Table of Contents

1 Introduction

This document contains a registration of all PKIoverheid (PKIo) specific Object Identifiers (OIDs), both active and deprecated.

OIDs enable the unique identification of “objects” is the broadest sense of the word. This can be a country, a laptop, person, title, requirement, or in case of PKIoverheid a certificate policy. OIDs are strings of numbers. They are allocated in a hierarchical manner, so that, for instance, the authority for “1.2.3” is the only one that can say what “1.2.3.4” means. They are used in a variety of protocols, of which PKIX is one.

This document contains OID descriptions using “ASN.1-like” syntax. This syntax is a hybrid of the 1988 and 1993 ASN.1 syntaxes. More information on this syntax can be found in RFC 5280.

2 PKIo Top-Level identifiers arc

The code snippet below shows the PKIo top-level identifiers arc in ASN.1 syntax.

-- PKIo-specific top-level OID
id-pkio OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) nl(528)

nederlandse-organisatie(1) nederlandse-overheid(1003) pki-for-the-government(1) }

-- PKIo identifier arc
id-pkio-defs OBJECT IDENTIFIER ::= { id-pkio defs(1) } -- Definitions

id-pkio-cp OBJECT IDENTIFIER ::= { id-pkio cp(2) } -- Certificate Policies

id-pkio-org OBJECT IDENTIFIER ::= { id-pkio org(3) } -- Organizations

id-pkio-pilots OBJECT IDENTIFIER ::= { id-pkio pilots(4) } -- DEPRECATED (Pilots)

The table below gives a more reader-friendly overview of the PKIo top-level identifiers arc.

Subsequent chapters will describe these top-level identifiers in-depth.

3 PKIo Definition identifiers arc

The code snippet below shows the PKIo Definition identifiers arc in ASN.1 syntax.

-- PKIo Definition identifiers arc

id-pkio-defs-pkigov OBJECT IDENTIFIER ::= { id-pkio-defs pkigov(1) }

-- PKI for the Government

The table below gives a more reader-friendly overview of the PKIo Definition identifiers arc.

4 PKIo Certificate Policy identifiers arc

The code snippet below shows the domain-level PKIo Certificate Policy identifiers arc in ASN.1 syntax.

-- PKIo Certificate Policy domain-level identifiers arc

id-pkio-cp-pa OBJECT IDENTIFIER ::= { id-pkio-cp pa(1) } -- DEPRECATED (PA)

id-pkio-cp-g1gov OBJECT IDENTIFIER ::= { id-pkio-cp g1gov(2) } -- DEPRECATED (G1 Government)

id-pkio-cp-g1g2g3civ OBJECT IDENTIFIER ::= { id-pkio-cp g1g2g3civ(3) } -- G1+G2+G3 Civilian

id-pkio-cp-g1com OBJECT IDENTIFIER ::= { id-pkio-cp g1com(4) } -- DEPRECATED (G1 Companies)

id-pkio-cp-g2g3org OBJECT IDENTIFIER ::= { id-pkio-cp g2g3org(5) } -- G2+G3 Organizations

id-pkio-cp-g2g3ad OBJECT IDENTIFIER ::= { id-pkio-cp g2g3ad(6) } -- G2+G3 Autonomous Devices

id-pkio-cp-g1ev OBJECT IDENTIFIER ::= { id-pkio-cp g1ev(7) } -- Extended Validation

id-pkio-cp-g1priv OBJECT IDENTIFIER ::= { id-pkio-cp g1priv(8) } -- Private

id-pkio-cp-g2g3test OBJECT IDENTIFIER ::= { id-pkio-cp g2g3test(9) } -- G2+G3 Test

id-pkio-cp-g3smimeorgv OBJECT IDENTIFIER ::= { id-pkio-cp g3smimeorgv(10) } -- G3 S/MIME Organization Validated

id-pkio-cp-g3smimespov OBJECT IDENTIFIER ::= { id-pkio-cp g3smimespov(11) } -- G3 S/MIME Sponsor Validated

id-pkio-cp-g3smimeindv OBJECT IDENTIFIER ::= { id-pkio-cp g3smimeindv(12) } -- G3 S/MIME Individual Validated

id-pkio-cp-g3smimeboxv OBJECT IDENTIFIER ::= { id-pkio-cp g3smimeboxv(13) } -- G3 S/MIME Mailbox Validated

These domain-level identifiers will be referenced in the Certificate Policies in each of the following sub-domains.

4.1 PA sub-domain CP identifiers arc (DEPRECATED)

The code snippet below shows the PKIo Certificate Policy identifiers arc in the Policy Authority (PA) sub-domain in ASN.1 syntax.

-- PKIo Certificate Policy PA sub-domain identifiers arc

id-pkio-cp-pa-root OBJECT IDENTIFIER ::= { id-pkio-cp-pa root(1) } -- DEPRECATED

id-pkio-cp-pa-dom OBJECT IDENTIFIER ::= { id-pkio-cp-pa dom(2) } -- DEPRECATED

id-pkio-cp-pa-gov OBJECT IDENTIFIER ::= { id-pkio-cp-pa gov(3) } -- DEPRECATED

id-pkio-cp-pa-civ OBJECT IDENTIFIER ::= { id-pkio-cp-pa civ(4) } -- DEPRECATED

id-pkio-cp-pa-com OBJECT IDENTIFIER ::= { id-pkio-cp-pa com(5) } -- DEPRECATED

id-pkio-cp-pa-csp OBJECT IDENTIFIER ::= { id-pkio-cp-pa csp(6) } -- DEPRECATED

id-pkio-cp-pa-org OBJECT IDENTIFIER ::= { id-pkio-cp-pa org(7) } -- DEPRECATED

id-pkio-cp-pa-ad OBJECT IDENTIFIER ::= { id-pkio-cp-pa ad(8) } -- DEPRECATED

id-pkio-cp-pa-test OBJECT IDENTIFIER ::= { id-pkio-cp-pa test(9) } -- DEPRECATED

-- All PA sub-domains used any_policy (2.5.29.32.0) as certificate policy

The table below gives a more reader-friendly overview of the end nodes in the PKIo Certificate Policy identifiers arc in the PA sub-domain.

4.2 Government (Public G1) sub-domain PKIo CP identifiers arc (DEPRECATED)

The code snippet below shows the PKIo Certificate Policy identifiers arc in the Government (Public G1) sub-domain in ASN.1 syntax.

-- PKIo Certificate Policy Government (G1) sub-domain identifiers arc

id-pkio-cp-g1gov-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov auth(1) } -- DEPRECATED

id-pkio-cp-g1gov-auth-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov-auth std(1) } -- DEPRECATED

id-pkio-cp-g1gov-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov nonrep(2) } -- DEPRECATED

id-pkio-cp-g1gov-nonrep-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov-nonrep std(1) } -- DEPRECATED

id-pkio-cp-g1gov-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov conf(3) } -- DEPRECATED

id-pkio-cp-g1gov-conf-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov-conf std(1) } -- DEPRECATED

id-pkio-cp-g1gov-svc-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov svc-auth(4) } -- DEPRECATED

id-pkio-cp-g1gov-svc-auth-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov-svc-auth std(1) } -- DEPRECATED

id-pkio-cp-g1gov-svc-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov svc-conf(5) } -- DEPRECATED

id-pkio-cp-g1gov-svc-conf-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov-svc-conf std(1) } -- DEPRECATED

id-pkio-cp-g1gov-server OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov server(6) } -- DEPRECATED

id-pkio-cp-g1gov-server-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov-server std(1) } -- DEPRECATED

The table below gives a more reader-friendly overview of the end nodes in the PKIo Certificate Policy identifiers arc in the Government (Public G1) sub-domain.

