PKIoverheid registered OIDs v3.3.1

Table of Contents

1 Introduction

This document contains a registration of all PKIoverheid (PKIo) specific Object Identifiers (OIDs), both active and deprecated.

OIDs enable the unique identification of “objects” is the broadest sense of the word. This can be a country, a laptop, person, title, requirement, or in case of PKIoverheid a certificate policy. OIDs are strings of numbers. They are allocated in a hierarchical manner, so that, for instance, the authority for “1.2.3” is the only one that can say what “1.2.3.4” means. They are used in a variety of protocols, of which PKIX is one.

This document contains OID descriptions using “ASN.1-like” syntax. This syntax is a hybrid of the 1988 and 1993 ASN.1 syntaxes. More information on this syntax can be found in RFC 5280.

2 PKIoverheid Top-Level identifiers arc

The code snippet below shows the PKIoverheid top-level identifiers arc in ASN.1 syntax.

-- PKIoverheid-specific top-level OID
id-pkio OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) nl(528) nederlandse-organisatie(1) nederlandse-overheid(1003) pki-voor-de-overheid(1) }

-- PKIoverheid identifier arc
id-pkio-defs OBJECT IDENTIFIER ::= { id-pkio defs(1) } -- Definitions
id-pkio-cp OBJECT IDENTIFIER ::= { id-pkio cp(2) } -- Certificate Policies
id-pkio-org OBJECT IDENTIFIER ::= { id-pkio org(3) } -- Organizations
id-pkio-pilots OBJECT IDENTIFIER ::= { id-pkio pilots(4) } -- DEPRECATED (Pilots)

The table below gives a more reader-friendly overview of the PKIoverheid top-level identifiers arc.

Subsequent chapters will describe these top-level identifiers in-depth.

3 PKIoverheid Definition identifiers arc

The code snippet below shows the PKIoverheid Definition identifiers arc in ASN.1 syntax.

-- PKIoverheid Definition identifiers arc
id-pkio-defs-pkigov OBJECT IDENTIFIER ::= { id-pkio-defs pkigov(1) } -- PKI for the Government

The table below gives a more reader-friendly overview of the PKIoverheid Definition identifiers arc.

4 PKIoverheid Certificate Policy identifiers arc

The code snippet below shows the domain-level PKIoverheid Certificate Policy identifiers arc in ASN.1 syntax.

-- PKIoverheid Certificate Policy domain-level identifiers arc
id-pkio-cp-pa OBJECT IDENTIFIER ::= { id-pkio-cp pa(1) } -- DEPRECATED (PA)
id-pkio-cp-g1gov OBJECT IDENTIFIER ::= { id-pkio-cp g1gov(2) } -- DEPRECATED (G1 Government)
id-pkio-cp-g1g2g3cit OBJECT IDENTIFIER ::= { id-pkio-cp g1g2g3cit(3) } -- G1+G2+G3 Citizen
id-pkio-cp-g1com OBJECT IDENTIFIER ::= { id-pkio-cp g1com(4) } -- DEPRECATED (G1 Companies)
id-pkio-cp-g2g3org OBJECT IDENTIFIER ::= { id-pkio-cp g2g3org(5) } -- G2+G3 Organizations
id-pkio-cp-g2g3ad OBJECT IDENTIFIER ::= { id-pkio-cp g2g3ad(6) } -- G2+G3 Autonomous Devices
id-pkio-cp-g1ev OBJECT IDENTIFIER ::= { id-pkio-cp g1ev(7) } -- Extended Validation
id-pkio-cp-g1priv OBJECT IDENTIFIER ::= { id-pkio-cp g1priv(8) } -- Private
id-pkio-cp-g2g3test OBJECT IDENTIFIER ::= { id-pkio-cp g2g3test(9) } -- G2+G3 Test
id-pkio-cp-g3smimeorgv OBJECT IDENTIFIER ::= { id-pkio-cp g3smimeorgv(10) } -- G3 S/MIME Organization Validated
id-pkio-cp-g3smimespov OBJECT IDENTIFIER ::= { id-pkio-cp g3smimespov(11) } -- G3 S/MIME Sponsor Validated
id-pkio-cp-g3smimeindv OBJECT IDENTIFIER ::= { id-pkio-cp g3smimeindv(12) } -- G3 S/MIME Individual Validated
id-pkio-cp-g4p OBJECT IDENTIFIER ::= { id-pkio-cp g4p(44) } -- G4 Production Hierarchies

These domain-level identifiers will be referenced in the Certificate Policies in each of the following domains or sub-domains.

