix
OID = 1 3 133 16 840 9 84 4 1 13
Comment = X9.84 IBIA Format Owner
Description = ibiaOwnerDERMALOG
OID = 1 3 133 16 840 9 84 4 1 14
Comment = X9.84 IBIA Format Owner
Description = ibiaOwnerLOGICO
OID = 1 3 133 16 840 9 84 4 1 15
Comment = X9.84 IBIA Format Owner
Description = ibiaOwnerNIST
OID = 1 3 133 16 840 9 84 4 1 16
Comment = X9.84 IBIA Format Owner
Description = ibiaOwnerA3Vision
OID = 1 3 133 16 840 9 84 4 1 17
Comment = X9.84 IBIA Format Owner
Description = ibiaOwnerNEC
OID = 1 3 133 16 840 9 84 4 1 18
Comment = X9.84 IBIA Format Owner
Description = ibiaOwnerSTMicroelectronics
# Slovakia Qualified Electronic Signatures. This is the documented OID,
# what actually gets used are 1 3 158 36061701 0 0 0 1 2 1 and
# 1 3 158 36061701 0 0 0 1 3 1 which are undocumented.
OID = 1 3 158 36061701 0 0 0 1 2 2
Comment = Slovakia Qualified Electronic Signature policies
Description = qcpSK
# X.520. X.500v4 added encrypted versions of most of these attributes
# at n+2 (i.e. foo = 2 4 5 1, encryptedFoo = 2 4 5 1 2), this smells
# like a horrible kludge for something and probably isn't used, so we
# don't define them all here.
OID = 2 5 4 0
Comment = X.520 DN component
Description = objectClass
OID = 2 5 4 1
Comment = X.520 DN component
Description = aliasedEntryName
OID = 2 5 4 2
Comment = X.520 DN component
Description = knowledgeInformation
OID = 2 5 4 3
Comment = X.520 DN component
Description = commonName
OID = 2 5 4 4
Comment = X.520 DN component
Description = surname
OID = 2 5 4 5
Comment = X.520 DN component
Description = serialNumber
OID = 2 5 4 6
Comment = X.520 DN component
Description = countryName
OID = 2 5 4 7
Comment = X.520 DN component
Description = localityName
OID = 2 5 4 7 1
Comment = X.520 DN component
Description = collectiveLocalityName
OID = 2 5 4 8
Comment = X.520 DN component
Description = stateOrProvinceName
OID = 2 5 4 8 1
Comment = X.520 DN component
Description = collectiveStateOrProvinceName
OID = 2 5 4 9
Comment = X.520 DN component
Description = streetAddress
OID = 2 5 4 9 1
Comment = X.520 DN component
Description = collectiveStreetAddress
OID = 2 5 4 10
Comment = X.520 DN component
Description = organizationName
OID = 2 5 4 10 1
Comment = X.520 DN component
Description = collectiveOrganizationName
OID = 2 5 4 11
Comment = X.520 DN component
Description = organizationalUnitName
OID = 2 5 4 11 1
Comment = X.520 DN component
Description = collectiveOrganizationalUnitName
OID = 2 5 4 12
Comment = X.520 DN component
Description = title
OID = 2 5 4 13
Comment = X.520 DN component
Description = description
OID = 2 5 4 14
Comment = X.520 DN component
Description = searchGuide
OID = 2 5 4 15
Comment = X.520 DN component
Description = businessCategory
OID = 2 5 4 16
Comment = X.520 DN component
Description = postalAddress
OID = 2 5 4 16 1
Comment = X.520 DN component
Description = collectivePostalAddress
OID = 2 5 4 17
Comment = X.520 DN component
Description = postalCode
OID = 2 5 4 17 1
Comment = X.520 DN component
Description = collectivePostalCode
OID = 2 5 4 18
Comment = X.520 DN component
Description = postOfficeBox
OID = 2 5 4 18 1
Comment = X.520 DN component
Description = collectivePostOfficeBox
OID = 2 5 4 19
Comment = X.520 DN component
Description = physicalDeliveryOfficeName
OID = 2 5 4 19 1
Comment = X.520 DN component
Description = collectivePhysicalDeliveryOfficeName
OID = 2 5 4 20
Comment = X.520 DN component
Description = telephoneNumber
OID = 2 5 4 20 1
Comment = X.520 DN component
Description = collectiveTelephoneNumber
OID = 2 5 4 21
Comment = X.520 DN component
Description = telexNumber
OID = 2 5 4 21 1
Comment = X.520 DN component
Description = collectiveTelexNumber
OID = 2 5 4 22
Comment = X.520 DN component
Description = teletexTerminalIdentifier
OID = 2 5 4 22 1
Comment = X.520 DN component
Description = collectiveTeletexTerminalIdentifier
OID = 2 5 4 23
Comment = X.520 DN component
Description = facsimileTelephoneNumber
OID = 2 5 4 23 1
Comment = X.520 DN component
Description = collectiveFacsimileTelephoneNumber
OID = 2 5 4 24
Comment = X.520 DN component
Description = x121Address
OID = 2 5 4 25
Comment = X.520 DN component
Description = internationalISDNNumber
OID = 2 5 4 25 1
Comment = X.520 DN component
Description = collectiveInternationalISDNNumber
OID = 2 5 4 26
Comment = X.520 DN component
Description = registeredAddress
OID = 2 5 4 27
Comment = X.520 DN component
Description = destinationIndicator
OID = 2 5 4 28
Comment = X.520 DN component
Description = preferredDeliveryMehtod
OID = 2 5 4 29
Comment = X.520 DN component
Description = presentationAddress
OID = 2 5 4 30
Comment = X.520 DN component
Description = supportedApplicationContext
OID = 2 5 4 31
Comment = X.520 DN component
Description = member
OID = 2 5 4 32
Comment = X.520 DN component
Description = owner
OID = 2 5 4 33
Comment = X.520 DN component
Description = roleOccupant
OID = 2 5 4 34
Comment = X.520 DN component
Description = seeAlso
OID = 2 5 4 35
Comment = X.520 DN component
Description = userPassword
OID = 2 5 4 36
Comment = X.520 DN component
Description = userCertificate
OID = 2 5 4 37
Comment = X.520 DN component
Description = caCertificate
OID = 2 5 4 38
Comment = X.520 DN component
Description = authorityRevocationList
OID = 2 5 4 39
Comment = X.520 DN component
Description = certificateRevocationList
OID = 2 5 4 40
Comment = X.520 DN component
Description = crossCertificatePair
OID = 2 5 4 41
Comment = X.520 DN component
Description = name
OID = 2 5 4 42
Comment = X.520 DN component
Description = givenName
OID = 2 5 4 43
Comment = X.520 DN component
Description = initials
OID = 2 5 4 44
Comment = X.520 DN component
Description = generationQualifier
OID = 2 5 4 45
Comment = X.520 DN component
Description = uniqueIdentifier
OID = 2 5 4 46
Comment = X.520 DN component
Description = dnQualifier
OID = 2 5 4 47
Comment = X.520 DN component
Description = enhancedSearchGuide
OID = 2 5 4 48
Comment = X.520 DN component
Description = protocolInformation
OID = 2 5 4 49
Comment = X.520 DN component
Description = distinguishedName
OID = 2 5 4 50
Comment = X.520 DN component
Description = uniqueMember
OID = 2 5 4 51
Comment = X.520 DN component
Description = houseIdentifier
OID = 2 5 4 52
Comment = X.520 DN component
Description = supportedAlgorithms
OID = 2 5 4 53
Comment = X.520 DN component
Description = deltaRevocationList
OID = 2 5 4 54
Comment = X.520 DN component
Description = dmdName
OID = 2 5 4 55
Comment = X.520 DN component
Description = clearance
OID = 2 5 4 56
Comment = X.520 DN component
Description = defaultDirQop
OID = 2 5 4 57
Comment = X.520 DN component
Description = attributeIntegrityInfo
OID = 2 5 4 58
Comment = X.520 DN component
Description = attributeCertificate
OID = 2 5 4 59
Comment = X.520 DN component
Description = attributeCertificateRevocationList
OID = 2 5 4 60
Comment = X.520 DN component
Description = confKeyInfo
OID = 2 5 4 61
Comment = X.520 DN component
Description = aACertificate
OID = 2 5 4 62
Comment = X.520 DN component
Description = attributeDescriptorCertificate
OID = 2 5 4 63
Comment = X.520 DN component
Description = attributeAuthorityRevocationList
OID = 2 5 4 64
Comment = X.520 DN component
Description = familyInformation
OID = 2 5 4 65
Comment = X.520 DN component
Description = pseudonym
OID = 2 5 4 66
Comment = X.520 DN component
Description = communicationsService
OID = 2 5 4 67
Comment = X.520 DN component
Description = communicationsNetwork
OID = 2 5 4 68
Comment = X.520 DN component
Description = certificationPracticeStmt
OID = 2 5 4 69
Comment = X.520 DN component
Description = certificatePolicy
OID = 2 5 4 70
Comment = X.520 DN component
Description = pkiPath
OID = 2 5 4 71
Comment = X.520 DN component
Description = privPolicy
OID = 2 5 4 72
Comment = X.520 DN component
Description = role
OID = 2 5 4 73
Comment = X.520 DN component
Description = delegationPath
OID = 2 5 4 74
Comment = X.520 DN component
Description = protPrivPolicy
OID = 2 5 4 75
Comment = X.520 DN component
Description = xMLPrivilegeInfo
OID = 2 5 4 76
Comment = X.520 DN component
Description = xmlPrivPolicy
OID = 2 5 4 77
Comment = X.520 DN component
Description = uuidpair
OID = 2 5 4 78
Comment = X.520 DN component
Description = tagOid
OID = 2 5 4 79
Comment = X.520 DN component
Description = uiiFormat
OID = 2 5 4 80
Comment = X.520 DN component
Description = uiiInUrh
OID = 2 5 4 81
Comment = X.520 DN component
Description = contentUrl
OID = 2 5 4 82
Comment = X.520 DN component
Description = permission
OID = 2 5 4 83
Comment = X.520 DN component
Description = uri
OID = 2 5 4 84
Comment = X.520 DN component
Description = pwdAttribute
OID = 2 5 4 85
Comment = X.520 DN component
Description = userPwd
OID = 2 5 4 86
Comment = X.520 DN component
Description = urn
OID = 2 5 4 87
Comment = X.520 DN component
Description = url
OID = 2 5 4 88
Comment = X.520 DN component
Description = utmCoordinates
OID = 2 5 4 89
Comment = X.520 DN component
Description = urnC
OID = 2 5 4 90
Comment = X.520 DN component
Description = uii
OID = 2 5 4 91
Comment = X.520 DN component
Description = epc
OID = 2 5 4 92
Comment = X.520 DN component
Description = tagAfi
OID = 2 5 4 93
Comment = X.520 DN component
Description = epcFormat
OID = 2 5 4 94
Comment = X.520 DN component
Description = epcInUrn
OID = 2 5 4 95
Comment = X.520 DN component
Description = ldapUrl