4.3 Civilian (Public G1+G2+G3) sub-domain CP identifiers arc

The code snippet below shows the PKIo Certificate Policy identifiers arc in the Civilian (Public G1+G2+G3) sub-domain in ASN.1 syntax.

-- PKIo Certificate Policy Civilian (Public G1+G2+G3) sub-domain identifiers arc

id-pkio-cp-g1g2g3civ-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g1g2g3civ auth(1) }

id-pkio-cp-g1g2g3civ-auth-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1g2g3civ-auth std(1) }

id-pkio-cp-g1g2g3civ-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g1g2g3civ nonrep(2) }

id-pkio-cp-g1g2g3civ-nonrep-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1g2g3civ-nonrep std(1) }

id-pkio-cp-g1g2g3civ-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g1g2g3civ conf(3) }

id-pkio-cp-g1g2g3civ-conf-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1g2g3civ-conf std(1) }

id-pkio-cp-g3civ-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g3civ auth (4) }

id-pkio-cp-g3civ-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g3civ nonrep(5) }

id-pkio-cp-g3civ-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g3civ conf (6) }

The table below gives a more reader-friendly overview of the end nodes in the PKIo Certificate Policy identifiers arc in the Civilian (Public G1+G2+G3) sub-domain.

4.4 Companies (Public G1) sub-domain CP identifiers arc (DEPRECATED)

The code snippet below shows the PKIo Certificate Policy identifiers arc in the Companies (Public G1) sub-domain in ASN.1 syntax.

-- PKIo Certificate Policy Organizations (Public G1) sub-domain identifiers arc

id-pkio-cp-g1com-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g1com auth(1) } -- DEPRECATED

id-pkio-cp-g1com-auth-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1com-auth std(1) } -- DEPRECATED

id-pkio-cp-g1com-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g1com nonrep(2) } -- DEPRECATED

id-pkio-cp-g1com-nonrep-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1com-nonrep std(1) } -- DEPRECATED

id-pkio-cp-g1com-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g1com conf(3) } -- DEPRECATED

id-pkio-cp-g1com-conf-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1com-conf std(1) } -- DEPRECATED

id-pkio-cp-g1com-svc-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g1com svc-auth(4) } -- DEPRECATED

id-pkio-cp-g1com-svc-auth-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1com-svc-auth std(1) } -- DEPRECATED

id-pkio-cp-g1com-svc-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g1com svc-conf(5) } -- DEPRECATED

id-pkio-cp-g1com-svc-conf-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1com-svc-conf std(1) } -- DEPRECATED

id-pkio-cp-g1com-server OBJECT IDENTIFIER ::= { id-pkio-cp-g1com server(6) } -- DEPRECATED

id-pkio-cp-g1com-server-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1com-server std(1) } -- DEPRECATED

The table below gives a more reader-friendly overview of the PKIo Certificate Policy identifiers arc in the Companies (Public G1) sub-domain.

4.5 Organization (Public G2), Organization Person/Services (Public G3), and Server 2020 (EV G1) sub-domain CP identifiers arc

The code snippet below shows the PKIo Certificate Policy identifiers arc in the Organization (Public G2), Organization Person/services (Public G3), and Server 2020 (EV G1) sub-domain in ASN.1 syntax.

-- PKIo Certificate Policy Organization (Public G2), Organization Person/Services (Public G3), and Server 2020 (EV G1) sub-domain identifiers arc

id-pkio-cp-g2g3org-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org auth(1) }

id-pkio-cp-g2g3org-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org nonrep(2) }

id-pkio-cp-g2g3org-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org conf(3) }

id-pkio-cp-g2g3org-svc-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org svc-auth(4) }

id-pkio-cp-g2g3org-svc-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org svc-conf(5) }

id-pkio-cp-g2g3org-server OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org server(6) }

id-pkio-cp-g2g3org-svc-seal OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org svc-seal(7) }

id-pkio-cp-g2g3org-ocsp OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org ocsp(8) }

id-pkio-cp-g2g3org-server2020 OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org server2020(9) }

id-pkio-cp-g3org-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g3org auth(10) }

id-pkio-cp-g3org-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g3org nonrep(11) }

id-pkio-cp-g3org-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g3org conf(12) }

id-pkio-cp-g3org-svc-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g3org svc-auth(13) }

id-pkio-cp-g3org-svc-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g3org svc-conf(14) }

id-pkio-cp-g3org-svc-seal OBJECT IDENTIFIER ::= { id-pkio-cp-g3org svc-seal(15) }

The table below gives a more reader-friendly overview of the PKIo Certificate Policy identifiers arc in the Organization (Public G2), Organization Person/services (Public G3), and Server 2020 (EV G1) sub-domain.

4.6 Autonomous Devices (Public G2+G3) sub-domain CP identifiers arc

The code snippet below shows the PKIo Certificate Policy identifiers arc in the Autonomous Devices (Public G2+G3) sub-domain in ASN.1 syntax.

-- PKIo Certificate Policy Autonomous Devices (Public G2+G3) sub-domain identifiers arc

id-pkio-cp-g2g3ad-devauth OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3ad devauth(1) }

id-pkio-cp-g2g3ad-devconf OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3ad devconf(2) }

id-pkio-cp-g2g3ad-devcombi OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3ad devcombi(3) }

The table below gives a more reader-friendly overview of the PKIo Certificate Policy identifiers arc in the Autonomous Devices (Public G2+G3) sub-domain.

4.7 Extended Validation (EV G1) domain CP identifiers arc

The code snippet below shows the PKIo Certificate Policy identifiers arc in the Extended Validation (EV G1) sub-domain in ASN.1 syntax.

-- PKIo Certificate Policy Extended Validation (EV G1) domain identifiers arc
-- The Extended Validation (EV) domain has no subdomain identifiers;

-- the certificate policy identifier is the same as the domain identifier:

-- id-pkio-cp-g1ev OBJECT IDENTIFIER ::= { id-pkio-cp g1ev(7) }

The table below gives a more reader-friendly overview of the PKIo Certificate Policy identifiers arc in the Extended Validation (EV G1) domain.

4.8 Private Root (Private G1) domain CP identifiers arc

The code snippet below shows the PKIo Certificate Policy identifiers arc in the Private Root (Private G1) domain in ASN.1 syntax.

-- PKIo Certificate Private Root (Private G1) sub-domain identifiers arc

id-pkio-cp-g1priv-pers-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g1priv pers-auth(1) }

id-pkio-cp-g1priv-pers-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g1priv pers-nonrep(2) }

id-pkio-cp-g1priv-pers-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g1priv pers-conf(3) }

id-pkio-cp-g1priv-svc-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g1priv svc-auth(4) }

id-pkio-cp-g1priv-svc-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g1priv svc-conf(5) }

id-pkio-cp-g1priv-server OBJECT IDENTIFIER ::= { id-pkio-cp-g1priv server(6) }

The table below gives a more reader-friendly overview of the end nodes in the PKIo Certificate Policy identifiers arc in the Private Root (Private G1) domain.