4.1 PA sub-domain CP identifiers arc (DEPRECATED)

The code snippet below shows the PKIoverheid Certificate Policy identifiers arc in the Policy Authority (PA) sub-domain in ASN.1 syntax.

-- PKIoverheid Certificate Policy PA sub-domain identifiers arc
id-pkio-cp-pa-root OBJECT IDENTIFIER ::= { id-pkio-cp-pa root(1) } -- DEPRECATED
id-pkio-cp-pa-dom OBJECT IDENTIFIER ::= { id-pkio-cp-pa dom(2) } -- DEPRECATED
id-pkio-cp-pa-gov OBJECT IDENTIFIER ::= { id-pkio-cp-pa gov(3) } -- DEPRECATED
id-pkio-cp-pa-cit OBJECT IDENTIFIER ::= { id-pkio-cp-pa cit(4) } -- DEPRECATED
id-pkio-cp-pa-com OBJECT IDENTIFIER ::= { id-pkio-cp-pa com(5) } -- DEPRECATED
id-pkio-cp-pa-tsp OBJECT IDENTIFIER ::= { id-pkio-cp-pa tsp(6) } -- DEPRECATED
id-pkio-cp-pa-org OBJECT IDENTIFIER ::= { id-pkio-cp-pa org(7) } -- DEPRECATED
id-pkio-cp-pa-ad OBJECT IDENTIFIER ::= { id-pkio-cp-pa ad(8) } -- DEPRECATED
id-pkio-cp-pa-test OBJECT IDENTIFIER ::= { id-pkio-cp-pa test(9) } -- DEPRECATED

-- All PA sub-domains used any_policy (2.5.29.32.0) as certificate policy

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Certificate Policy identifiers arc in the PA sub-domain.

4.2 Government (Public G1) sub-domain PKIoverheid CP identifiers arc (DEPRECATED)

The code snippet below shows the PKIoverheid Certificate Policy identifiers arc in the Government (Public G1) sub-domain in ASN.1 syntax.

-- PKIoverheid Certificate Policy Government (G1) sub-domain identifiers arc
id-pkio-cp-g1gov-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov auth(1) } -- DEPRECATED
id-pkio-cp-g1gov-auth-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov-auth std(1) } -- DEPRECATED
id-pkio-cp-g1gov-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov nonrep(2) } -- DEPRECATED
id-pkio-cp-g1gov-nonrep-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov-nonrep std(1) } -- DEPRECATED
id-pkio-cp-g1gov-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov conf(3) } -- DEPRECATED
id-pkio-cp-g1gov-conf-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov-conf std(1) } -- DEPRECATED
id-pkio-cp-g1gov-svc-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov svc-auth(4) } -- DEPRECATED
id-pkio-cp-g1gov-svc-auth-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov-svc-auth std(1) } -- DEPRECATED
id-pkio-cp-g1gov-svc-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov svc-conf(5) } -- DEPRECATED
id-pkio-cp-g1gov-svc-conf-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov-svc-conf std(1) } -- DEPRECATED
id-pkio-cp-g1gov-server OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov server(6) } -- DEPRECATED
id-pkio-cp-g1gov-server-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1gov-server std(1) } -- DEPRECATED

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Certificate Policy identifiers arc in the Government (Public G1) sub-domain.