OID = 2 5 4 96
Comment = X.520 DN component
Description = tagLocation
OID = 2 5 4 97
Comment = X.520 DN component
Description = organizationIdentifier
OID = 2 5 4 98
Comment = X.520 DN component
Description = countryCode3c
OID = 2 5 4 99
Comment = X.520 DN component
Description = countryCode3n
OID = 2 5 4 100
Comment = X.520 DN component
Description = dnsName
OID = 2 5 4 101
Comment = X.520 DN component
Description = eepkCertificateRevocationList
OID = 2 5 4 102
Comment = X.520 DN component
Description = eeAttrCertificateRevocationList
OID = 2 5 4 103
Comment = X.520 DN component
Description = supportedPublicKeyAlgorithms
OID = 2 5 4 104
Comment = X.520 DN component
Description = intEmail
OID = 2 5 4 105
Comment = X.520 DN component
Description = jid
OID = 2 5 4 106
Comment = X.520 DN component
Description = objectIdentifier
# X.500 object classes
OID = 2 5 6 0
Comment = X.520 objectClass
Description = top
OID = 2 5 6 1
Comment = X.520 objectClass
Description = alias
OID = 2 5 6 2
Comment = X.520 objectClass
Description = country
OID = 2 5 6 3
Comment = X.520 objectClass
Description = locality
OID = 2 5 6 4
Comment = X.520 objectClass
Description = organization
OID = 2 5 6 5
Comment = X.520 objectClass
Description = organizationalUnit
OID = 2 5 6 6
Comment = X.520 objectClass
Description = person
OID = 2 5 6 7
Comment = X.520 objectClass
Description = organizationalPerson
OID = 2 5 6 8
Comment = X.520 objectClass
Description = organizationalRole
OID = 2 5 6 9
Comment = X.520 objectClass
Description = groupOfNames
OID = 2 5 6 10
Comment = X.520 objectClass
Description = residentialPerson
OID = 2 5 6 11
Comment = X.520 objectClass
Description = applicationProcess
OID = 2 5 6 12
Comment = X.520 objectClass
Description = applicationEntity
OID = 2 5 6 13
Comment = X.520 objectClass
Description = dSA
OID = 2 5 6 14
Comment = X.520 objectClass
Description = device
OID = 2 5 6 15
Comment = X.520 objectClass
Description = strongAuthenticationUser
OID = 2 5 6 16
Comment = X.520 objectClass
Description = certificateAuthority
OID = 2 5 6 17
Comment = X.520 objectClass
Description = groupOfUniqueNames
OID = 2 5 6 21
Comment = X.520 objectClass
Description = pkiUser
OID = 2 5 6 22
Comment = X.520 objectClass
Description = pkiCA
# X.500 algorithms
OID = 2 5 8 1 1
Comment = X.500 algorithms. Ambiguous, since no padding rules specified
Description = rsa
Warning
# X.509. Some of the smaller values are from early X.509 drafts with
# cross-pollination from X9.55 and are now deprecated. Alternative OIDs are
# marked if these are known. In some cases there are multiple generations of
# superseded OIDs
OID = 2 5 29 1
Comment = X.509 extension. Deprecated, use 2 5 29 35 instead
Description = authorityKeyIdentifier
Warning
OID = 2 5 29 2
Comment = X.509 extension. Obsolete, use keyUsage/extKeyUsage instead
Description = keyAttributes
Warning
OID = 2 5 29 3
Comment = X.509 extension. Deprecated, use 2 5 29 32 instead
Description = certificatePolicies
Warning
OID = 2 5 29 4
Comment = X.509 extension. Obsolete, use keyUsage/extKeyUsage instead
Description = keyUsageRestriction
Warning
OID = 2 5 29 5
Comment = X.509 extension. Deprecated, use 2 5 29 33 instead
Description = policyMapping
Warning
OID = 2 5 29 6
Comment = X.509 extension. Obsolete, use nameConstraints instead
Description = subtreesConstraint
Warning
OID = 2 5 29 7
Comment = X.509 extension. Deprecated, use 2 5 29 17 instead
Description = subjectAltName
Warning
OID = 2 5 29 8
Comment = X.509 extension. Deprecated, use 2 5 29 18 instead
Description = issuerAltName
Warning
OID = 2 5 29 9
Comment = X.509 extension
Description = subjectDirectoryAttributes
OID = 2 5 29 10
Comment = X.509 extension. Deprecated, use 2 5 29 19 instead
Description = basicConstraints
Warning
OID = 2 5 29 11
Comment = X.509 extension. Deprecated, use 2 5 29 30 instead
Description = nameConstraints
Warning
OID = 2 5 29 12
Comment = X.509 extension. Deprecated, use 2 5 29 36 instead
Description = policyConstraints
Warning
OID = 2 5 29 13
Comment = X.509 extension. Deprecated, use 2 5 29 19 instead
Description = basicConstraints
Warning
OID = 2 5 29 14
Comment = X.509 extension
Description = subjectKeyIdentifier
OID = 2 5 29 15
Comment = X.509 extension
Description = keyUsage
OID = 2 5 29 16
Comment = X.509 extension
Description = privateKeyUsagePeriod
OID = 2 5 29 17
Comment = X.509 extension
Description = subjectAltName
OID = 2 5 29 18
Comment = X.509 extension
Description = issuerAltName
OID = 2 5 29 19
Comment = X.509 extension
Description = basicConstraints
OID = 2 5 29 20
Comment = X.509 extension
Description = cRLNumber
OID = 2 5 29 21
Comment = X.509 extension
Description = cRLReason
OID = 2 5 29 22
Comment = X.509 extension. Deprecated, alternative OID uncertain
Description = expirationDate
Warning
OID = 2 5 29 23
Comment = X.509 extension
Description = instructionCode
OID = 2 5 29 24
Comment = X.509 extension
Description = invalidityDate
OID = 2 5 29 25
Comment = X.509 extension. Deprecated, use 2 5 29 31 instead
Description = cRLDistributionPoints
Warning
OID = 2 5 29 26
Comment = X.509 extension. Deprecated, use 2 5 29 28 instead
Description = issuingDistributionPoint
Warning
OID = 2 5 29 27
Comment = X.509 extension
Description = deltaCRLIndicator
OID = 2 5 29 28
Comment = X.509 extension
Description = issuingDistributionPoint
OID = 2 5 29 29
Comment = X.509 extension
Description = certificateIssuer
OID = 2 5 29 30
Comment = X.509 extension
Description = nameConstraints
OID = 2 5 29 31
Comment = X.509 extension
Description = cRLDistributionPoints
OID = 2 5 29 32
Comment = X.509 extension
Description = certificatePolicies
OID = 2 5 29 32 0
Comment = X.509 certificate policy
Description = anyPolicy
OID = 2 5 29 33
Comment = X.509 extension
Description = policyMappings
OID = 2 5 29 34
Comment = X.509 extension. Deprecated, use 2 5 29 36 instead
Description = policyConstraints
Warning
OID = 2 5 29 35
Comment = X.509 extension
Description = authorityKeyIdentifier
OID = 2 5 29 36
Comment = X.509 extension
Description = policyConstraints
OID = 2 5 29 37
Comment = X.509 extension
Description = extKeyUsage
OID = 2 5 29 37 0
Comment = X.509 extended key usage
Description = anyExtendedKeyUsage
OID = 2 5 29 38
Comment = X.509 extension
Description = authorityAttributeIdentifier
OID = 2 5 29 39
Comment = X.509 extension
Description = roleSpecCertIdentifier
OID = 2 5 29 40
Comment = X.509 extension
Description = cRLStreamIdentifier
OID = 2 5 29 41
Comment = X.509 extension
Description = basicAttConstraints
OID = 2 5 29 42
Comment = X.509 extension
Description = delegatedNameConstraints
OID = 2 5 29 43
Comment = X.509 extension
Description = timeSpecification
OID = 2 5 29 44
Comment = X.509 extension
Description = cRLScope
OID = 2 5 29 45
Comment = X.509 extension
Description = statusReferrals
OID = 2 5 29 46
Comment = X.509 extension
Description = freshestCRL
OID = 2 5 29 47
Comment = X.509 extension
Description = orderedList
OID = 2 5 29 48
Comment = X.509 extension
Description = attributeDescriptor
OID = 2 5 29 49
Comment = X.509 extension
Description = userNotice
OID = 2 5 29 50
Comment = X.509 extension
Description = sOAIdentifier
OID = 2 5 29 51
Comment = X.509 extension
Description = baseUpdateTime
OID = 2 5 29 52
Comment = X.509 extension
Description = acceptableCertPolicies
OID = 2 5 29 53
Comment = X.509 extension
Description = deltaInfo
OID = 2 5 29 54
Comment = X.509 extension
Description = inhibitAnyPolicy
OID = 2 5 29 55
Comment = X.509 extension
Description = targetInformation
OID = 2 5 29 56
Comment = X.509 extension
Description = noRevAvail
OID = 2 5 29 57
Comment = X.509 extension
Description = acceptablePrivilegePolicies
OID = 2 5 29 58
Comment = X.509 extension
Description = toBeRevoked
OID = 2 5 29 59
Comment = X.509 extension
Description = revokedGroups
OID = 2 5 29 60
Comment = X.509 extension
Description = expiredCertsOnCRL
OID = 2 5 29 61
Comment = X.509 extension
Description = indirectIssuer
OID = 2 5 29 62
Comment = X.509 extension
Description = noAssertion
OID = 2 5 29 63
Comment = X.509 extension
Description = aAissuingDistributionPoint
OID = 2 5 29 64
Comment = X.509 extension
Description = issuedOnBehalfOf
OID = 2 5 29 65
Comment = X.509 extension
Description = singleUse
OID = 2 5 29 66
Comment = X.509 extension
Description = groupAC
OID = 2 5 29 67
Comment = X.509 extension
Description = allowedAttAss
OID = 2 5 29 68
Comment = X.509 extension
Description = attributeMappings
OID = 2 5 29 69
Comment = X.509 extension
Description = holderNameConstraints
# Norway Buypass CA. Buypass doesn't provide names for any of these OIDs
# so they've been synthesised from the description.
OID = 2 16 578 1 26 1 3 1
Comment = Norway Buypass CA policy
Description = privateKeySmartCard
OID = 2 16 578 1 26 1 3 2
Comment = Norway Buypass CA policy
Description = privateKeySoftToken
OID = 2 16 578 1 26 1 3 3
Comment = Norway Buypass CA policy
Description = sslEvident. Also assigned as BuyPass EV policy
OID = 2 16 578 1 26 1 3 4
Comment = Norway Buypass CA policy
Description = sslBusinessPlus
OID = 2 16 578 1 26 1 3 5
Comment = Norway Buypass CA policy
Description = privateKeyHardToken
OID = 2 16 578 1 26 1 3 6
Comment = Norway Buypass CA policy
Description = privateKeyHSM
# Spanish Government?
OID = 2 16 724 1 2 2 4 1
Comment = Spanish Government PKI?