4.9 Test (Trial G2+G3) domain CP identifiers arc

The code snippet below shows the PKIo Certificate Policy identifiers arc in the Test (Trial G2+G3) domain in ASN.1 syntax.

NOTE: The Test sub-domain is sometimes referred to as Trial domain.

-- PKIo Certificate Test (Trial G2+G3) domain identifiers arc

id-pkio-cp-g2g3test-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test auth(1) }

id-pkio-cp-g2g3test-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test nonrep(2) }

id-pkio-cp-g2g3test-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test conf(3) }

id-pkio-cp-g2g3test-svc-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test svc-auth(4) }

id-pkio-cp-g2g3test-svc-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test svc-conf(5) }

id-pkio-cp-g2g3test-server OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test server(6) }

id-pkio-cp-g2g3test-devauth OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test devauth(7) }

id-pkio-cp-g2g3test-devconf OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test devconf(8) }

id-pkio-cp-g2g3test-devcombi OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test devcombi(9) }

id-pkio-cp-g2g3test-svc-seal OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test svc-seal(10) }

The table below gives a more reader-friendly overview of the end nodes in the PKIo Certificate Policy identifiers arc in the Test (Trial G2+G3) domain.

4.10 S/MIME (G3) Organization Validated domain CP identifiers arc

The code snippet below shows the PKIo Certificate Policy identifiers arc in the S/MIME (G3) Organization Validated domain in ASN.1 syntax.

-- PKIo Certificate S/MIME (G3) Organization Validated domain identifiers arc

id-pkio-cp-g3smimeorgv-legacySO OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeorgv legacySO(1) }

-- Signing Only certificates in the S/MIME BR Legacy profile.

id-pkio-cp-g3smimeorgv-legacyKM OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeorgv legacyKM(2) }

-- Key Management certificates in the S/MIME BR Legacy profile.

id-pkio-cp-g3smimeorgv-legacyDU OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeorgv legacyDU(3) }

-- Dual Use certificates in the S/MIME BR Legacy profile.

id-pkio-cp-g3smimeorgv-multiSO OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeorgv multiSO(4) }

-- Signing Only certificates in the S/MIME BR Multi-purpose profile.

id-pkio-cp-g3smimeorgv-multiKM OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeorgv multiKM(5) }

-- Key Management certificates in the S/MIME BR Multi-purpose profile.

id-pkio-cp-g3smimeorgv-multiDU OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeorgv multiDU(6) }

-- Dual Use certificates in the S/MIME BR Multi-purpose profile.

id-pkio-cp-g3smimeorgv-strictSO OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeorgv strictSO(7) }

-- Signing Only certificates in the S/MIME BR Strict profile.

id-pkio-cp-g3smimeorgv-strictKM OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeorgv strictKM(8) }

-- Key Management certificates in the S/MIME BR Strict profile.

id-pkio-cp-g3smimeorgv-strictDU OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeorgv strictDU(9) }

-- Dual Use certificates in the S/MIME BR Strict profile.

The table below gives a more reader-friendly overview of the end nodes in the PKIo Certificate Policy identifiers arc in the S/MIME (G3) Organization Validated domain.

4.11 S/MIME (G3) Sponsor Validated domain CP identifiers arc

The code snippet below shows the PKIo Certificate Policy identifiers arc in the S/MIME (G3) Sponsor Validated domain in ASN.1 syntax.

-- PKIo Certificate S/MIME (G3) Sponsor Validated domain identifiers arc

id-pkio-cp-g3smimespov-legacySO OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimespov legacySO(1) }

-- Signing Only certificates in the S/MIME BR Legacy profile.

id-pkio-cp-g3smimespov-legacyKM OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimespov legacyKM(2) }

-- Key Management certificates in the S/MIME BR Legacy profile.

id-pkio-cp-g3smimespov-legacyDU OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimespov legacyDU(3) }

-- Dual Use certificates in the S/MIME BR Legacy profile.

id-pkio-cp-g3smimespov-multiSO OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimespov multiSO(4) }

-- Signing Only certificates in the S/MIME BR Multi-purpose profile.

id-pkio-cp-g3smimespov-multiKM OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimespov multiKM(5) }

-- Key Management certificates in the S/MIME BR Multi-purpose profile.

id-pkio-cp-g3smimespov-multiDU OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimespov multiDU(6) }

-- Dual Use certificates in the S/MIME BR Multi-purpose profile.

id-pkio-cp-g3smimespov-strictSO OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimespov strictSO(7) }

-- Signing Only certificates in the S/MIME BR Strict profile.

id-pkio-cp-g3smimespov-strictKM OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimespov strictKM(8) }

-- Key Management certificates in the S/MIME BR Strict profile.

id-pkio-cp-g3smimespov-strictDU OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimespov strictDU(9) }

-- Dual Use certificates in the S/MIME BR Strict profile.

The table below gives a more reader-friendly overview of the end nodes in the PKIo Certificate Policy identifiers arc in the S/MIME (G3) Sponsor Validated domain.

4.12 S/MIME (G3) Individual Validated domain CP identifiers arc

The code snippet below shows the PKIo Certificate Policy identifiers arc in the S/MIME (G3) Individual Validated domain in ASN.1 syntax.

-- PKIo Certificate S/MIME (G3) Individual Validated domain identifiers arc

id-pkio-cp-g3smimeindv-legacySO OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeindv legacySO(1) }

-- Signing Only certificates in the S/MIME BR Legacy profile.

id-pkio-cp-g3smimeindv-legacyKM OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeindv legacyKM(2) }

-- Key Management certificates in the S/MIME BR Legacy profile.

id-pkio-cp-g3smimeindv-legacyDU OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeindv legacyDU(3) }

-- Dual Use certificates in the S/MIME BR Legacy profile.

id-pkio-cp-g3smimeindv-multiSO OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeindv multiSO(4) }

-- Signing Only certificates in the S/MIME BR Multi-purpose profile.

id-pkio-cp-g3smimeindv-multiKM OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeindv multiKM(5) }

-- Key Management certificates in the S/MIME BR Multi-purpose profile.

id-pkio-cp-g3smimeindv-multiDU OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeindv multiDU(6) }

-- Dual Use certificates in the S/MIME BR Multi-purpose profile.

id-pkio-cp-g3smimeindv-strictSO OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeindv strictSO(7) }

-- Signing Only certificates in the S/MIME BR Strict profile.

id-pkio-cp-g3smimeindv-strictKM OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeindv strictKM(8) }

-- Key Management certificates in the S/MIME BR Strict profile.

id-pkio-cp-g3smimeindv-strictDU OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeindv strictDU(9) }

-- Dual Use certificates in the S/MIME BR Strict profile.

The table below gives a more reader-friendly overview of the end nodes in the PKIo Certificate Policy identifiers arc in the S/MIME (G3) Individual Validated domain.

4.13 S/MIME (G3) Mailbox Validated domain CP identifiers arc

The code snippet below shows the PKIo Certificate Policy identifiers arc in the S/MIME (G3) Mailbox Validated domain in ASN.1 syntax.