4.3 Citizen (Public G1+G2+G3) sub-domain CP identifiers arc

The code snippet below shows the PKIoverheid Certificate Policy identifiers arc in the Citizen (Public G1+G2+G3) sub-domain in ASN.1 syntax.

-- PKIoverheid Certificate Policy Citizen (Public G1+G2+G3) sub-domain identifiers arc
id-pkio-cp-g1g2g3cit-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g1g2g3cit auth(1) } -- Authenticity Certificate Policy
id-pkio-cp-g1g2g3cit-auth-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1g2g3cit-auth std(1) } -- DEPRECATED
id-pkio-cp-g1g2g3cit-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g1g2g3cit nonrep(2) } -- Non-repudiation Certificate Policy
id-pkio-cp-g1g2g3cit-nonrep-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1g2g3cit-nonrep std(1) } -- DEPRECATED
id-pkio-cp-g1g2g3cit-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g1g2g3cit conf(3) } -- Confidentiality Certificate Policy 
id-pkio-cp-g1g2g3cit-conf-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1g2g3cit-conf std(1) } -- DEPRECATED 
id-pkio-cp-g1g2g3cit-auth23 OBJECT IDENTIFIER ::= { id-pkio-cp-g3cit auth23(4) } --  Authenticity Certificate Policy (2023)
id-pkio-cp-g1g2g3cit-nonrep23 OBJECT IDENTIFIER ::= { id-pkio-cp-g3cit nonrep23(5) } -- Non-repudiation Certificate Policy (2023)
id-pkio-cp-g1g2g3cit-conf23 OBJECT IDENTIFIER ::= { id-pkio-cp-g3cit conf23(6) } -- Confidentiality Certificate Policy (2023)

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Certificate Policy identifiers arc in the Citizen (Public G1+G2+G3) sub-domain.

4.4 Companies (Public G1) sub-domain CP identifiers arc (DEPRECATED)

The code snippet below shows the PKIoverheid Certificate Policy identifiers arc in the Companies (Public G1) sub-domain in ASN.1 syntax.

-- PKIoverheid Certificate Policy Organizations (Public G1) sub-domain identifiers arc
id-pkio-cp-g1com-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g1com auth(1) } -- DEPRECATED
id-pkio-cp-g1com-auth-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1com-auth std(1) } -- DEPRECATED
id-pkio-cp-g1com-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g1com nonrep(2) } -- DEPRECATED
id-pkio-cp-g1com-nonrep-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1com-nonrep std(1) } -- DEPRECATED
id-pkio-cp-g1com-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g1com conf(3) } -- DEPRECATED
id-pkio-cp-g1com-conf-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1com-conf std(1) } -- DEPRECATED
id-pkio-cp-g1com-svc-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g1com svc-auth(4) } -- DEPRECATED
id-pkio-cp-g1com-svc-auth-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1com-svc-auth std(1) } -- DEPRECATED
id-pkio-cp-g1com-svc-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g1com svc-conf(5) } -- DEPRECATED
id-pkio-cp-g1com-svc-conf-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1com-svc-conf std(1) } -- DEPRECATED
id-pkio-cp-g1com-server OBJECT IDENTIFIER ::= { id-pkio-cp-g1com server(6) } -- DEPRECATED
id-pkio-cp-g1com-server-std OBJECT IDENTIFIER ::= { id-pkio-cp-g1com-server std(1) } -- DEPRECATED

The table below gives a more reader-friendly overview of the PKIoverheid Certificate Policy identifiers arc in the Companies (Public G1) sub-domain.

4.5 Organization (Public G2), Organization Person/Services (Public G3), and Server 2020 (EV G1) sub-domain CP identifiers arc

The code snippet below shows the PKIoverheid Certificate Policy identifiers arc in the Organization (Public G2), Organization Person/services (Public G3), and Server 2020 (EV G1) sub-domain in ASN.1 syntax.

