Home » Object Registry

Object Registry

Object Registry of the CA / Browser Forum

The CA/Browser Forum node is:- 2.23.140

{joint-iso-itu-t(2) international-organizations(23) ca-browser-forum(140)}

* certificate-policies(1)

  • extended-validation (1) — 2.23.140.1.1 <- This is the OID ARC for the Extended Validation Guidelines.
  • baseline-requirements(2) — 2.23.140.1.2 <- This is the OID ARC for the Baseline Requirements.  (Certificate issued in compliance with the Baseline Requirements)

Thus, under the Baseline Requirements, additional OIDs adopted by the CA / Browser Forum are:

  • domain-validated(1) => (2.23.140.1.2.1)  (Compliant with Baseline Requirements – No entity identity asserted)
  • organization-validated(2) => (2.23.140.1.2.2)  (Compliant with Baseline Requirements – Organization identity asserted)
  • individual-validated(3) => (2.23.140.1.2.3)  (Compliant with Baseline Requirements – Individual identity asserted)

For Extended Validation Code Signing, the OID is:  2.23.140.1.3

For .onion EV Certificates, the TOR Service Descriptor OID is:  2.23.140.1.31

Registry of CA-Specific BR OIDs and EV Certificate Policy OIDs

(Another list, of just EV CP OIDs, is available here:  http://en.wikipedia.org/wiki/Extended_Validation_Certificate#Extended_Validation_certificate_identification.)

 

Company CABF Compliance OIDs Comments
Buypass BR OID
Chunghwa Telecom BR OID OV
Comodo BR OID OV,DV
Digicert 2.16.840.1.114412.1.2 DV
Digicert 2.16.840.1.114412.1.1 OV
Digicert 2.16.840.1.114412.2.1 EV
D-Trust 1.3.6.1.4.1.4788.2.200.1 OV
D-Trust 1.3.6.1.4.1.4788.2.202.1 EV
Entrust BR OID
Globalsign 1.3.6.1.4.1.4146.1.10.10 DV
Globalsign 1.3.6.1.4.1.4146.1.20 OV
Globalsign 1.3.6.1.4.1.4146.1.1 EV
GoDaddy 2.16.840.1.114413.1.7.23.1 DV
GoDaddy 2.16.840.1.114413.1.7.23.2 OV
GoDaddy 2.16.840.1.114413.1.7.23.3 EV
Identrust 2.16.840.1.113839.0.6.3 Commercial – Will also include CABF OIDS 2.23.140.1.2.1
Identrust 2.16.840.1.101.3.2.1.1. 5 Public Sector – Will also include CABF OIDS 2.23.140.1.2.1
Izenpe 1.3.6.1.4.1.14777.1.2.1 Will also use CABF OID
Logius 2.16.528.1.1003.1.2.5.6 OV only
QuoVadis 1.3.6.1.4.1.8024.0.2.100.1.1 OV
QuoVadis 1.3.6.1.4.1.8024.0.2.100.1.2 EV
Starfield 2.16.840.1.114414.1.7.23.1 DV
Starfield 2.16.840.1.114414.1.7.23.2 OV
Starfield 2.16.840.1.114414.1.7.23.3 EV
Startcom BR OID
SwissSign 2.16.756.1.89.1.2.1.1 EV
Symantec 2.16.840.1.113733.1.7.54 Verisign, Thawte, GeoTrust
Trend 1.3.6.1.4.1.34697.1.1
Trustis 1.3.6.1.4.1.5237.1.1.3
Trustwave 1.3.6.1.4.1.30360.3.3.3.3.4.4.3.0
TurkTrust 2.16.792.3.0.3.1.1.2 OV
TurkTrust 2.16.792.3.0.3.1.1.5 EV
WoSign 1.3.6.1.4.1.36305.2 EV
WoSign BR OID OV, DV