-- PKIo Certificate S/MIME (G3) Mailbox Validated domain identifiers arc

id-pkio-cp-g3smimeboxv-legacySO OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeboxv legacySO(1) }

-- Signing Only certificates in the S/MIME BR Legacy profile.

id-pkio-cp-g3smimeboxv-legacyKM OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeboxv legacyKM(2) }

-- Key Management certificates in the S/MIME BR Legacy profile.

id-pkio-cp-g3smimeboxv-legacyDU OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeboxv legacyDU(3) }

-- Dual Use certificates in the S/MIME BR Legacy profile.

id-pkio-cp-g3smimeboxv-multiSO OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeboxv multiSO(4) }

-- Signing Only certificates in the S/MIME BR Multi-purpose profile.

id-pkio-cp-g3smimeboxv-multiKM OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeboxv multiKM(5) }

-- Key Management certificates in the S/MIME BR Multi-purpose profile.

id-pkio-cp-g3smimeboxv-multiDU OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeboxv multiDU(6) }

-- Dual Use certificates in the S/MIME BR Multi-purpose profile.

id-pkio-cp-g3smimeboxv-strictSO OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeboxv strictSO(7) }

-- Signing Only certificates in the S/MIME BR Strict profile.

id-pkio-cp-g3smimeboxv-strictKM OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeboxv strictKM(8) }

-- Key Management certificates in the S/MIME BR Strict profile.

id-pkio-cp-g3smimeboxv-strictDU OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeboxv strictDU(9) }

-- Dual Use certificates in the S/MIME BR Strict profile.

The table below gives a more reader-friendly overview of the end nodes in the PKIo Certificate Policy identifiers arc in the S/MIME (G3) Mailbox Validated domain.

5. PKIo Organization identifiers arc

The code snippet below shows the domain-level PKIo Organization identifiers arc in ASN.1 syntax.

-- PKIo Certificate Policy domain-level identifiers arc

id-pkio-org-pa OBJECT IDENTIFIER ::= { id-pkio-org pa(1) } -- DEPRECATED (PA)

id-pkio-org-g1gov OBJECT IDENTIFIER ::= { id-pkio-org g1gov(2) } -- DEPRECATED (G1 Government)

id-pkio-org-g1g2g3civ OBJECT IDENTIFIER ::= { id-pkio-org g1g2g3civ(3) } -- G1+G2+G3 Civilian

id-pkio-org-g1com OBJECT IDENTIFIER ::= { id-pkio-org g1com(4) } -- DEPRECATED (G1 Companies)

id-pkio-org-g2g3org OBJECT IDENTIFIER ::= { id-pkio-org g2g3org(5) } -- G2+G3 Organizations

id-pkio-org-g2g3ad OBJECT IDENTIFIER ::= { id-pkio-org g2g3ad(6) } -- G2+G3 Autonomous Devices

id-pkio-org-g2g3ev OBJECT IDENTIFIER ::= { id-pkio-org g2g3ev(7) } -- G2+G3 Extended Validation

id-pkio-org-g1priv OBJECT IDENTIFIER ::= { id-pkio-org g1priv(8) } -- G1 Private

id-pkio-org-g2g3test OBJECT IDENTIFIER ::= { id-pkio-org g2g3test(9) } -- G2+G3 Test

id-pkio-org-g3smimeorgv OBJECT IDENTIFIER ::= { id-pkio-org g3smimeorgv(10) } -- G3 S/MIME Organization Validated

id-pkio-org-g3smimespov OBJECT IDENTIFIER ::= { id-pkio-org g3smimespov(11) } -- G3 S/MIME Sponsor Validated

id-pkio-org-g3smimeindv OBJECT IDENTIFIER ::= { id-pkio-org g3smimeindv(12) } -- G3 S/MIME Individual Validated

id-pkio-org-g3smimeboxv OBJECT IDENTIFIER ::= { id-pkio-org g3smimeboxv(13) } -- G3 S/MIME Mailbox Validated

These domain-level identifiers will be referenced in the Certificate Policies in each of the following sub-domains.

5.1 PA sub-domain Organization identifiers arc (DEPRECATED)

The code snippet below shows the PKIo Certificate Policy identifiers arc in the Policy Authority (PA) sub-domain in ASN.1 syntax.

-- PKIo Certificate Policy PA sub-domain identifiers arc

id-pkio-org-pa-tsp OBJECT IDENTIFIER ::= { id-pkio-org-pa tsp(1) } - Trust Service Provider

The table below gives a more reader-friendly overview of the PKIo Organization identifiers arc in the PA sub-domain.

5.2 Government (Public G1) sub-domain PKIo Organization identifiers arc (DEPRECATED)

The code snippet below shows the PKIo Organization identifiers arc in the Government (Public G1) sub-domain in ASN.1 syntax.

-- PKIo Organization Government (Public G1) sub-domain identifiers arc

id-pkio-org-g1gov-nova OBJECT IDENTIFIER ::= { id-pkio-org-g1gov nova(1) } -- DEPRECATED

id-pkio-org-g1gov-nova-auth OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-nova auth(1) } -- DEPRECATED

id-pkio-org-g1gov-nova-nonrep OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-nova nonrep(2) } -- DEPRECATED

id-pkio-org-g1gov-nova-conf OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-nova conf(3) } -- DEPRECATED

id-pkio-org-g1gov-pink OBJECT IDENTIFIER ::= { id-pkio-org-g1gov pink(2) } -- DEPRECATED

id-pkio-org-g1gov-pink-auth OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-pink auth(1) } -- DEPRECATED

id-pkio-org-g1gov-pink-nonrep OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-pink nonrep(2) } -- DEPRECATED

id-pkio-org-g1gov-pink-conf OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-pink conf(3) } -- DEPRECATED

id-pkio-org-g1gov-pink-svc OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-pink svc(4) } -- DEPRECATED

id-pkio-org-g1gov-pink-getronics OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-pink getronics(5) } -- DEPRECATED

id-pkio-org-g1gov-diginotar OBJECT IDENTIFIER ::= { id-pkio-org-g1gov diginotar(3) } -- DEPRECATED

id-pkio-org-g1gov-diginotar-ca-pkio OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-diginotar pkio-ca(1) } -- DEPRECATED

id-pkio-org-g1gov-uzireg OBJECT IDENTIFIER ::= { id-pkio-org-g1gov uzireg(4) } -- DEPRECATED

id-pkio-org-g1gov-uzireg-csp OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-uzireg csp(1) } -- DEPRECATED

id-pkio-org-g1gov-uzireg-csp-zorgverlener OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-uzireg-csp zorgverlener(1) } -- DEPRECATED

id-pkio-org-g1gov-uzireg-csp-mdwnaam OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-uzireg-csp medewerker-op-naam(2) } -- DEPRECATED

id-pkio-org-g1gov-uzireg-csp-mdwnietnaam OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-uzireg-csp medewerker-niet-op-naam(3) } -- DEPRECATED

id-pkio-org-g1gov-uzireg-csp-svc OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-uzireg-csp services(4) } -- DEPRECATED

id-pkio-org-g1gov-uzireg-csp-zovarserver OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-uzireg-csp zovarserver(5) } - DEPRECATED

id-pkio-org-g1gov-defence OBJECT IDENTIFIER ::= { id-pkio-org-g1gov defence(6) } -- DEPRECATED

id-pkio-org-g1gov-defence-csp OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-defence csp(1) } -- DEPRECATED

id-pkio-org-g1gov-defence-defensiepas OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-defence defensiepas(2) } -- DEPRECATED

id-pkio-org-g1gov-kpn OBJECT IDENTIFIER ::= { id-pkio-org-g1gov kpn(7) } -- DEPRECATED

id-pkio-org-g1gov-kpn-csp OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-kpn csp(1) } -- DEPRECATED

The table below gives a more reader-friendly overview of the end-nodes in the PKIo Organizations identifiers arc in the Government (Public G1) sub-domain.