Description = personalDataInfo
# DMS
OID = 2 16 840 1 101 2 1 1 1
Comment = SDN.700 INFOSEC algorithms
Description = sdnsSignatureAlgorithm
OID = 2 16 840 1 101 2 1 1 2
Comment = SDN.700 INFOSEC algorithms. Formerly known as mosaicSignatureAlgorithm, this OID is better known as dsaWithSHA-1.
Description = fortezzaSignatureAlgorithm
OID = 2 16 840 1 101 2 1 1 3
Comment = SDN.700 INFOSEC algorithms
Description = sdnsConfidentialityAlgorithm
OID = 2 16 840 1 101 2 1 1 4
Comment = SDN.700 INFOSEC algorithms. Formerly known as mosaicConfidentialityAlgorithm
Description = fortezzaConfidentialityAlgorithm
OID = 2 16 840 1 101 2 1 1 5
Comment = SDN.700 INFOSEC algorithms
Description = sdnsIntegrityAlgorithm
OID = 2 16 840 1 101 2 1 1 6
Comment = SDN.700 INFOSEC algorithms. Formerly known as mosaicIntegrityAlgorithm
Description = fortezzaIntegrityAlgorithm
OID = 2 16 840 1 101 2 1 1 7
Comment = SDN.700 INFOSEC algorithms
Description = sdnsTokenProtectionAlgorithm
OID = 2 16 840 1 101 2 1 1 8
Comment = SDN.700 INFOSEC algorithms. Formerly know as mosaicTokenProtectionAlgorithm
Description = fortezzaTokenProtectionAlgorithm
OID = 2 16 840 1 101 2 1 1 9
Comment = SDN.700 INFOSEC algorithms
Description = sdnsKeyManagementAlgorithm
OID = 2 16 840 1 101 2 1 1 10
Comment = SDN.700 INFOSEC algorithms. Formerly known as mosaicKeyManagementAlgorithm
Description = fortezzaKeyManagementAlgorithm
OID = 2 16 840 1 101 2 1 1 11
Comment = SDN.700 INFOSEC algorithms
Description = sdnsKMandSigAlgorithm
OID = 2 16 840 1 101 2 1 1 12
Comment = SDN.700 INFOSEC algorithms. Formerly known as mosaicKMandSigAlgorithm
Description = fortezzaKMandSigAlgorithm
OID = 2 16 840 1 101 2 1 1 13
Comment = SDN.700 INFOSEC algorithms
Description = suiteASignatureAlgorithm
OID = 2 16 840 1 101 2 1 1 14
Comment = SDN.700 INFOSEC algorithms
Description = suiteAConfidentialityAlgorithm
OID = 2 16 840 1 101 2 1 1 15
Comment = SDN.700 INFOSEC algorithms
Description = suiteAIntegrityAlgorithm
OID = 2 16 840 1 101 2 1 1 16
Comment = SDN.700 INFOSEC algorithms
Description = suiteATokenProtectionAlgorithm
OID = 2 16 840 1 101 2 1 1 17
Comment = SDN.700 INFOSEC algorithms
Description = suiteAKeyManagementAlgorithm
OID = 2 16 840 1 101 2 1 1 18
Comment = SDN.700 INFOSEC algorithms
Description = suiteAKMandSigAlgorithm
OID = 2 16 840 1 101 2 1 1 19
Comment = SDN.700 INFOSEC algorithms. Formerly known as mosaicUpdatedSigAlgorithm
Description = fortezzaUpdatedSigAlgorithm
OID = 2 16 840 1 101 2 1 1 20
Comment = SDN.700 INFOSEC algorithms. Formerly known as mosaicKMandUpdSigAlgorithms
Description = fortezzaKMandUpdSigAlgorithms
OID = 2 16 840 1 101 2 1 1 21
Comment = SDN.700 INFOSEC algorithms. Formerly known as mosaicUpdatedIntegAlgorithm
Description = fortezzaUpdatedIntegAlgorithm
OID = 2 16 840 1 101 2 1 1 22
Comment = SDN.700 INFOSEC algorithms. Formerly known as mosaicKeyEncryptionAlgorithm
Description = keyExchangeAlgorithm
OID = 2 16 840 1 101 2 1 1 23
Comment = SDN.700 INFOSEC algorithms
Description = fortezzaWrap80Algorithm
OID = 2 16 840 1 101 2 1 1 24
Comment = SDN.700 INFOSEC algorithms
Description = kEAKeyEncryptionAlgorithm
OID = 2 16 840 1 101 2 1 2 1
Comment = SDN.700 INFOSEC format
Description = rfc822MessageFormat
OID = 2 16 840 1 101 2 1 2 2
Comment = SDN.700 INFOSEC format
Description = emptyContent
OID = 2 16 840 1 101 2 1 2 3
Comment = SDN.700 INFOSEC format
Description = cspContentType
OID = 2 16 840 1 101 2 1 2 42
Comment = SDN.700 INFOSEC format
Description = mspRev3ContentType
OID = 2 16 840 1 101 2 1 2 48
Comment = SDN.700 INFOSEC format
Description = mspContentType
OID = 2 16 840 1 101 2 1 2 49
Comment = SDN.700 INFOSEC format
Description = mspRekeyAgentProtocol
OID = 2 16 840 1 101 2 1 2 50
Comment = SDN.700 INFOSEC format
Description = mspMMP
OID = 2 16 840 1 101 2 1 2 66
Comment = SDN.700 INFOSEC format
Description = mspRev3-1ContentType
OID = 2 16 840 1 101 2 1 2 72
Comment = SDN.700 INFOSEC format
Description = forwardedMSPMessageBodyPart
OID = 2 16 840 1 101 2 1 2 73
Comment = SDN.700 INFOSEC format
Description = mspForwardedMessageParameters
OID = 2 16 840 1 101 2 1 2 74
Comment = SDN.700 INFOSEC format
Description = forwardedCSPMsgBodyPart
OID = 2 16 840 1 101 2 1 2 75
Comment = SDN.700 INFOSEC format
Description = cspForwardedMessageParameters
OID = 2 16 840 1 101 2 1 2 76
Comment = SDN.700 INFOSEC format
Description = mspMMP2
OID = 2 16 840 1 101 2 1 2 78 2
Comment = SDN.700 INFOSEC format and RFC 6032
Description = encryptedKeyPackage
OID = 2 16 840 1 101 2 1 2 78 3
Comment = SDN.700 INFOSEC format and RFC 7191
Description = keyPackageReceipt
OID = 2 16 840 1 101 2 1 2 78 6
Comment = SDN.700 INFOSEC format and RFC 7191
Description = keyPackageError
OID = 2 16 840 1 101 2 1 3 1
Comment = SDN.700 INFOSEC policy
Description = sdnsSecurityPolicy
OID = 2 16 840 1 101 2 1 3 2
Comment = SDN.700 INFOSEC policy
Description = sdnsPRBAC
OID = 2 16 840 1 101 2 1 3 3
Comment = SDN.700 INFOSEC policy
Description = mosaicPRBAC
OID = 2 16 840 1 101 2 1 3 10
Comment = SDN.700 INFOSEC policy
Description = siSecurityPolicy
OID = 2 16 840 1 101 2 1 3 10 0
Comment = SDN.700 INFOSEC policy (obsolete)
Description = siNASP
Warning
OID = 2 16 840 1 101 2 1 3 10 1
Comment = SDN.700 INFOSEC policy (obsolete)
Description = siELCO
Warning
OID = 2 16 840 1 101 2 1 3 10 2
Comment = SDN.700 INFOSEC policy (obsolete)
Description = siTK
Warning
OID = 2 16 840 1 101 2 1 3 10 3
Comment = SDN.700 INFOSEC policy (obsolete)
Description = siDSAP
Warning
OID = 2 16 840 1 101 2 1 3 10 4
Comment = SDN.700 INFOSEC policy (obsolete)
Description = siSSSS
Warning
OID = 2 16 840 1 101 2 1 3 10 5
Comment = SDN.700 INFOSEC policy (obsolete)
Description = siDNASP
Warning
OID = 2 16 840 1 101 2 1 3 10 6
Comment = SDN.700 INFOSEC policy (obsolete)
Description = siBYEMAN
Warning
OID = 2 16 840 1 101 2 1 3 10 7
Comment = SDN.700 INFOSEC policy (obsolete)
Description = siREL-US
Warning
OID = 2 16 840 1 101 2 1 3 10 8
Comment = SDN.700 INFOSEC policy (obsolete)
Description = siREL-AUS
Warning
OID = 2 16 840 1 101 2 1 3 10 9
Comment = SDN.700 INFOSEC policy (obsolete)
Description = siREL-CAN
Warning
OID = 2 16 840 1 101 2 1 3 10 10
Comment = SDN.700 INFOSEC policy (obsolete)
Description = siREL_UK