-- PKIoverheid Certificate Policy Organization (Public G2), Organization Person/Services (Public G3), and Server 2020 (EV G1) sub-domain identifiers arc
id-pkio-cp-g2g3org-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org auth(1) } -- Authenticity Certificate Policy (legacy)
id-pkio-cp-g2g3org-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org nonrep(2) } -- Non-repudiation Certificate Policy (legacy)
id-pkio-cp-g2g3org-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org conf(3) } -- Confidentiality Certificate Policy (legacy)
id-pkio-cp-g2g3org-svc-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org svc-auth(4) } -- Services Authenticity Certificate Policy (legacy)
id-pkio-cp-g2g3org-svc-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org svc-conf(5) } -- Services Confidentiality Certificate Policy (legacy)
id-pkio-cp-g2g3org-server OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org server(6) } -- DEPRECATED
id-pkio-cp-g2g3org-svc-seal OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org svc-seal(7) } -- Services Seal Certificate Policy (legacy)
id-pkio-cp-g2g3org-ocsp OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org ocsp(8) } -- DEPRECATED
id-pkio-cp-g2g3org-server2020 OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org server2020(9) } -- DEPRECATED
id-pkio-cp-g2g3org-auth23 OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org auth23(10) } -- Authenticity Certificate Policy (2023)
id-pkio-cp-g2g3org-nonrep23 OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org nonrep23(11) } -- Non-repudiation Certificate Policy (2023)
id-pkio-cp-g2g3org-conf23 OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org conf23(12) } -- Confidentiality Certificate Policy (2023)
id-pkio-cp-g2g3org-svc-auth23 OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org svc-auth23(13) } -- Services Authenticity Certificate Policy (2023)
id-pkio-cp-g2g3org-svc-conf23 OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org svc-conf23(14) } -- Services Confidentiality Certificate Policy (2023)
id-pkio-cp-g2g3org-svc-seal23 OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3org svc-seal23(15) } -- Services Seal Certificate Policy (2023)

The table below gives a more reader-friendly overview of the PKIoverheid Certificate Policy identifiers arc in the Organization (Public G2), Organization Person/services (Public G3), and Server 2020 (EV G1) sub-domain.

4.6 Autonomous Devices (Public G2+G3) sub-domain CP identifiers arc

The code snippet below shows the PKIoverheid Certificate Policy identifiers arc in the Autonomous Devices (Public G2+G3) sub-domain in ASN.1 syntax.

-- PKIoverheid Certificate Policy Autonomous Devices (Public G2+G3) sub-domain identifiers arc
id-pkio-cp-g2g3ad-sysauth OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3ad sysauth(1) } -- Systems Authenticity Certificate Policy
id-pkio-cp-g2g3ad-sysconf OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3ad sysconf(2) } -- Systems Confidentiality Certificate Policy
id-pkio-cp-g2g3ad-syscombi OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3ad syscombi(3) } -- Systems Combination Certificate Policy

The table below gives a more reader-friendly overview of the PKIoverheid Certificate Policy identifiers arc in the Autonomous Devices (Public G2+G3) sub-domain.

4.7 Extended Validation (EV G1) domain CP identifiers arc

The code snippet below shows the PKIoverheid Certificate Policy identifiers arc in the Extended Validation (EV G1) sub-domain in ASN.1 syntax.

-- PKIoverheid Certificate Policy Extended Validation (EV G1) domain identifiers arc
-- The Extended Validation (EV) domain has no subdomain identifiers;
-- the certificate policy identifier is the same as the domain identifier:
id-pkio-cp-g1ev OBJECT IDENTIFIER ::= { id-pkio-cp g1ev(7) } -- DEPRECATED

The table below gives a more reader-friendly overview of the PKIoverheid Certificate Policy identifiers arc in the Extended Validation (EV G1) domain.

4.8 Private Root (Private G1) domain CP identifiers arc

The code snippet below shows the PKIoverheid Certificate Policy identifiers arc in the Private Root (Private G1) domain in ASN.1 syntax.