5.3 Civilian (Public G1+G2+G3) sub-domain PKIo Organization identifiers arc

The code snippet below shows the PKIo Organization identifiers arc in the Civilian (Public G1+G2+G3) sub-domain in ASN.1 syntax.

-- PKIo Organization Civilian (Public G1+G2+G3) sub-domain identifiers arc

id-pkio-org-g1g2g3civ-esg OBJECT IDENTIFIER ::= { id-pkio-org-g1g2g3civ esg(1) } -- DEPRECATED

id-pkio-org-g1g2g3civ-esg-pers OBJECT IDENTIFIER ::= { id-pkio-org-g1g2g3civ-esg pers(1) } -- DEPRECATED

id-pkio-org-g1g2g3civ-ddy OBJECT IDENTIFIER ::= { id-pkio-org-g1g2g3civ ddy(1) }

id-pkio-org-g1g2g3civ-ddy-civ OBJECT IDENTIFIER ::= { id-pkio-org-g1g2g3civ-ddy civ(1) }

id-pkio-org-g1g2g3civ-ddy-sscd OBJECT IDENTIFIER ::= { id-pkio-org-g1g2g3civ-ddy sscd(2) }

id-pkio-org-g1g2g3civ-qv OBJECT IDENTIFIER ::= { id-pkio-org-g1g2g3civ qv(3) }

id-pkio-org-g1g2g3civ-qv-civ OBJECT IDENTIFIER ::= { id-pkio-org-g1g2g3civ-qv civ(1) }

id-pkio-org-g1g2g3civ-cb OBJECT IDENTIFIER ::= { id-pkio-org-g1g2g3civ cb(4) }

id-pkio-org-g1g2g3civ-cb-civ OBJECT IDENTIFIER ::= { id-pkio-org-g1g2g3civ-cb civ(1) }

The table below gives a more reader-friendly overview of the end nodes in the PKIo Organizations identifiers arc in the Civilian (Public G1+G2+G3) sub-domain.

5.4 Companies (Public G1) sub-domain PKIo Organization identifiers arc (DEPRECATED)

The code snippet below shows the PKIo Organization identifiers arc in the Companies (Public G1) sub-domain in ASN.1 syntax.

-- PKIo Organization Companies (Public G1) sub-domain identifiers arc

id-pkio-org-g1com-kvk OBJECT IDENTIFIER ::= { id-pkio-org-g1com kvk(1) } -- DEPRECATED

id-pkio-org-g1com-kvk-auth OBJECT IDENTIFIER ::= { id-pkio-org-g1com-kvk auth(1) } -- DEPRECATED

id-pkio-org-g1com-kvk-nonrep OBJECT IDENTIFIER ::= { id-pkio-org-g1com-kvk nonrep(2) } -- DEPRECATED

id-pkio-org-g1com-kvk-conf OBJECT IDENTIFIER ::= { id-pkio-org-g1com-kvk conf(3) } -- DEPRECATED

The table below gives a more reader-friendly overview of the end nodes in the PKIo Organizations identifiers arc in the Companies (Public G1) sub-domain.

5.5 Organization (Public G2), Organization Person/Services (Public G3), and Server 2020 (EV G1) sub-domain Organization identifiers arc

The code snippet below shows the PKIo Organization identifiers arc in the Organization (Public G2), Organization Person/services (Public G3), and Server 2020 (EV G1) sub-domain in ASN.1 syntax.

-- PKIo Organization (Public G2), Organization Person/Services (Public G3), and Server 2020 (EV G1)

-- sub-domain Organization identifiers arc

id-pkio-org-g2g3org-venw OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org minvenw(1) }

id-pkio-org-g2g3org-venw-org OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-venw org(1) }

id-pkio-org-g2g3org-venw-bct OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-venw bctcard(2) }

id-pkio-org-g2g3org-qv OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org qv(2) }

id-pkio-org-g2g3org-qv-csp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-qv csp(1) }

id-pkio-org-g2g3org-esg OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org esg(3) } -- DEPRECATED

id-pkio-org-g2g3org-esg-csp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-esg csp(1) } -- DEPRECATED

id-pkio-org-g2g3org-getronics OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org getronics(4) } -- DEPRECATED

id-pkio-org-g2g3org-getronics-csp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-getronics csp(1) } -- DEPRECATED

id-pkio-org-g2g3org-getronics-justice OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-getronics justice(2) } -- DEPRECATED

id-pkio-org-g2g3org-cibg OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org cibg(5) }

id-pkio-org-g2g3org-cibg-zorgcsp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-cibg zorgcsp(1) }

id-pkio-org-g2g3org-cibg-uzizorgverlener OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-cibg uzizorgverlener(2) }

id-pkio-org-g2g3org-cibg-uzimdwopnaam OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-cibg uzimdwopnaam(3) }

id-pkio-org-g2g3org-cibg-uzimdwnietopnaam OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-cibg uzimdwnietopnaam(4) }

id-pkio-org-g2g3org-cibg-uziserver OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-cibg uziserver(5) }

id-pkio-org-g2g3org-cibg-zovarserver OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-cibg zovarserver(6) }

id-pkio-org-g2g3org-cibg-zorgbeheerder OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-cibg zorgbeheerder(7) }

id-pkio-org-g2g3org-diginotar OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org diginotar(6) } --DEPRECATED

id-pkio-org-g2g3org-diginotar-csp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-diginotar csp(1) } --DEPRECATED

id-pkio-org-g2g3org-defence OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org defence(7) }

id-pkio-org-g2g3org-defence-csp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-defence csp(1) }

id-pkio-org-g2g3org-defence-defensiepas OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-defence defensiepas(2) }

id-pkio-org-g2g3org-ddy OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org ddy(8) }

id-pkio-org-g2g3org-ddy-org OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-ddy org(1) }

id-pkio-org-g2g3org-ddy-sscd OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-ddy sscd(2) }

id-pkio-org-g2g3org-ddy-svc OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-ddy svc(3) }

id-pkio-org-g2g3org-kpn OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org kpn(9) }

id-pkio-org-g2g3org-kpn-csp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-kpn csp(1) }

id-pkio-org-g2g3org-kpn-justice OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-kpn justice(2) }

The table below gives a more reader-friendly overview of the end nodes in the PKIo Organizations identifiers arc in the 5.5 Organization (Public G2), Organization Person/Services (Public G3), and Server 2020 (EV G1) sub-domain.

5.6 Autonomous Devices (Public G2+G3) sub-domain PKIo Organization identifiers arc

The code snippet below shows the PKIo Organization identifiers arc in the Autonomous Devices (Public G2+G3) sub-domain in ASN.1 syntax.