Warning
OID = 2 16 840 1 101 2 1 3 10 11
Comment = SDN.700 INFOSEC policy (obsolete)
Description = siREL-NZ
Warning
OID = 2 16 840 1 101 2 1 3 10 12
Comment = SDN.700 INFOSEC policy (obsolete)
Description = siGeneric
Warning
OID = 2 16 840 1 101 2 1 3 11
Comment = SDN.700 INFOSEC policy
Description = genser
OID = 2 16 840 1 101 2 1 3 11 0
Comment = SDN.700 INFOSEC policy (obsolete)
Description = genserNations
Warning
OID = 2 16 840 1 101 2 1 3 11 1
Comment = SDN.700 INFOSEC policy (obsolete)
Description = genserComsec
Warning
OID = 2 16 840 1 101 2 1 3 11 2
Comment = SDN.700 INFOSEC policy (obsolete)
Description = genserAcquisition
Warning
OID = 2 16 840 1 101 2 1 3 11 3
Comment = SDN.700 INFOSEC policy
Description = genserSecurityCategories
OID = 2 16 840 1 101 2 1 3 11 3 0
Comment = SDN.700 INFOSEC GENSER policy
Description = genserTagSetName
OID = 2 16 840 1 101 2 1 3 12
Comment = SDN.700 INFOSEC policy
Description = defaultSecurityPolicy
OID = 2 16 840 1 101 2 1 3 13
Comment = SDN.700 INFOSEC policy
Description = capcoMarkings
OID = 2 16 840 1 101 2 1 3 13 0
Comment = SDN.700 INFOSEC policy CAPCO markings
Description = capcoSecurityCategories
OID = 2 16 840 1 101 2 1 3 13 0 1
Comment = SDN.700 INFOSEC policy CAPCO markings
Description = capcoTagSetName1
OID = 2 16 840 1 101 2 1 3 13 0 2
Comment = SDN.700 INFOSEC policy CAPCO markings
Description = capcoTagSetName2
OID = 2 16 840 1 101 2 1 3 13 0 3
Comment = SDN.700 INFOSEC policy CAPCO markings
Description = capcoTagSetName3
OID = 2 16 840 1 101 2 1 3 13 0 4
Comment = SDN.700 INFOSEC policy CAPCO markings
Description = capcoTagSetName4
OID = 2 16 840 1 101 2 1 5 1
Comment = SDN.700 INFOSEC attributes (superseded)
Description = sdnsKeyManagementCertificate
Warning
OID = 2 16 840 1 101 2 1 5 2
Comment = SDN.700 INFOSEC attributes (superseded)
Description = sdnsUserSignatureCertificate
Warning
OID = 2 16 840 1 101 2 1 5 3
Comment = SDN.700 INFOSEC attributes (superseded)
Description = sdnsKMandSigCertificate
Warning
OID = 2 16 840 1 101 2 1 5 4
Comment = SDN.700 INFOSEC attributes (superseded)
Description = fortezzaKeyManagementCertificate
Warning
OID = 2 16 840 1 101 2 1 5 5
Comment = SDN.700 INFOSEC attributes (superseded)
Description = fortezzaKMandSigCertificate
Warning
OID = 2 16 840 1 101 2 1 5 6
Comment = SDN.700 INFOSEC attributes (superseded)
Description = fortezzaUserSignatureCertificate
Warning
OID = 2 16 840 1 101 2 1 5 7
Comment = SDN.700 INFOSEC attributes (superseded)
Description = fortezzaCASignatureCertificate
Warning
OID = 2 16 840 1 101 2 1 5 8
Comment = SDN.700 INFOSEC attributes (superseded)
Description = sdnsCASignatureCertificate
Warning
OID = 2 16 840 1 101 2 1 5 10
Comment = SDN.700 INFOSEC attributes (superseded)
Description = auxiliaryVector
Warning
OID = 2 16 840 1 101 2 1 5 11
Comment = SDN.700 INFOSEC attributes
Description = mlReceiptPolicy
OID = 2 16 840 1 101 2 1 5 12
Comment = SDN.700 INFOSEC attributes
Description = mlMembership
OID = 2 16 840 1 101 2 1 5 13
Comment = SDN.700 INFOSEC attributes
Description = mlAdministrators
OID = 2 16 840 1 101 2 1 5 14
Comment = SDN.700 INFOSEC attributes
Description = alid
OID = 2 16 840 1 101 2 1 5 20
Comment = SDN.700 INFOSEC attributes
Description = janUKMs
OID = 2 16 840 1 101 2 1 5 21
Comment = SDN.700 INFOSEC attributes
Description = febUKMs
OID = 2 16 840 1 101 2 1 5 22
Comment = SDN.700 INFOSEC attributes
Description = marUKMs
OID = 2 16 840 1 101 2 1 5 23
Comment = SDN.700 INFOSEC attributes
Description = aprUKMs
OID = 2 16 840 1 101 2 1 5 24
Comment = SDN.700 INFOSEC attributes
Description = mayUKMs
OID = 2 16 840 1 101 2 1 5 25
Comment = SDN.700 INFOSEC attributes
Description = junUKMs
OID = 2 16 840 1 101 2 1 5 26
Comment = SDN.700 INFOSEC attributes
Description = julUKMs
OID = 2 16 840 1 101 2 1 5 27
Comment = SDN.700 INFOSEC attributes
Description = augUKMs
OID = 2 16 840 1 101 2 1 5 28
Comment = SDN.700 INFOSEC attributes
Description = sepUKMs
OID = 2 16 840 1 101 2 1 5 29
Comment = SDN.700 INFOSEC attributes
Description = octUKMs
OID = 2 16 840 1 101 2 1 5 30
Comment = SDN.700 INFOSEC attributes
Description = novUKMs
OID = 2 16 840 1 101 2 1 5 31
Comment = SDN.700 INFOSEC attributes
Description = decUKMs
OID = 2 16 840 1 101 2 1 5 40
Comment = SDN.700 INFOSEC attributes
Description = metaSDNSckl
OID = 2 16 840 1 101 2 1 5 41
Comment = SDN.700 INFOSEC attributes
Description = sdnsCKL
OID = 2 16 840 1 101 2 1 5 42
Comment = SDN.700 INFOSEC attributes
Description = metaSDNSsignatureCKL
OID = 2 16 840 1 101 2 1 5 43
Comment = SDN.700 INFOSEC attributes
Description = sdnsSignatureCKL
OID = 2 16 840 1 101 2 1 5 44
Comment = SDN.700 INFOSEC attributes
Description = sdnsCertificateRevocationList
OID = 2 16 840 1 101 2 1 5 45
Comment = SDN.700 INFOSEC attributes (superseded)
Description = fortezzaCertificateRevocationList
Warning
OID = 2 16 840 1 101 2 1 5 46
Comment = SDN.700 INFOSEC attributes
Description = fortezzaCKL
OID = 2 16 840 1 101 2 1 5 47
Comment = SDN.700 INFOSEC attributes
Description = alExemptedAddressProcessor
OID = 2 16 840 1 101 2 1 5 48
Comment = SDN.700 INFOSEC attributes (obsolete)
Description = guard
Warning
OID = 2 16 840 1 101 2 1 5 49
Comment = SDN.700 INFOSEC attributes (obsolete)
Description = algorithmsSupported
Warning
OID = 2 16 840 1 101 2 1 5 50
Comment = SDN.700 INFOSEC attributes (obsolete)
Description = suiteAKeyManagementCertificate
Warning
OID = 2 16 840 1 101 2 1 5 51
Comment = SDN.700 INFOSEC attributes (obsolete)
Description = suiteAKMandSigCertificate
Warning
OID = 2 16 840 1 101 2 1 5 52
Comment = SDN.700 INFOSEC attributes (obsolete)
Description = suiteAUserSignatureCertificate
Warning
OID = 2 16 840 1 101 2 1 5 53
Comment = SDN.700 INFOSEC attributes
Description = prbacInfo
OID = 2 16 840 1 101 2 1 5 54
Comment = SDN.700 INFOSEC attributes
Description = prbacCAConstraints
OID = 2 16 840 1 101 2 1 5 55
Comment = SDN.700 INFOSEC attributes
Description = sigOrKMPrivileges
OID = 2 16 840 1 101 2 1 5 56
Comment = SDN.700 INFOSEC attributes
Description = commPrivileges
OID = 2 16 840 1 101 2 1 5 57
Comment = SDN.700 INFOSEC attributes
Description = labeledAttribute
OID = 2 16 840 1 101 2 1 5 58
Comment = SDN.700 INFOSEC attributes (obsolete)