-- PKIoverheid Certificate Private Root (Private G1) sub-domain identifiers arc
id-pkio-cp-g1priv-pers-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g1priv pers-auth(1) } -- Person Authenticity Certificate Policy
id-pkio-cp-g1priv-pers-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g1priv pers-nonrep(2) } -- Person Non-repudiation Certificate Policy
id-pkio-cp-g1priv-pers-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g1priv pers-conf(3) } -- Person Confidentiality Certificate Policy
id-pkio-cp-g1priv-svc-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g1priv svc-auth(4) } -- Services Authenticity Certificate Policy
id-pkio-cp-g1priv-svc-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g1priv svc-conf(5) } -- Services Confidentiality Certificate Policy
id-pkio-cp-g1priv-server OBJECT IDENTIFIER ::= { id-pkio-cp-g1priv server(6) } -- Server Authentication Certificate Policy

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Certificate Policy identifiers arc in the Private Root (Private G1) domain.

4.9 Test (Trial G2+G3) domain CP identifiers arc

The code snippet below shows the PKIoverheid Certificate Policy identifiers arc in the Test (Trial G2+G3) domain in ASN.1 syntax.

NOTE: The Test sub-domain is sometimes referred to as Trial domain.

-- PKIoverheid Certificate Test (Trial G2+G3) domain identifiers arc
id-pkio-cp-g2g3test-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test auth(1) } -- Person Authenticity Certificate Policy
id-pkio-cp-g2g3test-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test nonrep(2) } -- Person Non-repudiation Certificate Policy
id-pkio-cp-g2g3test-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test conf(3) } -- Person Confidentiality Certificate Policy
id-pkio-cp-g2g3test-svc-auth OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test svc-auth(4) } -- Services Authenticity Certificate Policy
id-pkio-cp-g2g3test-svc-conf OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test svc-conf(5) } -- Services Confidentiality Certificate Policy
id-pkio-cp-g2g3test-server OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test server(6) } -- Server Authentication Certificate Policy
id-pkio-cp-g2g3test-sysauth OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test sysauth(7) } -- Systems Authenticity Certificate Policy
id-pkio-cp-g2g3test-sysconf OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test sysconf(8) } -- Systems Confidentiality Certificate Policy
id-pkio-cp-g2g3test-syscombi OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test syscombi(9) } -- Systems Combination Certificate Policy
id-pkio-cp-g2g3test-svc-seal OBJECT IDENTIFIER ::= { id-pkio-cp-g2g3test svc-seal(10) } -- Services Seal Certificate Policy

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Certificate Policy identifiers arc in the Test (Trial G2+G3) domain.

4.10 S/MIME (G3) Organization Validated domain CP identifiers arc

The code snippet below shows the PKIoverheid Certificate Policy identifiers arc in the S/MIME (G3) Organization Validated domain in ASN.1 syntax.

-- PKIoverheid Certificate S/MIME (G3) Organization Validated domain identifiers arc
id-pkio-cp-g3smimeorgv-strictSO OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeorgv strictSO(7) } -- Signing Only certificates in the S/MIME BR Strict profile.
id-pkio-cp-g3smimeorgv-strictKM OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeorgv strictKM(8) } -- Key Management certificates in the S/MIME BR Strict profile.
id-pkio-cp-g3smimeorgv-strictDU OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeorgv strictDU(9) } -- Dual Use certificates in the S/MIME BR Strict profile and OCSP Signing.

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Certificate Policy identifiers arc in the S/MIME (G3) Organization Validated domain.

4.11 S/MIME (G3) Sponsor Validated domain CP identifiers arc

The code snippet below shows the PKIoverheid Certificate Policy identifiers arc in the S/MIME (G3) Sponsor Validated domain in ASN.1 syntax.

-- PKIoverheid Certificate S/MIME (G3) Sponsor Validated domain identifiers arc
id-pkio-cp-g3smimespov-strictDU OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimespov strictDU(9) } -- Dual Use certificates in the S/MIME BR Strict profile.

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Certificate Policy identifiers arc in the S/MIME (G3) Sponsor Validated domain.