-- PKIo Organization Autonomous Devices (Public G2+G3) sub-domain identifiers arc

id-pkio-org-g2g3ad-venw OBJECT IDENTIFIER ::= { id-pkio-org-g2g3ad minvenw(1) }

id-pkio-org-g2g3ad-venw-adcsp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3ad-venw adcsp(1) } -- DEPRECATED

id-pkio-org-g2g3ad-venw-bctcard OBJECT IDENTIFIER ::= { id-pkio-org-g2g3ad-venw bctcard(2) }

id-pkio-org-g2g3ad-ienm OBJECT IDENTIFIER ::= { id-pkio-org-g2g3ad minienm(2) }

id-pkio-org-g2g3ad-ienm-adcsp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3ad-ienm adcsp(1) }

id-pkio-org-g2g3ad-ienw OBJECT IDENTIFIER ::= { id-pkio-org-g2g3ad minienw(3) }

id-pkio-org-g2g3ad-ienw-adcsp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3ad-ienw adcsp(1) }

The table below gives a more reader-friendly overview of the end nodes in the PKIo Organizations identifiers arc in the Autonomous Devices (Public G2+G3) sub-domain.

5.7 S/MIME Organization Validated (Public G3) sub-domain PKIo Organization identifiers arc

The code snippet below shows the PKIo Organization identifiers arc in the S/MIME Organization Validated (Public G3) sub-domain in ASN.1 syntax.

-- PKIo Organization S/MIME Organization Validated (Public G3) sub-domain identifiers arc

id-pkio-org-g3smimeorgv-def OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeorgv def(1) }

id-pkio-org-g3smimeorgv-cibg OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeorgv cibg(2) }

id-pkio-org-g3smimeorgv-kpn OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeorgv kpn(3) }

id-pkio-org-g3smimeorgv-qv OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeorgv qv(4) }

id-pkio-org-g3smimeorgv-cb OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeorgv cb(5) }

The table below gives a more reader-friendly overview of the end nodes in the PKIo Organizations identifiers arc in the S/MIME Organization Validated (Public G3) sub-domain.

5.8 S/MIME Sponsor Validated (Public G3) sub-domain PKIo Organization identifiers arc

The code snippet below shows the PKIo Organization identifiers arc in the S/MIME Sponsor Validated (Public G3) sub-domain in ASN.1 syntax.

-- PKIo Organization S/MIME Sponsor Validated (Public G3) sub-domain identifiers arc

id-pkio-org-g3smimespov-def OBJECT IDENTIFIER ::= { id-pkio-org-g3smimespov def(1) }

id-pkio-org-g3smimespov-cibg OBJECT IDENTIFIER ::= { id-pkio-org-g3smimespov cibg(2) }

id-pkio-org-g3smimespov-kpn OBJECT IDENTIFIER ::= { id-pkio-org-g3smimespov kpn(3) }

id-pkio-org-g3smimespov-qv OBJECT IDENTIFIER ::= { id-pkio-org-g3smimespov qv(4) }

id-pkio-org-g3smimespov-cb OBJECT IDENTIFIER ::= { id-pkio-org-g3smimespov cb(5) }

The table below gives a more reader-friendly overview of the end nodes in the PKIo Organizations identifiers arc in the S/MIME Sponsor Validated (Public G3) sub-domain.

5.9 S/MIME Individual Validated (Public G3) sub-domain PKIo Organization identifiers arc

The code snippet below shows the PKIo Individual identifiers arc in the S/MIME Sponsor Validated (Public G3) sub-domain in ASN.1 syntax.

-- PKIo Organization S/MIME Individual Validated (Public G3) sub-domain identifiers arc

id-pkio-org-g3smimeindv-def OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeindv def(1) }

id-pkio-org-g3smimeindv-cibg OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeindv cibg(2) }

id-pkio-org-g3smimeindv-kpn OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeindv kpn(3) }

id-pkio-org-g3smimeindv-qv OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeindv qv(4) }

id-pkio-org-g3smimeindv-cb OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeindv cb(5) }

The table below gives a more reader-friendly overview of the end nodes in the PKIo Organizations identifiers arc in the S/MIME Individual Validated (Public G3) sub-domain.

5.10 S/MIME Mailbox Validated (Public G3) sub-domain PKIo Organization identifiers arc

The code snippet below shows the PKIo Individual identifiers arc in the S/MIME Mailbox Validated (Public G3) sub-domain in ASN.1 syntax.

-- PKIo Organization S/MIME Mailbox Validated (Public G3) sub-domain identifiers arc

id-pkio-org-g3smimeboxv-def OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeboxv def(1) }

id-pkio-org-g3smimeboxv-cibg OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeboxv cibg(2) }

id-pkio-org-g3smimeboxv-kpn OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeboxv kpn(3) }

id-pkio-org-g3smimeboxv-qv OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeboxv qv(4) }

id-pkio-org-g3smimeboxv-cb OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeboxv cb(5) }

The table below gives a more reader-friendly overview of the end nodes in the PKIo Organizations identifiers arc in the S/MIME Mailbox Validated (Public G3) sub-domain.

5.11 Extended Validation (EV G1) domain PKIo Organization identifiers arc

The code snippet below shows the PKIo Organization identifiers arc in the Extended Validation (EV G1) sub-domain in ASN.1 syntax.

-- PKIo Organization Extended Validation (EV G1) sub-domain identifiers arc

id-pkio-org-g1ev-qv OBJECT IDENTIFIER ::= { id-pkio-org-g1ev qv(1) }

id-pkio-org-g1ev-qv-csp OBJECT IDENTIFIER ::= { id-pkio-org-g1ev-qv csp(1) }

id-pkio-org-g1ev-kpn OBJECT IDENTIFIER ::= { id-pkio-org-g1ev kpn(2) }

id-pkio-org-g1ev-kpn-csp OBJECT IDENTIFIER ::= { id-pkio-org-g1ev-kpn csp(1) }

The table below gives a more reader-friendly overview of the end nodes in the PKIo Organizations identifiers arc in the Extended Validation (EV G1) domain.

5.12 Private root (Private G1) domain PKIo Organization identifiers arc

The code snippet below shows the PKIo Organization identifiers arc in the Private Root (Private G1) domain in ASN.1 syntax.

-- PKIo Organization Private Root (Private G1) domain identifiers arc

id-pkio-org-g1priv-qv OBJECT IDENTIFIER ::= { id-pkio-org-g1priv qv(1) }

id-pkio-org-g1priv-qv-pers OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-qv pers(1) }

id-pkio-org-g1priv-qv-svc OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-qv svc(2) }

id-pkio-org-g1priv-esg OBJECT IDENTIFIER ::= { id-pkio-org-g1priv esg(2) } --DEPRECATED

id-pkio-org-g1priv-esg-pers OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-esg pers(1) } --DEPRECATED

id-pkio-org-g1priv-esg-svc OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-esg svc(2) } --DEPRECATED

id-pkio-org-g1priv-esg-server OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-esg server(3) } --DEPRECATED

id-pkio-org-g1priv-cibg OBJECT IDENTIFIER ::= { id-pkio-org-g1priv cibg(3) }

id-pkio-org-g1priv-cibg-zorgcsp OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-cibg zorgcsp(1) }

id-pkio-org-g1priv-cibg-uzizorgverlener OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-cibg uzizorgverlener(2) }

id-pkio-org-g1priv-cibg-uzimdwopnaam OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-cibg uzimdwopnaam(3) }

id-pkio-org-g1priv-cibg-uzimdwnietopnaam OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-cibg uzimdwnietopnaam(4) }

id-pkio-org-g1priv-cibg-uziserver OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-cibg uziserver(5) }

id-pkio-org-g1priv-cibg-zovarserver OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-cibg zovarserver(6) }

id-pkio-org-g1priv-cibg-zorgbeheerder OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-cibg zorgbeheerder(7) }

id-pkio-org-g1priv-ddy OBJECT IDENTIFIER ::= { id-pkio-org-g1priv ddy(4) }

id-pkio-org-g1priv-ddy-org OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-ddy org(1) }

id-pkio-org-g1priv-ddy-sscd OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-ddy sscd(2) }

id-pkio-org-g1priv-ddy-svc OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-ddy svc(3) }

id-pkio-org-g1priv-kpn OBJECT IDENTIFIER ::= { id-pkio-org-g1priv kpn(5) }

id-pkio-org-g1priv-kpn-svc OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-kpn svc(1) }

The table below gives a more reader-friendly overview of the end nodes in the PKIo Organizations identifiers arc in the Extended Validation (EV G1) sub-domain.

