v1.0 Updated 20 July 2023 by Chuck Blevins
OIDs in this list and in DigiCert certificates belong to their respective owners.
| Object Identifier (OID) Types | OIDs (Digicert Registered) | CABF OIDs (Required) | Symantec OIDs |
|---|---|---|---|
| Issuer CA (Baseline Any Policy) | 2.5.29.32.0 | ||
| Practice & Policy Statements | 2.16.840.1.114412.0 | ||
| Certificate Policy, version 4.14 | 2.16.840.1.114412.0.1.4 | ||
| Certificates Issued Pursuant to Certificate Practice Statement (CPS) | 2.16.840.1.114412.0.2.4 | ||
| DigiCert Specific | 2.16.840.1.114412.1 | ||
| Individual Vetted (IV) SSL/TLS Server Certificates per the Baseline Requirements | 2.16.840.1.114412.1.1 | 2.23.140.1.2.3 | |
| Organization Vetted (OV) SSL/TLS Server Certificates per the Baseline Requirements | 2.16.840.1.114412.1.1 | 2.23.140.1.2.2 | |
| Domain Vetted (DV) SSL/TLS Server Certificates per the Baseline Requirements | 2.16.840.1.114412.1.2 | 2.23.140.1.2.1 | |
| IGTF Grid Host – Public Trust | 2.16.840.1.114412.1.31.1 | ||
| Certificate extension identifying the Legal Entity Identifier (LEI) of an entity verified by the certificate authority | 2.16.840.1.114412.133 | ||
| Grid | 2.16.840.1.114412.19.31.1 | ||
| Extended Validation (EV) SSL/TLS Server Certificates per the EV SSL Guidelines | 2.16.840.1.114412.2.1 | 2.23.140.1.1 | 1.3.6.1.4.1.6334.1.100.1 2.16.840.1.113733.1.7.23.6 |
| Object Signing Certificates | 2.16.840.1.114412.3 | ||
| Code Signing Certificates | 2.16.840.1.114412.3.1 | ||
| Code Signing per the Baseline Requirements for Code-Signing Certificates | 2.16.840.1.114412.3.1.1 | 2.23.140.1.4.1 | |
| Windows Kernel Driver Signing | 2.16.840.1.114412.3.11 | ||
| Extended Validation Code Signing per the Baseline Requirements for Code-Signing Certificates | 2.16.840.1.114412.3.2 | 2.23.140.1.3 | |
| Adobe Authentic Documents Trust (CDS) | 1.2.840.113583.1.1.5 | ||
| Adobe Signing Certificate | 2.16.840.1.114412.3.21 | Private prod 2.16.840.1.113733.1.7.55 id-symc-private-AATL 2.16.840.1.113733.1.7.55.1 id-symc-private-AATL-org 2.16.840.1.113733.1.7.55.2 id-symc-private-AATL-indiv 2.16.840.1.113733.1.7.55.3 id-test-symc-private-AATL-org 2.16.840.1.113733.1.7.55.4 id-test-symc-private-AATL-indiv Private test drive 2.16.840.1.113733.1.7.21.4 id-test-aatl 2.16.840.1.113733.1.7.21.4.1 id-test-aatl-indiv Public Class 2 Prod 2.16.840.1.113733.1.7.23.2.2 id-stn-aatl-class2 2.16.840.1.113733.1.7.23.2.2.1 id-stn-aatl-class2-indiv Public Class 3 Prod 2.16.840.1.113733.1.7.23.3.3 id-stn-aatl-class3 |
|
| Adobe Signing Certificate for Individuals | 2.16.840.1.114412.3.21.1 | ||
| Adobe Signing Certificate for Orginizations | 2.16.840.1.114412.3.21.2 | ||
| Document signing certificate for use in products other than Adobe document signing program | 2.16.840.1.114412.3.25 | ||
| Grid Certificate OID Arcs (Grid-only arc) | 2.16.840.1.114412.31 | ||
| IGTF Grid Host Certificate | 2.16.840.1.114412.31.1.1.1 | 1.2.840.113612.5.2.2.1.x | |