Description = policyInformationFile
Warning
OID = 2 16 840 1 101 2 1 5 59
Comment = SDN.700 INFOSEC attributes
Description = secPolicyInformationFile
OID = 2 16 840 1 101 2 1 5 60
Comment = SDN.700 INFOSEC attributes
Description = cAClearanceConstraint
OID = 2 16 840 1 101 2 1 5 65
Comment = SDN.700 INFOSEC attributes and RFC 7191
Description = keyPkgIdAndReceiptReq
OID = 2 16 840 1 101 2 1 5 66
Comment = SDN.700 INFOSEC attributes and RFC 6032
Description = contentDecryptKeyID
OID = 2 16 840 1 101 2 1 5 70
Comment = SDN.700 INFOSEC attributes and RFC 7906
Description = kpCrlPointers
OID = 2 16 840 1 101 2 1 5 71
Comment = SDN.700 INFOSEC attributes and RFC 7906
Description = kpKeyProvinceV2
OID = 2 16 840 1 101 2 1 5 72
Comment = SDN.700 INFOSEC attributes and RFC 7906
Description = kpManifest
OID = 2 16 840 1 101 2 1 7 1
Comment = SDN.700 INFOSEC extensions
Description = cspExtns
OID = 2 16 840 1 101 2 1 7 1 0
Comment = SDN.700 INFOSEC extensions
Description = cspCsExtn
OID = 2 16 840 1 101 2 1 8 1
Comment = SDN.700 INFOSEC security category
Description = mISSISecurityCategories
OID = 2 16 840 1 101 2 1 8 2
Comment = SDN.700 INFOSEC security category
Description = standardSecurityLabelPrivileges
OID = 2 16 840 1 101 2 1 8 3 1
Comment = SDN.700 INFOSEC security category from RFC 7906
Description = enumeratedPermissiveAttrs
OID = 2 16 840 1 101 2 1 8 3 3
Comment = SDN.700 INFOSEC security category from RFC 7906
Description = informativeAttrs
OID = 2 16 840 1 101 2 1 8 3 4
Comment = SDN.700 INFOSEC security category from RFC 7906
Description = enumeratedRestrictiveAttrs
OID = 2 16 840 1 101 2 1 10 1
Comment = SDN.700 INFOSEC privileges
Description = sigPrivileges
OID = 2 16 840 1 101 2 1 10 2
Comment = SDN.700 INFOSEC privileges
Description = kmPrivileges
OID = 2 16 840 1 101 2 1 10 3
Comment = SDN.700 INFOSEC privileges
Description = namedTagSetPrivilege
OID = 2 16 840 1 101 2 1 11 1
Comment = SDN.700 INFOSEC certificate policy
Description = ukDemo
OID = 2 16 840 1 101 2 1 11 2
Comment = SDN.700 INFOSEC certificate policy
Description = usDODClass2
OID = 2 16 840 1 101 2 1 11 3
Comment = SDN.700 INFOSEC certificate policy
Description = usMediumPilot
OID = 2 16 840 1 101 2 1 11 4
Comment = SDN.700 INFOSEC certificate policy
Description = usDODClass4
OID = 2 16 840 1 101 2 1 11 5
Comment = SDN.700 INFOSEC certificate policy
Description = usDODClass3
OID = 2 16 840 1 101 2 1 11 6
Comment = SDN.700 INFOSEC certificate policy
Description = usDODClass5
OID = 2 16 840 1 101 2 1 12 0
Comment = SDN.700 INFOSEC test objects
Description = testSecurityPolicy
OID = 2 16 840 1 101 2 1 12 0 1
Comment = SDN.700 INFOSEC test objects
Description = tsp1
OID = 2 16 840 1 101 2 1 12 0 1 0
Comment = SDN.700 INFOSEC test objects
Description = tsp1SecurityCategories
OID = 2 16 840 1 101 2 1 12 0 1 0 0
Comment = SDN.700 INFOSEC test objects
Description = tsp1TagSetZero
OID = 2 16 840 1 101 2 1 12 0 1 0 1
Comment = SDN.700 INFOSEC test objects
Description = tsp1TagSetOne
OID = 2 16 840 1 101 2 1 12 0 1 0 2
Comment = SDN.700 INFOSEC test objects
Description = tsp1TagSetTwo
OID = 2 16 840 1 101 2 1 12 0 2
Comment = SDN.700 INFOSEC test objects
Description = tsp2
OID = 2 16 840 1 101 2 1 12 0 2 0
Comment = SDN.700 INFOSEC test objects
Description = tsp2SecurityCategories
OID = 2 16 840 1 101 2 1 12 0 2 0 0
Comment = SDN.700 INFOSEC test objects
Description = tsp2TagSetZero
OID = 2 16 840 1 101 2 1 12 0 2 0 1
Comment = SDN.700 INFOSEC test objects
Description = tsp2TagSetOne
OID = 2 16 840 1 101 2 1 12 0 2 0 2
Comment = SDN.700 INFOSEC test objects
Description = tsp2TagSetTwo
# At least someone there has a sense of humour :-)
OID = 2 16 840 1 101 2 1 12 0 3
Comment = SDN.700 INFOSEC test objects
Description = kafka
OID = 2 16 840 1 101 2 1 12 0 3 0
Comment = SDN.700 INFOSEC test objects
Description = kafkaSecurityCategories
OID = 2 16 840 1 101 2 1 12 0 3 0 1
Comment = SDN.700 INFOSEC test objects
Description = kafkaTagSetName1
OID = 2 16 840 1 101 2 1 12 0 3 0 2
Comment = SDN.700 INFOSEC test objects
Description = kafkaTagSetName2
OID = 2 16 840 1 101 2 1 12 0 3 0 3
Comment = SDN.700 INFOSEC test objects
Description = kafkaTagSetName3
OID = 2 16 840 1 101 2 1 12 1 1
Comment = SDN.700 INFOSEC test objects
Description = tcp1
OID = 2 16 840 1 101 2 1 13 1
Comment = SDN.700 INFOSEC attributes and RFC 7906
Description = kmaKeyAlgorithm
OID = 2 16 840 1 101 2 1 13 3
Comment = SDN.700 INFOSEC attributes and RFC 7906
Description = kmaTSECNomenclature
OID = 2 16 840 1 101 2 1 13 5
Comment = SDN.700 INFOSEC attributes and RFC 7906
Description = kmaKeyDistPeriod
OID = 2 16 840 1 101 2 1 13 6
Comment = SDN.700 INFOSEC attributes and RFC 7906
Description = kmaKeyValidityPeriod
OID = 2 16 840 1 101 2 1 13 7
Comment = SDN.700 INFOSEC attributes and RFC 7906
Description = kmaKeyDuration
OID = 2 16 840 1 101 2 1 13 11
Comment = SDN.700 INFOSEC attributes and RFC 7906
Description = kmaSplitID
OID = 2 16 840 1 101 2 1 13 12
Comment = SDN.700 INFOSEC attributes and RFC 7906
Description = kmaKeyPkgType
OID = 2 16 840 1 101 2 1 13 13
Comment = SDN.700 INFOSEC attributes and RFC 7906
Description = kmaKeyPurpose
OID = 2 16 840 1 101 2 1 13 14
Comment = SDN.700 INFOSEC attributes and RFC 7906
Description = kmaKeyUse
OID = 2 16 840 1 101 2 1 13 15
Comment = SDN.700 INFOSEC attributes and RFC 7906
Description = kmaTransportKey
OID = 2 16 840 1 101 2 1 13 16
Comment = SDN.700 INFOSEC attributes and RFC 7906
Description = kmaKeyPkgReceiversV2
OID = 2 16 840 1 101 2 1 13 19
Comment = SDN.700 INFOSEC attributes and RFC 7906
Description = kmaOtherCertFormats
OID = 2 16 840 1 101 2 1 13 20
Comment = SDN.700 INFOSEC attributes and RFC 7906
Description = kmaUsefulCerts
OID = 2 16 840 1 101 2 1 13 21
Comment = SDN.700 INFOSEC attributes and RFC 7906
Description = kmaKeyWrapAlgorithm
OID = 2 16 840 1 101 2 1 13 22
Comment = SDN.700 INFOSEC attributes and RFC 7906
Description = kmaSigUsageV3
OID = 2 16 840 1 101 2 1 16 0
Comment = SDN.700 INFOSEC attributes and RFC 7191
Description = dn
OID = 2 16 840 1 101 2 1 22
Comment = RFC 7906 key attribute error codes
Description = errorCodes
OID = 2 16 840 1 101 2 1 22 1
Comment = RFC 7906 key attribute error codes
Description = missingKeyType
OID = 2 16 840 1 101 2 1 22 2
Comment = RFC 7906 key attribute error codes
Description = privacyMarkTooLong
OID = 2 16 840 1 101 2 1 22 3
Comment = RFC 7906 key attribute error codes
Description = unrecognizedSecurityPolicy
# NIST (?)
OID = 2 16 840 1 101 3 1
Comment = CSOR GAK
Description = slabel
Warning
OID = 2 16 840 1 101 3 2
Comment = NIST
Description = pki
Warning
OID = 2 16 840 1 101 3 2 1
Comment = NIST policies
Description = NIST policyIdentifier
Warning
OID = 2 16 840 1 101 3 2 1 3 1
Comment = Federal Bridge CA Policy
Description = fbcaRudimentaryPolicy
OID = 2 16 840 1 101 3 2 1 3 2
Comment = Federal Bridge CA Policy
Description = fbcaBasicPolicy
OID = 2 16 840 1 101 3 2 1 3 3
Comment = Federal Bridge CA Policy
Description = fbcaMediumPolicy
OID = 2 16 840 1 101 3 2 1 3 4
Comment = Federal Bridge CA Policy
Description = fbcaHighPolicy
OID = 2 16 840 1 101 3 2 1 48 1
Comment = NIST PKITS policies
Description = nistTestPolicy1
OID = 2 16 840 1 101 3 2 1 48 2
Comment = NIST PKITS policies
Description = nistTestPolicy2
OID = 2 16 840 1 101 3 2 1 48 3
Comment = NIST PKITS policies
Description = nistTestPolicy3
OID = 2 16 840 1 101 3 2 1 48 4
Comment = NIST PKITS policies
Description = nistTestPolicy4
OID = 2 16 840 1 101 3 2 1 48 5
Comment = NIST PKITS policies
Description = nistTestPolicy5
OID = 2 16 840 1 101 3 2 1 48 6
Comment = NIST PKITS policies
Description = nistTestPolicy6
OID = 2 16 840 1 101 3 2 2
Comment = CSOR GAK extended key usage
Description = gak
Warning
OID = 2 16 840 1 101 3 2 2 1
Comment = CSOR GAK extended key usage
Description = kRAKey
Warning
OID = 2 16 840 1 101 3 2 3
Comment = CSOR GAK extensions
Description = extensions
Warning
OID = 2 16 840 1 101 3 2 3 1
Comment = CSOR GAK extensions
Description = kRTechnique
Warning
OID = 2 16 840 1 101 3 2 3 2
Comment = CSOR GAK extensions
Description = kRecoveryCapable
Warning
OID = 2 16 840 1 101 3 2 3 3
Comment = CSOR GAK extensions
Description = kR
Warning
OID = 2 16 840 1 101 3 2 4
Comment = CSOR GAK
Description = keyRecoverySchemes
Warning
OID = 2 16 840 1 101 3 2 5
Comment = CSOR GAK
Description = krapola
Warning
OID = 2 16 840 1 101 3 3
Comment = CSOR GAK
Description = arpa
Warning
# CSOR (NIST) Algorithms
OID = 2 16 840 1 101 3 4
Comment = NIST Algorithm
Description = nistAlgorithm
OID = 2 16 840 1 101 3 4 1
Comment = NIST Algorithm
Description = aes
OID = 2 16 840 1 101 3 4 1 1
Comment = NIST Algorithm
Description = aes128-ECB
OID = 2 16 840 1 101 3 4 1 2
Comment = NIST Algorithm
Description = aes128-CBC
OID = 2 16 840 1 101 3 4 1 3
Comment = NIST Algorithm
Description = aes128-OFB
OID = 2 16 840 1 101 3 4 1 4
Comment = NIST Algorithm
Description = aes128-CFB
OID = 2 16 840 1 101 3 4 1 5
Comment = NIST Algorithm
Description = aes128-wrap
OID = 2 16 840 1 101 3 4 1 6
Comment = NIST Algorithm
Description = aes128-GCM
OID = 2 16 840 1 101 3 4 1 7
Comment = NIST Algorithm
Description = aes128-CCM
OID = 2 16 840 1 101 3 4 1 8
Comment = NIST Algorithm
Description = aes128-wrap-pad