4.12 S/MIME (G3) Individual Validated domain CP identifiers arc

The code snippet below shows the PKIoverheid Certificate Policy identifiers arc in the S/MIME (G3) Individual Validated domain in ASN.1 syntax.

-- PKIoverheid Certificate S/MIME (G3) Individual Validated domain identifiers arc
id-pkio-cp-g3smimeindv-strictDU OBJECT IDENTIFIER ::= { id-pkio-cp-g3smimeindv strictDU(9) } -- Dual Use certificates in the S/MIME BR Strict profile.

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Certificate Policy identifiers arc in the S/MIME (G3) Individual Validated domain.

4.13 G4 Architecture CP identifiers arc

The code snippet below shows the G4 root-level PKIoverheid Certificate Policy identifiers arc in ASN.1 syntax.

-- PKIoverheid Certificate Policy G4 root-level identifiers arc
id-pkio-cp-g4p-gen10PubSM  OBJECT IDENTIFIER ::= { id-pkio-cp-g4p gen10PubSM(12) } -- Generic CA using cipher 10 - Publicly-trusted S/MIME root
id-pkio-cp-g4p-gen10EUTLSig OBJECT IDENTIFIER ::= { id-pkio-cp-g4p gen10EUTLSig(14) } -- Generic CA using cipher 10 - EUTL Document Signing root
id-pkio-cp-g4p-gen10PrvTLS OBJECT IDENTIFIER ::= { id-pkio-cp-g4p gen10PrvTLS(15) } -- Generic CA using cipher 10 - Private TLS root
id-pkio-cp-g4p-gen10PrvOth OBJECT IDENTIFIER ::= { id-pkio-cp-g4p gen10PrvOth(16) } -- Generic CA using cipher 10 - Private Other root
id-pkio-cp-g4p-def10PrvOth OBJECT IDENTIFIER ::= { id-pkio-cp-g4p def10PrvOth(36) } -- Defensie CA using cipher 10 - Private Other root
id-pkio-cp-g4p-cibg10PrvOth OBJECT IDENTIFIER ::= { id-pkio-cp-g4p cibg10PrvOth(46) } -- CIBG CA using cipher 10 - Private Other root

These G4 root-level identifiers will be referenced in the Certificate Policies in each of the following domains or sub-domains.

4.13.1 G4 Generic CA using cipher 10 - Publicly-trusted S/MIME root CP identifiers arc

The code snippet below shows the PKIoverheid G4 Certificate Policy identifiers in the “Generic CA using cipher 10 - Publicly-trusted S/MIME root” arc in ASN.1 syntax.