| IGTF Classic X.509 Authorities with secured infrastructure for individuals (IGTF) | 2.16.840.1.114412.31.4.1.1 | 1.2.840.113612.5.2.2.1.x | |
| IGTF Classic X.509 Authorities with secured infrastructure for business (IGTF) | 2.16.840.1.114412.31.4.1.2 | 1.2.840.113612.5.2.2.1.x | |
| IGTF Classic X.509 Authorities with secured infrastructure for individual or business with high assurance (IGTF) | 2.16.840.1.114412.31.4.2 | 1.2.840.113612.5.2.2.1.x | |
| OCSP Responder | 2.16.840.1.114412.36 | ||
| OCSP Responder (Dedicated Signer) | 2.16.840.1.114412.36.1 | ||
| Client Certificate OID Arc | 2.16.840.1.114412.4 | ||
| Level 1 Certificates – Personal | 2.16.840.1.114412.4.1.1 | 2.16.840.1.113733.1.7.23.1 (Class1 EE, CP OID) | |
| Level 1 Certificates – Enterprise | 2.16.840.1.114412.4.1.2 2.16.840.1.114412.5.2 |
2.16.840.1.113733.1.7.23.2 (Class2 EE, CP OID) | |
| Level 2 Certificates | 2.16.840.1.114412.4.2 | 2.16.840.1.113733.1.7.23.1 (Class1 EE, CP OID ) 2.16.840.1.113733.1.7.23.2 (Class2 EE, CP OID) 2.16.840.1.113733.1.7.23.3 (Class3 EE, CP OID) |
|
| Level 3 Certificates – Client | 2.16.840.1.114412.4.3 | ||
| Level 3 certificates - US | 2.16.840.1.114412.4.3.1 | ||
| Level 3 certificates - Customs and Border Protection (CBP) | 2.16.840.1.114412.4.3.2 | ||
| Grid Certificate OID Arcs | 2.16.840.1.114412.31.4 | ||
| IGTF Member Integrated X.509 Credential Services with Secured Infrastructure Certificates | 2.16.840.1.114412.31.4.5 | 1.2.840.113612.5.2.2.5.x | |
| Level 4 Certificates | 2.16.840.1.114412.4.4 | ||
| Level 4 Certificates - US | 2.16.840.1.114412.4.4.1 | ||
| Level 4 Certificates - Customs and Border Protection (CBP): | 2.16.840.1.114412.4.4.2 | ||
| IGTF Classic X.509 Authorities with secured infrastructure Client w/ Public | 2.16.840.1.114412.4.31.1 | ||
| PIV-I hardware | 2.16.840.1.114412.5.1 | 2.16.840.1.113733.1.7.23.1 | |
| PIV-I Card Authentication | 2.16.840.1.114412.5.2 | 2.16.840.1.113733.1.7.23.2 | |
| MPKI8 | 2.16.840.1.114412.5.3 | ||
| PIV-I Content Signing | 2.16.840.1.114412.5.3 | 2.16.840.1.113733.1.7.23.1 2.16.840.1.113733.1.7.23.2 2.16.840.1.113733.1.7.23.3 |
|
| PIV-I Encryption | 2.16.840.1.114412.5.4 | ||
| CA/Browser Forum validation method used to issue a certificate | 2.16.840.1.114412.55 | ||
| Authentication-Only Certificates | 2.16.840.1.114412.6 | ||
| Authentication certificate with rudimentary level of verification | 2.16.840.1.114412.6.1 | ||
| Class 1Authentication-Only Certificates | 2.16.840.1.114412.6.1.1 | ||
| Class 1Authentication-Only Certificates | 2.16.840.1.114412.6.1.2 | ||
| Class 2 Authentication-Only Certificates | 2.16.840.1.114412.6.2 | ||
| Time-stamping | 2.16.840.1.114412.7 | ||
| Trusted Time-stamping | 2.16.840.1.114412.7.1 | 2.23.140.1.4.2 | |
| Legacy arc1 | 2.16.840.1.114412.81 | ||
| Test arc | 2.16.840.1.114412.99 | ||