OID = 2 16 840 1 101 3 4 1 9
Comment = NIST Algorithm
Description = aes128-GMAC
OID = 2 16 840 1 101 3 4 1 21
Comment = NIST Algorithm
Description = aes192-ECB
OID = 2 16 840 1 101 3 4 1 22
Comment = NIST Algorithm
Description = aes192-CBC
OID = 2 16 840 1 101 3 4 1 23
Comment = NIST Algorithm
Description = aes192-OFB
OID = 2 16 840 1 101 3 4 1 24
Comment = NIST Algorithm
Description = aes192-CFB
OID = 2 16 840 1 101 3 4 1 25
Comment = NIST Algorithm
Description = aes192-wrap
OID = 2 16 840 1 101 3 4 1 26
Comment = NIST Algorithm
Description = aes192-GCM
OID = 2 16 840 1 101 3 4 1 27
Comment = NIST Algorithm
Description = aes192-CCM
OID = 2 16 840 1 101 3 4 1 28
Comment = NIST Algorithm
Description = aes192-wrap-pad
OID = 2 16 840 1 101 3 4 1 29
Comment = NIST Algorithm
Description = aes192-GMAC
OID = 2 16 840 1 101 3 4 1 41
Comment = NIST Algorithm
Description = aes256-ECB
OID = 2 16 840 1 101 3 4 1 42
Comment = NIST Algorithm
Description = aes256-CBC
OID = 2 16 840 1 101 3 4 1 43
Comment = NIST Algorithm
Description = aes256-OFB
OID = 2 16 840 1 101 3 4 1 44
Comment = NIST Algorithm
Description = aes256-CFB
OID = 2 16 840 1 101 3 4 1 45
Comment = NIST Algorithm
Description = aes256-wrap
OID = 2 16 840 1 101 3 4 1 46
Comment = NIST Algorithm
Description = aes256-GCM
OID = 2 16 840 1 101 3 4 1 47
Comment = NIST Algorithm
Description = aes256-CCM
OID = 2 16 840 1 101 3 4 1 48
Comment = NIST Algorithm
Description = aes256-wrap-pad
OID = 2 16 840 1 101 3 4 1 49
Comment = NIST Algorithm
Description = aes256-GMAC
OID = 2 16 840 1 101 3 4 2
Comment = NIST Algorithm
Description = hashAlgos
OID = 2 16 840 1 101 3 4 2 1
Comment = NIST Algorithm
Description = sha-256
OID = 2 16 840 1 101 3 4 2 2
Comment = NIST Algorithm
Description = sha-384
OID = 2 16 840 1 101 3 4 2 3
Comment = NIST Algorithm
Description = sha-512
OID = 2 16 840 1 101 3 4 2 4
Comment = NIST Algorithm
Description = sha-224
OID = 2 16 840 1 101 3 4 2 7
Comment = NIST Algorithm
Description = sha3-224
OID = 2 16 840 1 101 3 4 2 8
Comment = NIST Algorithm
Description = sha3-256
OID = 2 16 840 1 101 3 4 2 9
Comment = NIST Algorithm
Description = sha3-384
OID = 2 16 840 1 101 3 4 2 10
Comment = NIST Algorithm
Description = sha3-512
OID = 2 16 840 1 101 3 4 2 11
Comment = NIST Algorithm
Description = shake128
OID = 2 16 840 1 101 3 4 2 12
Comment = NIST Algorithm
Description = shake256
OID = 2 16 840 1 101 3 4 2 17
Comment = NIST Algorithm
Description = shake128len
OID = 2 16 840 1 101 3 4 2 18
Comment = NIST Algorithm
Description = shake256len
OID = 2 16 840 1 101 3 4 2 19
Comment = NIST Algorithm
Description = kmacShake128
OID = 2 16 840 1 101 3 4 2 20
Comment = NIST Algorithm
Description = kmacShake256
# The spec for these is incorrect, listing both as ... 1. Presumably one
# of them is meant to be ...2.
OID = 2 16 840 1 101 3 4 3 1
Comment = NIST Algorithm
Description = dsaWithSha224
OID = 2 16 840 1 101 3 4 3 2
Comment = NIST Algorithm
Description = dsaWithSha256
# Novell
OID = 2 16 840 1 113719 1 2 8
Comment = Novell
Description = novellAlgorithm
OID = 2 16 840 1 113719 1 2 8 22
Comment = Novell encryption algorithm
Description = desCbcIV8
OID = 2 16 840 1 113719 1 2 8 23
Comment = Novell encryption algorithm
Description = desCbcPadIV8
OID = 2 16 840 1 113719 1 2 8 24
Comment = Novell encryption algorithm
Description = desEDE2CbcIV8
OID = 2 16 840 1 113719 1 2 8 25
Comment = Novell encryption algorithm
Description = desEDE2CbcPadIV8
OID = 2 16 840 1 113719 1 2 8 26
Comment = Novell encryption algorithm
Description = desEDE3CbcIV8
OID = 2 16 840 1 113719 1 2 8 27
Comment = Novell encryption algorithm
Description = desEDE3CbcPadIV8
OID = 2 16 840 1 113719 1 2 8 28
Comment = Novell encryption algorithm
Description = rc5CbcPad
OID = 2 16 840 1 113719 1 2 8 29
Comment = Novell signature algorithm
Description = md2WithRSAEncryptionBSafe1
OID = 2 16 840 1 113719 1 2 8 30
Comment = Novell signature algorithm
Description = md5WithRSAEncryptionBSafe1
OID = 2 16 840 1 113719 1 2 8 31
Comment = Novell signature algorithm
Description = sha1WithRSAEncryptionBSafe1
OID = 2 16 840 1 113719 1 2 8 32
Comment = Novell digest algorithm
Description = lmDigest
OID = 2 16 840 1 113719 1 2 8 40
Comment = Novell digest algorithm
Description = md2
OID = 2 16 840 1 113719 1 2 8 50
Comment = Novell digest algorithm
Description = md5
OID = 2 16 840 1 113719 1 2 8 51
Comment = Novell signature algorithm
Description = ikeHmacWithSHA1-RSA
OID = 2 16 840 1 113719 1 2 8 52
Comment = Novell signature algorithm
Description = ikeHmacWithMD5-RSA
OID = 2 16 840 1 113719 1 2 8 69
Comment = Novell encryption algorithm
Description = rc2CbcPad
OID = 2 16 840 1 113719 1 2 8 82
Comment = Novell digest algorithm
Description = sha-1
OID = 2 16 840 1 113719 1 2 8 92
Comment = Novell encryption algorithm
Description = rc2BSafe1Cbc
OID = 2 16 840 1 113719 1 2 8 95
Comment = Novell digest algorithm
Description = md4
OID = 2 16 840 1 113719 1 2 8 130
Comment = Novell keyed hash
Description = md4Packet
OID = 2 16 840 1 113719 1 2 8 131
Comment = Novell encryption algorithm
Description = rsaEncryptionBsafe1
OID = 2 16 840 1 113719 1 2 8 132
Comment = Novell encryption algorithm
Description = nwPassword
OID = 2 16 840 1 113719 1 2 8 133
Comment = Novell encryption algorithm
Description = novellObfuscate-1
OID = 2 16 840 1 113719 1 9
Comment = Novell
Description = pki
OID = 2 16 840 1 113719 1 9 4
Comment = Novell PKI
Description = pkiAttributeType
OID = 2 16 840 1 113719 1 9 4 1
Comment = Novell PKI attribute type
Description = securityAttributes
OID = 2 16 840 1 113719 1 9 4 2
Comment = Novell PKI attribute type
Description = relianceLimit
# Netscape
OID = 2 16 840 1 113730 1
Comment = Netscape
Description = cert-extension
OID = 2 16 840 1 113730 1 1
Comment = Netscape certificate extension
Description = netscape-cert-type
OID = 2 16 840 1 113730 1 2
Comment = Netscape certificate extension
Description = netscape-base-url
OID = 2 16 840 1 113730 1 3
Comment = Netscape certificate extension
Description = netscape-revocation-url
OID = 2 16 840 1 113730 1 4
Comment = Netscape certificate extension
Description = netscape-ca-revocation-url
OID = 2 16 840 1 113730 1 7
Comment = Netscape certificate extension
Description = netscape-cert-renewal-url
OID = 2 16 840 1 113730 1 8
Comment = Netscape certificate extension
Description = netscape-ca-policy-url
OID = 2 16 840 1 113730 1 9
Comment = Netscape certificate extension
Description = HomePage-url
OID = 2 16 840 1 113730 1 10
Comment = Netscape certificate extension
Description = EntityLogo
OID = 2 16 840 1 113730 1 11
Comment = Netscape certificate extension
Description = UserPicture
OID = 2 16 840 1 113730 1 12
Comment = Netscape certificate extension
Description = netscape-ssl-server-name
OID = 2 16 840 1 113730 1 13
Comment = Netscape certificate extension
Description = netscape-comment
OID = 2 16 840 1 113730 2
Comment = Netscape
Description = data-type
OID = 2 16 840 1 113730 2 1
Comment = Netscape data type
Description = dataGIF
OID = 2 16 840 1 113730 2 2
Comment = Netscape data type
Description = dataJPEG
OID = 2 16 840 1 113730 2 3
Comment = Netscape data type
Description = dataURL
OID = 2 16 840 1 113730 2 4
Comment = Netscape data type
Description = dataHTML
OID = 2 16 840 1 113730 2 5
Comment = Netscape data type
Description = certSequence
OID = 2 16 840 1 113730 2 6
Comment = Netscape certificate extension
Description = certURL
OID = 2 16 840 1 113730 3
Comment = Netscape
Description = directory
OID = 2 16 840 1 113730 3 1
Comment = Netscape directory
Description = ldapDefinitions
OID = 2 16 840 1 113730 3 1 1
Comment = Netscape LDAP definitions
Description = carLicense
OID = 2 16 840 1 113730 3 1 2
Comment = Netscape LDAP definitions
Description = departmentNumber
OID = 2 16 840 1 113730 3 1 3
Comment = Netscape LDAP definitions
Description = employeeNumber
OID = 2 16 840 1 113730 3 1 4
Comment = Netscape LDAP definitions
Description = employeeType
OID = 2 16 840 1 113730 3 1 216
Comment = Netscape LDAP definitions
Description = userPKCS12
OID = 2 16 840 1 113730 3 2 2
Comment = Netscape LDAP definitions
Description = inetOrgPerson
OID = 2 16 840 1 113730 4 1
Comment = Netscape
Description = serverGatedCrypto
# Verisign
# Country, zip, date of birth (age), and gender of cert owner (CZAG) in
# obfuscated form
OID = 2 16 840 1 113733 1 6 3
Comment = Verisign extension
Description = verisignCZAG
# Text string used in certs issued to Netscape InBox customers
OID = 2 16 840 1 113733 1 6 6
Comment = Verisign extension
Description = verisignInBox
OID = 2 16 840 1 113733 1 6 11
Comment = Verisign extension
Description = verisignOnsiteJurisdictionHash
OID = 2 16 840 1 113733 1 6 13
Comment = Verisign extension
Description = Unknown Verisign VPN extension
# Contains DUN, among other things
OID = 2 16 840 1 113733 1 6 15
Comment = Verisign extension
Description = verisignServerID
OID = 2 16 840 1 113733 1 7 1 1
Comment = Verisign policy
Description = verisignCertPolicies95Qualifier1
OID = 2 16 840 1 113733 1 7 1 1 1
Comment = Verisign policy (obsolete)
Description = verisignCPSv1notice
# DN contains non-verified subscriber information
OID = 2 16 840 1 113733 1 7 1 1 2
Comment = Verisign policy (obsolete)