-- PKIoverheid Certificate "Generic CA using cipher 10 - Publicly-trusted S/MIME root" arc
id-pkio-cp-g4p-gen10PubSM-npInd OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM npInd(11) } -- Natural Person Individual Validation
id-pkio-cp-g4p-gen10PubSM-npInd-sso OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM-npInd sso(37) } -- Natural Person Individual Validation Strict Signing-only 
id-pkio-cp-g4p-gen10PubSM-npInd-skm OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM-npInd skm(38) } -- Natural Person Individual Validation Strict Key Management
id-pkio-cp-g4p-gen10PubSM-npInd-sdu OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM-npInd sdu(39) } -- Natural Person Individual Validation Strict Dual Use
id-pkio-cp-g4p-gen10PubSM-npSpon OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM npSpon(13) } -- Natural Person Sponsor Validation
id-pkio-cp-g4p-gen10PubSM-npSpon-sso OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM-npSpon sso(37) } -- Natural Person Sponsor Validation Strict Signing-only 
id-pkio-cp-g4p-gen10PubSM-npSpon-skm OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM-npSpon skm(38) } -- Natural Person Sponsor Validation Strict Key Management
id-pkio-cp-g4p-gen10PubSM-npSpon-sdu OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM-npSpon sdu(39) } -- Natural Person Sponsor Validation Strict Dual Use
id-pkio-cp-g4p-gen10PubSM-npInt OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM npInt(18) } -- Natural Person ICA-only
id-pkio-cp-g4p-gen10PubSM-npInt-ocsp OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM-npInt ocsp(19) } -- Natural Person ICA-only Delegated OCSP Responder
id-pkio-cp-g4p-gen10PubSM-npTSP OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM npTSP(19) } -- Natural Person TSP-only
id-pkio-cp-g4p-gen10PubSM-npTSP-ocsp OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM-npTSP ocsp(10) } -- Natural Person TSP-only Delegated OCSP Responder
id-pkio-cp-g4p-gen10PubSM-lpOrg OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM lpOrg(25) } -- Legal Person Organization Validation
id-pkio-cp-g4p-gen10PubSM-lpOrg-sso OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM-lpOrg sso(37) } -- Legal Person Organization Validation Strict Signing-only 
id-pkio-cp-g4p-gen10PubSM-lpOrg-skm OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM-lpOrg skm(38) } -- Legal Person Organization Validation Strict Key Management
id-pkio-cp-g4p-gen10PubSM-lpOrg-sdu OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM-lpOrg sdu(39) } -- Legal Person Organization Validation Strict Dual Use
id-pkio-cp-g4p-gen10PubSM-lpInt OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM lpInt(28) } -- Legal Person ICA-only
id-pkio-cp-g4p-gen10PubSM-lpInt-ocsp OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM-lpInt ocsp(10) } -- Legal Person ICA-only Delegated OCSP Responder
id-pkio-cp-g4p-gen10PubSM-lpTSP OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM lpTSP(29) } -- Legal Person TSP-only
id-pkio-cp-g4p-gen10PubSM-lpTSP-ocsp OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PubSM-lpTSP ocsp(10) } -- Legal Person TSP-only Delegated OCSP Responder

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Certificate Policy identifiers in the “Generic CA using cipher 10 - Publicly-trusted S/MIME root” arc.

4.13.2 G4 Generic CA using cipher 10 - EUTL Document Signing root CP identifiers arc

The code snippet below shows the PKIoverheid G4 Certificate Policy identifiers in the “Generic CA using cipher 10 - EUTL Document Signing root” arc in ASN.1 syntax.

-- PKIoverheid Certificate "Generic CA using cipher 10 - EUTL Document Signing root" arc
id-pkio-cp-g4p-gen10EUTLSig-npInd OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10EUTLSig npInd(11) } -- Natural Person Individual Validation
id-pkio-cp-g4p-gen10EUTLSig-npInd-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10EUTLSig-npInd nonrep(5) } -- Natural Person Individual Validation Non-repudiation (eSignature)
id-pkio-cp-g4p-gen10EUTLSig-npRegP OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10EUTLSig npRegP(12) } -- Natural Person Regulated Profession Validation
id-pkio-cp-g4p-gen10EUTLSig-npRegP-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10EUTLSig-npRegP nonrep(5) } -- Natural Person Regulated Profession Validation Non-repudiation (eSignature)
id-pkio-cp-g4p-gen10EUTLSig-npSpon OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10EUTLSig npSpon(13) } -- Natural Person Sponsor Validation
id-pkio-cp-g4p-gen10EUTLSig-npSpon-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10EUTLSig-npSpon nonrep(5) } -- Natural Person Sponsor Validation Non-repudiation (eSignature)
id-pkio-cp-g4p-gen10EUTLSig-npRPSp OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10EUTLSig npRPSp(14) } -- Natural Person Regulated Profession with Sponsor Validation
id-pkio-cp-g4p-gen10EUTLSig-npRPSp-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10EUTLSig-npRPSp nonrep(5) } -- Natural Person Regulated Profession with Sponsor Validation Non-repudiation (eSignature)
id-pkio-cp-g4p-gen10EUTLSig-npInt OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10EUTLSig npInt(18) } -- Natural Person ICA-only
id-pkio-cp-g4p-gen10EUTLSig-npInt-ocsp OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10EUTLSig-npInt ocsp(10) } -- Natural Person ICA-only Delegated OCSP Responder
id-pkio-cp-g4p-gen10EUTLSig-npTSP OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10EUTLSig npTSP(19) } -- Natural Person TSP-only
id-pkio-cp-g4p-gen10EUTLSig-npTSP-ocsp OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10EUTLSig-npTSP ocsp(10) } -- Natural Person TSP-only Delegated OCSP Responder
id-pkio-cp-g4p-gen10EUTLSig-lpOrg OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10EUTLSig lpOrg(25) } -- Legal Person Organization Validation
id-pkio-cp-g4p-gen10EUTLSig-lpOrg-nonrep OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10EUTLSig-lpOrg nonrep(5) } -- Legal Person Organization Validation Non-repudiation (eSeal)
id-pkio-cp-g4p-gen10EUTLSig-lpInt OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10EUTLSig lpInt(28) } -- Legal Person ICA-only
id-pkio-cp-g4p-gen10EUTLSig-lpInt-ocsp OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10EUTLSig-lpInt ocsp(10) } -- Legal Person ICA-only Delegated OCSP Responder
id-pkio-cp-g4p-gen10EUTLSig-lpTSP OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10EUTLSig lpTSP(29) } -- Legal Person TSP-only
id-pkio-cp-g4p-gen10EUTLSig-lpTSP-ocsp OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10EUTLSig-lpTSP ocsp(10) } -- Legal Person TSP-only Delegated OCSP Responder