| Qualified Certificate Statement (QCS) claiming that the private key related to the certified public key resides in a qualified electronic Signature/Seal Creation Device (SSCD) | 0.4.0.1862.1.4 | ||
| Qualified Certificate Statement (QCS) regarding location of Public-key infrastructure Disclosure Statements (PDSs) | 0.4.0.1862.1.5 | ||
| QCP-n: certificate policy for European Union (EU) qualified certificates issued to natural persons | 0.4.0.194112.1.0 | ||
| QCP-l: certificate policy for European Union (EU) qualified certificates issued to legal persons | 0.4.0.194112.1.1 | ||
| QCP-n-qscd: certificate policy for European Union (EU) qualified certificates issued to natural persons with private key related to the certified public key in a Qualified electronic Signature/seal Creation Device (QSCD) | 0.4.0.194112.1.2 | ||
| QCP-l-qscd: certificate policy for European Union (EU) qualified certificates issued to legal persons with private key related to the certified public key< in a Qualified electronic Signature/seal Creation Device (QSCD) | 0.4.0.194112.1.3 | ||
| MPKI8 | 1.2.840.113583.1.2.1 | ||
| MPKI8 | 1.2.840.113583.1.2.3 | ||
| MPKI8 | 2.16.840.1.113733.1.7.1.6 | ||
| Grid | 1.2.840.113612.5.2.3.1.2 | ||
| Grid OGF | 1.2.840.113612.5.2.3.3.3 | ||
| Certisur | 1.3.6.1.4.1.12456.1.1.3 | ||
| IGTF | 1.2.840.113612.5.2.2.1 | ||
| IGTF | 1.2.840.113612.5.2.3.3.1 | ||
| IGTF | 1.2.840.113612.5.2.3.3.2 | ||
| DigiCert Japan G.K. specific OID for BMS cert | 1.2.392.200207.3.1 | 1.2.392.200207.3.1 1.2.392.200207 is registered OID by DigiCert Japan. See DIgiCert Japan G.K. (Symantec Japan, Inc.) OID (1.2.392.00200207) |
|
| FBCA Medium CBP (Commercial Best Practice) | 2.16.840.1.114412.4.3.2 | ||
| FBCA Device | 2.16.840.1.114412.1.11 | ||
| FBCA Basic | 2.16.840.1.114412.4.2 | ||
| Digicert cert-template - Data included within OID indicates template | 2.16.840.1.114412.39 | ||
| Non-verified TLS (Private trust only) | 2.16.840.1.114412.1.19 | ||
| Digital Sign | 1.3.6.1.4.1.25596.1.2.1 | ||
| Digital Sign | 1.3.6.1.4.1.25596.1.2.2 | ||
| Digital Sign | 1.3.6.1.4.1.25596.1.2.3 | ||
| Digital Sign | 1.3.6.1.4.1.25596.1.2.4 | ||
| Digital Sign | 1.3.6.1.4.1.25596.1.2.101 | ||
| Digital Sign | 1.3.6.1.4.1.25596.1.2.102 | ||
| Digital Sign | 1.3.6.1.4.1.25596.1.2.103 | ||
| Digital Sign | 1.3.6.1.4.1.25596.1.2.104 | ||
| Mailbox-validated Legacy | 2.23.140.1.5.1.1 | ||
| Mailbox-validated Multipurpose | 2.23.140.1.5.1.2 | ||
| Mailbox-validated Strict | 2.23.140.1.5.1.3 | ||
| Organization-validated Legacy | 2.23.140.1.5.2.1 | ||
| Organization-validated Multipurpose | 2.23.140.1.5.2.2 | ||
| Organization-validated Strict | 2.23.140.1.5.2.3 | ||
| Sponsor-validated Legacy | 2.23.140.1.5.3.1 | ||
| Sponsor-validated Multipurpose | 2.23.140.1.5.3.2 | ||
| Sponsor-validated Strict | 2.23.140.1.5.3.3 | ||
| Individual-validated Legacy | 2.23.140.1.5.4.1 | ||
| Individual-validated Multipurpose | 2.23.140.1.5.4.2 | ||
| Individual-validated Strict | 2.23.140.1.5.4.3 |