5.13 Test (Trial G2+G3) domain PKIo Organization identifiers arc

The code snippet below shows the PKIo Organization identifiers arc in the Test (Trial G2+G3) domain in ASN.1 syntax.

NOTE: The Test sub-domain is sometimes referred to as Trial domain.

-- PKIo Organization Test (Trial G2+G3) domain identifiers arc

id-pkio-org-g2g3test-diginotar OBJECT IDENTIFIER ::= { id-pkio-org-g2g3test diginotar(1) } -- DEPRECATED

id-pkio-org-g2g3test-diginotar-csp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3test-diginotar csp(1) } -- DEPRECATED

id-pkio-org-g2g3test-qv OBJECT IDENTIFIER ::= { id-pkio-org-g2g3test qv(2) }

id-pkio-org-g2g3test-qv-csp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3test-qv csp(1) }

id-pkio-org-g2g3test-esg OBJECT IDENTIFIER ::= { id-pkio-org-g2g3test esg(3) } -- DEPRECATED

id-pkio-org-g2g3test-esg-csp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3test-esg csp(1) } -- DEPRECATED

id-pkio-org-g2g3test-kpn OBJECT IDENTIFIER ::= { id-pkio-org-g2g3test kpn(4) }

id-pkio-org-g2g3test-kpn-csp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3test-kpn csp(1) }

The table below gives a more reader-friendly overview of the end nodes in the PKIo Organizations identifiers arc in the Test (Trial G2+G3) domain.

6 PKIo Pilots identifiers arc (DEPRECATED)

The code snippet below shows the top-level PKIo Pilots identifiers arc in ASN.1 syntax.

Note: At this point (2020) it is not known anymore what the exact purpose was of the Pilots identifiers arc. Most probably it was meant for an initial PKIo pilot before it was taken into production, possibly later reused as an earlier implementation of a test domain. The arc was primarily used in 2002 and 2003, it seems.

-- PKIo top-level Pilots identifiers arc

id-pkio-pilots-defs OBJECT IDENTIFIER ::= id-pkio-pilots defs(1) } -- DEPRECATED

id-pkio-pilots-cp OBJECT IDENTIFIER ::= { id-pkio-pilots cp(2) } -- DEPRECATED

id-pkio-pilots-org OBJECT IDENTIFIER ::= id-pkio-pilots org(3) } -- DEPRECATED

The table below gives a more reader-friendly overview of the PKIo top-level Pilots identifiers arc.

Subsequent paragraphs will describe these top-level Pilots identifiers in-depth.

6.1 Pilots Definition identifiers arc (DEPRECATED)

No definitions were defined in this top-level Pilots identifier.

6.2 Pilots Certificate Profile identifiers arc (DEPRECATED)

The code snippet below shows the domain-level Pilots Certificate Policy identifiers arc in ASN.1 syntax.

-- Pilots Certificate Policy domain-level identifiers arc

id-pkio-pilots-cp-pa OBJECT IDENTIFIER ::= { id-pkio-pilots-cp pa(1) } -- DEPRECATED

id-pkio-pilots-cp-gov OBJECT IDENTIFIER ::= { id-pkio-pilots-cp gov(2) } -- DEPRECATED

id-pkio-pilots-cp-civ OBJECT IDENTIFIER ::= { id-pkio-pilots-cp civ(3) } -- DEPRECATED

id-pkio-pilots-cp-com OBJECT IDENTIFIER ::= { id-pkio-pilots-cp com(4) } -- DEPRECATED

These domain-level identifiers will be referenced in the Certificate Policies in each of the following sub-paragraphs.

6.2.1 Pilots PA sub-domain CP identifiers arc (DEPRECATED)

The code snippet below shows the Pilots Certificate Policy identifiers arc in the Policy Authority (PA) sub-domain in ASN.1 syntax.

-- Pilots Certificate Policy PA sub-domain identifiers arc

id-pkio-pilots-cp-pa-root OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-pa root(1) } -- DEPRECATED

id-pkio-pilots-cp-pa-dom OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-pa dom(2) } -- DEPRECATED

id-pkio-pilots-cp-pa-gov OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-pa gov(3) } -- DEPRECATED

id-pkio-pilots-cp-pa-civ OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-pa civ(4) } -- DEPRECATED

id-pkio-pilots-cp-pa-com OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-pa com(5) } -- DEPRECATED

id-pkio-pilots-cp-pa-csp OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-pa csp(6) } -- DEPRECATED

The table below gives a more reader-friendly overview of the end nodes in the Pilots Certificate Policy identifiers arc in the PA sub-domain.

6.2.2 Pilots Government sub-domain CP identifiers arc (DEPRECATED)

The code snippet below shows the Pilots Certificate Policy identifiers arc in the Government sub-domain in ASN.1 syntax.

-- Pilots Certificate Policy Government sub-domain identifiers arc

id-pkio-pilots-cp-gov-auth OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov auth(1) } -- DEPRECATED

id-pkio-pilots-cp-gov-auth-std OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-auth std(1) } -- DEPRECATED

id-pkio-pilots-cp-gov-auth-robin OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-auth robin(2) } -- DEPRECATED

id-pkio-pilots-cp-gov-nonrep OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov nonrep(2) } -- DEPRECATED

id-pkio-pilots-cp-gov-nonrep-std OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-nonrep std(1) } -- DEPRECATED

id-pkio-pilots-cp-gov-nonrep-robin OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-nonrep robin(2) } -- DEPRECATED

id-pkio-pilots-cp-gov-conf OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov conf(3) } -- DEPRECATED

id-pkio-pilots-cp-gov-conf-std OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-conf std(1) } -- DEPRECATED

id-pkio-pilots-cp-gov-conf-robin OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-conf robin(2) } -- DEPRECATED

id-pkio-pilots-cp-gov-svc-auth OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov svc-auth(4) } -- DEPRECATED

id-pkio-pilots-cp-gov-svc-auth-std OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-svc-auth std(1) } -- DEPRECATED

id-pkio-pilots-cp-gov-svc-auth-robin OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-svc-auth robin(2) } -- DEPRECATED

id-pkio-pilots-cp-gov-svc-conf OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov svc-conf(5) } -- DEPRECATED

id-pkio-pilots-cp-gov-svc-conf-std OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-svc-conf std(1) } -- DEPRECATED

id-pkio-pilots-cp-gov-svc-conf-robin OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-svc-conf robin(2) } -- DEPRECATED

The table below gives a more reader-friendly overview of the end nodes in the Pilots Certificate Policy identifiers arc in the Government sub-domain.