Description = verisignCPSv1nsi
OID = 2 16 840 1 113733 1 8 1
Comment = Verisign
Description = verisignISSStrongCrypto
# SCEP
OID = 2 16 840 1 113733 1
Comment = Verisign extension
Description = pki
OID = 2 16 840 1 113733 1 9
Comment = Verisign PKI extension
Description = pkcs7Attribute
OID = 2 16 840 1 113733 1 9 2
Comment = Verisign PKCS #7 attribute
Description = messageType
OID = 2 16 840 1 113733 1 9 3
Comment = Verisign PKCS #7 attribute
Description = pkiStatus
OID = 2 16 840 1 113733 1 9 4
Comment = Verisign PKCS #7 attribute
Description = failInfo
OID = 2 16 840 1 113733 1 9 5
Comment = Verisign PKCS #7 attribute
Description = senderNonce
OID = 2 16 840 1 113733 1 9 6
Comment = Verisign PKCS #7 attribute
Description = recipientNonce
OID = 2 16 840 1 113733 1 9 7
Comment = Verisign PKCS #7 attribute
Description = transID
# Supposedly the attribute for X.509v3 extensions in PKCS #10 requests,
# but everyone seems to use the RSA OID instead
OID = 2 16 840 1 113733 1 9 8
Comment = Verisign PKCS #7 attribute. Use PKCS #9 extensionRequest instead
Description = extensionReq
Warning
# Intel. Intel's BIOS-signing certificates contain the following OID
# values:
#
# 2 16 840 1 113741 2 1 3 1
# 2 16 840 1 113741 3 1 1 1 1 2 1
# 2 16 840 1 113741 3 1 1 1 2 1 1
# 2 16 840 1 113741 3 1 1 2 2 1 1
# 2 16 840 1 113741 3 1 1 2 1 1 1 1
#
# None of these are documented anywhere, in fact the entire '3' arc isn't
# documented. Maybe it's a way of playing Minesweeper via OIDs.
OID = 2 16 840 1 113741 2
Comment = Intel CDSA
Description = intelCDSA
# DigiCert
OID = 2 16 840 1 114412 1
Comment = Digicert CA policy
Description = digiCertNonEVCerts
OID = 2 16 840 1 114412 1 1
Comment = Digicert CA policy
Description = digiCertOVCert
OID = 2 16 840 1 114412 1 2
Comment = Digicert CA policy
Description = digiCertDVCert
OID = 2 16 840 1 114412 1 11
Comment = Digicert CA policy
Description = digiCertFederatedDeviceCert
OID = 2 16 840 1 114412 1 3 0 1
Comment = Digicert CA policy
Description = digiCertGlobalCAPolicy
OID = 2 16 840 1 114412 1 3 0 2
Comment = Digicert CA policy
Description = digiCertHighAssuranceEVCAPolicy
OID = 2 16 840 1 114412 1 3 0 3
Comment = Digicert CA policy
Description = digiCertGlobalRootCAPolicy
OID = 2 16 840 1 114412 1 3 0 4
Comment = Digicert CA policy
Description = digiCertAssuredIDRootCAPolicy
OID = 2 16 840 1 114412 2 2
Comment = Digicert CA policy
Description = digiCertEVCert
OID = 2 16 840 1 114412 2 3
Comment = Digicert CA policy
Description = digiCertObjectSigningCert
OID = 2 16 840 1 114412 2 3 1
Comment = Digicert CA policy
Description = digiCertCodeSigningCert
OID = 2 16 840 1 114412 2 3 2
Comment = Digicert CA policy
Description = digiCertEVCodeSigningCert
OID = 2 16 840 1 114412 2 3 11
Comment = Digicert CA policy
Description = digiCertKernelCodeSigningCert
OID = 2 16 840 1 114412 2 3 21
Comment = Digicert CA policy
Description = digiCertDocumentSigningCert
OID = 2 16 840 1 114412 2 4
Comment = Digicert CA policy
Description = digiCertClientCert
OID = 2 16 840 1 114412 2 4 1 1
Comment = Digicert CA policy
Description = digiCertLevel1PersonalClientCert
OID = 2 16 840 1 114412 2 4 1 2
Comment = Digicert CA policy
Description = digiCertLevel1EnterpriseClientCert
OID = 2 16 840 1 114412 2 4 2
Comment = Digicert CA policy
Description = digiCertLevel2ClientCert
OID = 2 16 840 1 114412 2 4 3 1
Comment = Digicert CA policy
Description = digiCertLevel3USClientCert
OID = 2 16 840 1 114412 2 4 3 2
Comment = Digicert CA policy
Description = digiCertLevel3CBPClientCert
OID = 2 16 840 1 114412 2 4 4 1
Comment = Digicert CA policy
Description = digiCertLevel4USClientCert
OID = 2 16 840 1 114412 2 4 4 2
Comment = Digicert CA policy
Description = digiCertLevel4CBPClientCert
OID = 2 16 840 1 114412 2 4 5 1
Comment = Digicert CA policy
Description = digiCertPIVHardwareCert
OID = 2 16 840 1 114412 2 4 5 2
Comment = Digicert CA policy
Description = digiCertPIVCardAuthCert
OID = 2 16 840 1 114412 2 4 5 3
Comment = Digicert CA policy
Description = digiCertPIVContentSigningCert
OID = 2 16 840 1 114412 4 31
Comment = Digicert CA policy
Description = digiCertGridClassicCert
OID = 2 16 840 1 114412 4 31 5
Comment = Digicert CA policy
Description = digiCertGridIntegratedCert
# There's another arc for grid stuff around 2 16 840 1 114412 31 *
# so the following probably isn't a typo.
OID = 2 16 840 1 114412 31 4 31 1
Comment = Digicert CA policy
Description = digiCertGridHostCert
# SET
OID = 2 23 42 0
Comment = SET
Description = contentType
OID = 2 23 42 0 0
Comment = SET contentType
Description = panData
OID = 2 23 42 0 1
Comment = SET contentType
Description = panToken
OID = 2 23 42 0 2
Comment = SET contentType
Description = panOnly
# And on and on and on for another 80-odd OIDs that I'm not going to type in
OID = 2 23 42 1
Comment = SET
Description = msgExt
OID = 2 23 42 2
Comment = SET
Description = field
OID = 2 23 42 2 0
Comment = SET field
Description = fullName
OID = 2 23 42 2 1
Comment = SET field
Description = givenName
OID = 2 23 42 2 2
Comment = SET field
Description = familyName
OID = 2 23 42 2 3
Comment = SET field
Description = birthFamilyName
OID = 2 23 42 2 4
Comment = SET field
Description = placeName
OID = 2 23 42 2 5
Comment = SET field
Description = identificationNumber
OID = 2 23 42 2 6
Comment = SET field
Description = month
OID = 2 23 42 2 7
Comment = SET field
Description = date
OID = 2 23 42 2 8
Comment = SET field
Description = address
OID = 2 23 42 2 9
Comment = SET field
Description = telephone
OID = 2 23 42 2 10
Comment = SET field
Description = amount
OID = 2 23 42 2 11
Comment = SET field
Description = accountNumber
OID = 2 23 42 2 12
Comment = SET field
Description = passPhrase
OID = 2 23 42 3
Comment = SET
Description = attribute
OID = 2 23 42 3 0
Comment = SET attribute
Description = cert
OID = 2 23 42 3 0 0
Comment = SET cert attribute
Description = rootKeyThumb
OID = 2 23 42 3 0 1
Comment = SET cert attribute
Description = additionalPolicy
OID = 2 23 42 4
Comment = SET
Description = algorithm
OID = 2 23 42 5
Comment = SET
Description = policy
OID = 2 23 42 5 0
Comment = SET policy
Description = root
OID = 2 23 42 6
Comment = SET
Description = module
OID = 2 23 42 7
Comment = SET
Description = certExt
OID = 2 23 42 7 0
Comment = SET cert extension
Description = hashedRootKey
OID = 2 23 42 7 1
Comment = SET cert extension
Description = certificateType
OID = 2 23 42 7 2
Comment = SET cert extension
Description = merchantData
OID = 2 23 42 7 3
Comment = SET cert extension
Description = cardCertRequired
OID = 2 23 42 7 4
Comment = SET cert extension
Description = tunneling
OID = 2 23 42 7 5
Comment = SET cert extension
Description = setExtensions
OID = 2 23 42 7 6
Comment = SET cert extension
Description = setQualifier
OID = 2 23 42 8
Comment = SET
Description = brand
OID = 2 23 42 8 1
Comment = SET brand
Description = IATA-ATA
OID = 2 23 42 8 4
Comment = SET brand
Description = VISA
OID = 2 23 42 8 5
Comment = SET brand
Description = MasterCard
OID = 2 23 42 8 30
Comment = SET brand
Description = Diners
OID = 2 23 42 8 34
Comment = SET brand
Description = AmericanExpress
OID = 2 23 42 8 6011
Comment = SET brand
Description = Novus
OID = 2 23 42 9
Comment = SET
Description = vendor
OID = 2 23 42 9 0
Comment = SET vendor
Description = GlobeSet
OID = 2 23 42 9 1
Comment = SET vendor
Description = IBM
OID = 2 23 42 9 2
Comment = SET vendor
Description = CyberCash
OID = 2 23 42 9 3
Comment = SET vendor
Description = Terisa
OID = 2 23 42 9 4
Comment = SET vendor
Description = RSADSI
OID = 2 23 42 9 5
Comment = SET vendor
Description = VeriFone
OID = 2 23 42 9 6
Comment = SET vendor
Description = TrinTech
OID = 2 23 42 9 7
Comment = SET vendor
Description = BankGate
OID = 2 23 42 9 8
Comment = SET vendor
Description = GTE
OID = 2 23 42 9 9
Comment = SET vendor
Description = CompuSource
OID = 2 23 42 9 10
Comment = SET vendor
Description = Griffin
OID = 2 23 42 9 11
Comment = SET vendor
Description = Certicom
OID = 2 23 42 9 12
Comment = SET vendor
Description = OSS
OID = 2 23 42 9 13
Comment = SET vendor
Description = TenthMountain
OID = 2 23 42 9 14
Comment = SET vendor
Description = Antares
OID = 2 23 42 9 15
Comment = SET vendor
Description = ECC
OID = 2 23 42 9 16
Comment = SET vendor
Description = Maithean
OID = 2 23 42 9 17
Comment = SET vendor
Description = Netscape
OID = 2 23 42 9 18
Comment = SET vendor
Description = Verisign
OID = 2 23 42 9 19
Comment = SET vendor
Description = BlueMoney
OID = 2 23 42 9 20
Comment = SET vendor
Description = Lacerte
OID = 2 23 42 9 21
Comment = SET vendor
Description = Fujitsu
OID = 2 23 42 9 22
Comment = SET vendor
Description = eLab
OID = 2 23 42 9 23
Comment = SET vendor
Description = Entrust
OID = 2 23 42 9 24
Comment = SET vendor
Description = VIAnet
OID = 2 23 42 9 25
Comment = SET vendor
Description = III
OID = 2 23 42 9 26
Comment = SET vendor
Description = OpenMarket
OID = 2 23 42 9 27
Comment = SET vendor
Description = Lexem
OID = 2 23 42 9 28
Comment = SET vendor
Description = Intertrader
OID = 2 23 42 9 29
Comment = SET vendor
Description = Persimmon
OID = 2 23 42 9 30
Comment = SET vendor
Description = NABLE
OID = 2 23 42 9 31
Comment = SET vendor
Description = espace-net
OID = 2 23 42 9 32
Comment = SET vendor
Description = Hitachi
OID = 2 23 42 9 33
Comment = SET vendor
Description = Microsoft
OID = 2 23 42 9 34
Comment = SET vendor
Description = NEC
OID = 2 23 42 9 35
Comment = SET vendor
Description = Mitsubishi
OID = 2 23 42 9 36
Comment = SET vendor
Description = NCR
OID = 2 23 42 9 37
Comment = SET vendor
Description = e-COMM
OID = 2 23 42 9 38
Comment = SET vendor
Description = Gemplus
OID = 2 23 42 10
Comment = SET
Description = national
OID = 2 23 42 10 392
Comment = SET national
Description = Japan
# WAP
OID = 2 23 43 1 4
Comment = WAP WTLS
Description = wTLS-ECC
OID = 2 23 43 1 4 1
Comment = WAP WTLS
Description = wTLS-ECC-curve1
OID = 2 23 43 1 4 6
Comment = WAP WTLS
Description = wTLS-ECC-curve6
OID = 2 23 43 1 4 8
Comment = WAP WTLS
Description = wTLS-ECC-curve8
OID = 2 23 43 1 4 9
Comment = WAP WTLS
Description = wTLS-ECC-curve9
# TCPA/TCG. Originally the TCPA, then the TCG, some attributes are
# also prefixed with TPMA, we use 'TCG' everywhere for consistency.
OID = 2 23 133
Comment = TCPA/TCG
Description = tCPA
OID = 2 23 133 1
Comment = TCPA/TCG
Description = tcgSpecVersion
OID = 2 23 133 2
Comment = TCPA/TCG
Description = tcgAttribute
OID = 2 23 133 2 1
Comment = TCPA/TCG Attribute
Description = tcgTpmManufacturer
OID = 2 23 133 2 2
Comment = TCPA/TCG Attribute
Description = tcgTpmModel
OID = 2 23 133 2 3
Comment = TCPA/TCG Attribute
Description = tcgTpmVersion
OID = 2 23 133 2 4
Comment = TCPA/TCG Attribute
Description = tcgPlatformManufacturer
OID = 2 23 133 2 5
Comment = TCPA/TCG Attribute
Description = tcgPlatformModel
OID = 2 23 133 2 6
Comment = TCPA/TCG Attribute
Description = tcgPlatformVersion
OID = 2 23 133 2 7
Comment = TCPA/TCG Attribute
Description = tcgComponentManufacturer
OID = 2 23 133 2 8
Comment = TCPA/TCG Attribute
Description = tcgComponentModel
OID = 2 23 133 2 9
Comment = TCPA/TCG Attribute
Description = tcgComponentVersion
OID = 2 23 133 2 10
Comment = TCPA/TCG Attribute
Description = tcgSecurityQualities
OID = 2 23 133 2 11
Comment = TCPA/TCG Attribute
Description = tcgTpmProtectionProfile
OID = 2 23 133 2 12
Comment = TCPA/TCG Attribute
Description = tcgTpmSecurityTarget
OID = 2 23 133 2 13
Comment = TCPA/TCG Attribute
Description = tcgFoundationProtectionProfile
OID = 2 23 133 2 14
Comment = TCPA/TCG Attribute
Description = tcgFoundationSecurityTarget
OID = 2 23 133 2 15
Comment = TCPA/TCG Attribute
Description = tcgTpmIdLabel
OID = 2 23 133 2 16
Comment = TCPA/TCG Attribute
Description = tcgTpmSpecification
OID = 2 23 133 2 18
Comment = TCPA/TCG Attribute
Description = tcgTpmSecurityAssertions
OID = 2 23 133 3
Comment = TCPA/TCG
Description = tcgProtocol
OID = 2 23 133 3 1
Comment = TCPA/TCG Protocol
Description = tcgPrttTpmIdProtocol
# Used to identify a certificate as an EK certificate, but given as a
# keyUsage rather than a certificatePolicy.
OID = 2 23 133 8 1
Comment = TCPA/TCG Key Usage
Description = tcgEKCertificate
OID = 2 23 133 10 1 1 1
Comment = TCPA/TCG Object
Description = tcgObject
# PostSignum.
OID = 2 23 134 1 4 2 1
Comment = PostSignum CA
Description = postSignumRootQCA
OID = 2 23 134 1 2 2 3
Comment = PostSignum CA
Description = postSignumPublicCA
OID = 2 23 134 1 2 1 8 210
Comment = PostSignum CA
Description = postSignumCommercialServerPolicy
# ICAO. Technically this OID is called "SOD" but displaying that as a name
# will just bugger up people's understanding of the data. Newer versions of
# the spec call it ldsSecurityObject but that's a bit too vague to indicate
# what it really is.
OID = 2 23 136 1 1 1
Comment = ICAO MRTD
Description = mRTDSignatureData
# CA/Browser Forum
OID = 2 23 140 1 1
Comment = CAB Certificate Policies
Description = evGuidelines
OID = 2 23 140 1 2 1
Comment = CAB Certificate Policies
Description = domainValidated
OID = 2 23 140 1 2 2
Comment = CAB Certificate Policies
Description = subjectIdentityValidated
OID = 2 23 140 1 4 1
Comment = CAB Certificate Policies
Description = codeSigningRequirements
# Draft SET. These were invented for testing in pre-1.0 drafts but have
# been used nonetheless by implementors
OID = 2 54 1775 2
Comment = SET. Deprecated, use (2 23 42 7 0) instead
Description = hashedRootKey
Warning
OID = 2 54 1775 3
Comment = SET. Deprecated, use (2 23 42 7 0) instead
Description = certificateType
Warning
OID = 2 54 1775 4
Comment = SET. Deprecated, use (2 23 42 7 0) instead
Description = merchantData
Warning
OID = 2 54 1775 5
Comment = SET. Deprecated, use (2 23 42 7 0) instead
Description = cardCertRequired
Warning
OID = 2 54 1775 6
Comment = SET. Deprecated, use (2 23 42 7 0) instead
Description = tunneling
Warning
OID = 2 54 1775 7
Comment = SET. Deprecated, use (2 23 42 7 0) instead
Description = setQualifier
Warning
OID = 2 54 1775 99
Comment = SET. Deprecated, use (2 23 42 7 0) instead
Description = setData
Warning
# EV certificate policies. There's no official record of what all the EV
# policy OIDs are, it seems to be defined as "whatever the browsers will
# accept as EV". This is taken from
# https://en.wikipedia.org/wiki/Extended_Validation_Certificate, there's also
# a list in Chromium, the ev_root_ca_metadata list, but this contains
# errors (e.g. the value "1.3.6.1.4.1.6449.1.2.1.5.1" [sic] is recorded as
# being for both AddTrust and Comodo).
#
# The OIDs are collected here in owner-name alphabetical order rather than
# scattering them throughout this list in OID order to make it easier to
# track what's already present.
OID = 1 2 40 0 17 1 22
Comment = A-Trust CA Root
Description = A-Trust EV policy
# This appears to be an error in Chromium's ev_root_ca_metadata.
# OTOH this OID was also used by UTN-Userfirst, which is now
# Comodo.
#OID = 1 3 6 1 4 1 6449 1 2 1 5 1
#Comment = AddTrust External CA Root
#Description = AddTrust EV policy
OID = 1 3 6 1 4 1 34697 2 1
Comment = AffirmTrust Commercial
Description = AffirmTrust EV policy
OID = 1 3 6 1 4 1 34697 2 2
Comment = AffirmTrust Networking
Description = AffirmTrust EV policy
OID = 1 3 6 1 4 1 34697 2 3
Comment = AffirmTrust Premium
Description = AffirmTrust EV policy
OID = 1 3 6 1 4 1 34697 2 4
Comment = AffirmTrust Premium ECC
Description = AffirmTrust EV policy
# Also listed under the BuyPass CA entries, as a different OID.
#OID = 2 16 578 1 26 1 3 3
#Comment = BuyPass Class 3 EV
#Description = BuyPass EV policy
OID = 1 3 6 1 4 1 17326 10 14 2 1 2
Comment = Camerfirma CA Root
Description = Camerfirma EV policy
OID = 1 3 6 1 4 1 17326 10 8 12 1 2
Comment = Camerfirma CA Root
Description = Camerfirma EV policy
OID = 1 3 6 1 4 1 22234 2 5 2 3 1
Comment = CertPlus Class 2 Primary CA (formerly Keynectis)
Description = CertPlus EV policy
OID = 1 3 6 1 4 1 6449 1 2 1 5 1
Comment = COMODO Certification Authority
Description = Comodo EV policy
OID = 1 3 6 1 4 1 6334 1 100 1
Comment = Cybertrust Global Root (now Verizon Business)
Description = Cybertrust EV policy
OID = 1 3 6 1 4 1 4788 2 202 1
Comment = D-TRUST Root Class 3 CA 2 EV 2009
Description = D-TRUST EV policy
OID = 2 16 840 1 114412 2 1
Comment = DigiCert High Assurance EV Root CA
Description = DigiCert EV policy
OID = 2 16 528 1 1001 1 1 1 12 6 1 1 1
Comment = DigiNotar Root CA
Description = DigiNotar EV policy
OID = 2 16 840 1 114028 10 1 2
Comment = Entrust Root Certification Authority
Description = Entrust EV policy
OID = 1 3 6 1 4 1 14370 1 6
Comment = GeoTrust Primary Certification Authority (formerly Equifax)
Description = GeoTrust EV policy
OID = 1 3 6 1 4 1 4146 1 1
Comment = GlobalSign
Description = GlobalSign EV policy
OID = 2 16 840 1 114413 1 7 23 3
Comment = GoDaddy Class 2 Certification Authority (formerly ValiCert)
Description = GoDaddy EV policy
OID = 1 3 6 1 4 1 14777 6 1 1
Comment = Certificado de Servidor Seguro SSL EV
Description = Izenpe EV policy
OID = 1 3 6 1 4 1 14777 6 1 2
Comment = Certificado de Sede Electronica EV
Description = Izenpe EV policy
OID = 1 3 6 1 4 1 782 1 2 1 8 1
Comment = Network Solutions Certificate Authority
Description = Network Solutions EV policy
OID = 1 3 6 1 4 1 8024 0 2 100 1 2
Comment = QuoVadis Root CA 2
Description = QuoVadis EV policy
OID = 1 2 392 200091 100 721 1
Comment = Security Communication RootCA1
Description = Security Communication (SECOM) EV policy
OID = 2 16 840 1 114414 1 7 23 3
Comment = Starfield Class 2 Certification Authority
Description = Starfield EV policy
OID = 1 3 6 1 4 1 23223 1 1 1
Comment = StartCom Certification Authority
Description = StartCom EV policy
OID = 2 16 756 1 89 1 2 1 1
Comment = SwissSign Gold CA - G2
Description = SwissSign EV policy
OID = 1 3 6 1 4 1 7879 13 24 1
Comment = T-TeleSec GlobalRoot Class 3
Description = T-TeleSec EV policy
OID = 2 16 840 1 113733 1 7 48 1
Comment = Thawte Premium Server CA
Description = Thawte EV policy
OID = 2 16 840 1 114404 1 1 2 4 1
Comment = TrustWave CA, formerly SecureTrust, before that XRamp
Description = TrustWave EV policy
OID = 1 3 6 1 4 1 40869 1 1 22 3
Comment = TWCA Root Certification Authority
Description = TWCA EV policy
OID = 2 16 840 1 113733 1 7 23 6
Comment = VeriSign Class 3 Public Primary Certification Authority
Description = VeriSign EV policy
OID = 2 16 840 1 114171 500 9
Comment = Wells Fargo WellsSecure Public Root Certificate Authority
Description = Wells Fargo EV policy
# End of Fahnenstange
Reference in New Issue View Git Blame Copy Permalink