6.2.3 Pilots Civilian sub-domain CP identifiers arc (DEPRECATED)

The code snippet below shows the Pilots Certificate Policy identifiers arc in the Civilian sub-domain in ASN.1 syntax.

-- Pilots Certificate Policy Civilian sub-domain identifiers arc

id-pkio-pilots-cp-civ-auth OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-civ auth(1) } -- DEPRECATED

id-pkio-pilots-cp-civ-nonrep OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-civ nonrep(2) } -- DEPRECATED

id-pkio-pilots-cp-civ-conf OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-civ conf(3) } -- DEPRECATED

The table below gives a more reader-friendly overview of the end nodes in the Pilots Certificate Policy identifiers arc in the Civilian sub-domain.

6.2.4 Pilots Companies sub-domain CP identifiers arc (DEPRECATED)

The code snippet below shows the Pilots Certificate Policy identifiers arc in the Companies sub-domain in ASN.1 syntax.

-- Pilots Certificate Policy Companies sub-domain identifiers arc

id-pkio-pilots-cp-com-auth OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com auth(1) } -- DEPRECATED

id-pkio-pilots-cp-com-auth-std OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com-auth std(1) } -- DEPRECATED

id-pkio-pilots-cp-com-auth-cibg OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com-auth cibg(2) } -- DEPRECATED

id-pkio-pilots-cp-com-nonrep OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com nonrep(2) } -- DEPRECATED

id-pkio-pilots-cp-com-nonrep-std OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com-nonrep std(1) } -- DEPRECATED

id-pkio-pilots-cp-com-nonrep-cibg OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com-nonrep cibg(2) } -- DEPRECATED

id-pkio-pilots-cp-com-conf OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com conf(3) } -- DEPRECATED

id-pkio-pilots-cp-com-conf-std OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com-conf std(1) } -- DEPRECATED

id-pkio-pilots-cp-com-conf-cibg OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com-conf cibg(2) } -- DEPRECATED

id-pkio-pilots-cp-com-svc-auth OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com svc-auth(4) } -- DEPRECATED

id-pkio-pilots-cp-com-svc-conf OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com svc-conf(5) } -- DEPRECATED

The table below gives a more reader-friendly overview of the end nodes in the Pilots Certificate Policy identifiers arc in the Companies sub-domain.

6.3 Pilots Organization identifiers arc (DEPRECATED)

The code snippet below shows the domain-level Pilots Organization identifiers arc in ASN.1 syntax.

-- Pilots Organization domain-level identifiers arc

id-pkio-pilots-org-pa OBJECT IDENTIFIER ::= { id-pkio-pilots-org pa(1) } -- DEPRECATED

id-pkio-pilots-org-gov OBJECT IDENTIFIER ::= { id-pkio-pilots-org gov(2) } -- DEPRECATED

id-pkio-pilots-org-civ OBJECT IDENTIFIER ::= { id-pkio-pilots-org civ(3) } -- DEPRECATED

id-pkio-pilots-org-com OBJECT IDENTIFIER ::= { id-pkio-pilots-org com(4) } -- DEPRECATED

These domain-level identifiers will be expanded upon in the Organization identifiers in each of the following sub-paragraphs.

6.3.1 Pilots PA sub-domain Organization identifiers arc (DEPRECATED)

The code snippet below shows the Pilots Organization identifiers arc in the Policy Authority (PA) sub-domain in ASN.1 syntax.

-- Pilots Organization PA sub-domain identifiers arc

id-pkio-org-pilots-pa-ictu OBJECT IDENTIFIER ::= { id-pkio-org-pilots-pa ictu(1) } -- DEPRECATED

id-pkio-org-pilots-pa-ictu-auth OBJECT IDENTIFIER ::= { id-pkio-org-pilots-pa-ictu auth(1) } -- DEPRECATED

id-pkio-org-pilots-pa-ictu-nonrep OBJECT IDENTIFIER ::= { id-pkio-org-pilots-pa-ictu nonrep(2) } -- DEPRECATED

id-pkio-org-pilots-pa-ictu-conf OBJECT IDENTIFIER ::= { id-pkio-org-pilots-pa-ictu conf(3) } -- DEPRECATED

The table below gives a more reader-friendly overview of the Pilots Organization identifiers arc in the PA sub-domain.

6.3.2 Pilots Government sub-domain Organization identifiers arc (DEPRECATED)

The code snippet below shows the Pilots Organization identifiers arc in the Government sub-domain in ASN.1 syntax.

-- Pilots Organization Government sub-domain identifiers arc

id-pkio-org-pilots-gov-sc OBJECT IDENTIFIER ::= { id-pkio-org-pilots-gov sc(1) } -- DEPRECATED

id-pkio-org-pilots-gov-sc-auth OBJECT IDENTIFIER ::= { id-pkio-org-pilots-gov-sc auth(1) } -- DEPRECATED

id-pkio-org-pilots-gov-sc-nonrep OBJECT IDENTIFIER ::= { id-pkio-org-pilots-gov-sc nonrep(2) } -- DEPRECATED

id-pkio-org-pilots-gov-sc-conf OBJECT IDENTIFIER ::= { id-pkio-org-pilots-gov-sc conf(3) } -- DEPRECATED

id-pkio-org-pilots-gov-robin OBJECT IDENTIFIER ::= { id-pkio-org-pilots-gov robin(1) } -- DEPRECATED

id-pkio-org-pilots-gov-robin-libroca OBJECT IDENTIFIER ::= { id-pkio-org-pilots-gov-robin libroca(1) } -- DEPRECATED

id-pkio-org-pilots-gov-robin-libroca-ca OBJECT IDENTIFIER ::= { id-pkio-org-pilots-gov-robin-libroca ca(1) } -- DEPRECATED

The table below gives a more reader-friendly overview of the Pilots Organization identifiers arc in the Government sub-domain.

6.3.3 Pilots Civilian sub-domain Organization identifiers arc (DEPRECATED)

No identifiers were defined in the Pilots Civilian sub-domain identifier arc.

6.3.4 Pilots Companies sub-domain Organization identifiers arc (DEPRECATED)

The code snippet below shows the Pilots Organization identifiers arc in the Companies sub-domain in ASN.1 syntax.

-- Pilots Organization Companies sub-domain identifiers arc

id-pkio-org-pilots-com-sc OBJECT IDENTIFIER ::= { id-pkio-org-pilots-com sc(1) } -- DEPRECATED

id-pkio-org-pilots-cim-sc-auth OBJECT IDENTIFIER ::= { id-pkio-org-pilots-com-sc auth(1) } -- DEPRECATED

id-pkio-org-pilots-com-sc-nonrep OBJECT IDENTIFIER ::= { id-pkio-org-pilots-com-sc nonrep(2) } -- DEPRECATED

id-pkio-org-pilots-com-sc-conf OBJECT IDENTIFIER ::= { id-pkio-org-pilots-com-sc conf(3) } -- DEPRECATED

id-pkio-org-pilots-com-cibg OBJECT IDENTIFIER ::= { id-pkio-org-pilots-com cibg(1) } -- DEPRECATED

id-pkio-org-pilots-com-cibg-csp OBJECT IDENTIFIER ::= { id-pkio-org-pilots-com-cibg csp(1) } -- DEPRECATED

The table below gives a more reader-friendly overview of the Pilots Organization identifiers arc in the Companies sub-domain.