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Certificate Policy identifiers in the “Generic CA using cipher 10 - EUTL Document Signing root” arc.

4.13.3 G4 Generic CA using cipher 10 - Private TLS root CP identifiers arc

The code snippet below shows the PKIoverheid G4 Certificate Policy identifiers in the “Generic CA using cipher 10 - Private TLS root” arc in ASN.1 syntax.

-- PKIoverheid Certificate "Generic CA using cipher 10 - Private TLS root" arc
id-pkio-cp-g4p-gen10PrvTLS-sysOrg OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvTLS sysOrg(35) } -- System Organization Validation
id-pkio-cp-g4p-gen10PrvTLS-sysOrg-tls OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvTLS-sysOrg tls(11) } -- System Organization Validation Server
id-pkio-cp-g4p-gen10PrvTLS-sysInt OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvTLS sysInt(38) } -- System ICA-only
id-pkio-cp-g4p-gen10PrvTLS-sysInt-ocsp OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvTLS-sysInt ocsp(10) } -- System ICA-only Delegated OCSP Responder
id-pkio-cp-g4p-gen10PrvTLS-sysTSP OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvTLS sysTSP(39) } -- System TSP-only
id-pkio-cp-g4p-gen10PrvTLS-sysTSP-ocsp OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvTLS-sysTSP ocsp(10) } -- System TSP-only Delegated OCSP Responder

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Certificate Policy identifiers in the “Generic CA using cipher 10 - Private TLS root” arc.

4.13.4 G4 Generic CA using cipher 10 - Private Other root CP identifiers arc

The code snippet below shows the PKIoverheid G4 Certificate Policy identifiers in the “Generic CA using cipher 10 - Private Other root” arc in ASN.1 syntax.

-- PKIoverheid Certificate "Generic CA using cipher 10 - Private Other root" arc
id-pkio-cp-g4p-gen10PrvOth-npInd` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth npInd(11) } -- Natural Person Individual Validation
id-pkio-cp-g4p-gen10PrvOth-npInd-authy` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-npInd authy(4) } -- Natural Person Individual Validation Authenticity
id-pkio-cp-g4p-gen10PrvOth-npInd-conf` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-npInd conf(7) } -- Natural Person Individual Validation Confidentiality
id-pkio-cp-g4p-gen10PrvOth-npInd-authon` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-npInd authon(8) } -- Natural Person Individual Validation Authentication
id-pkio-cp-g4p-gen10PrvOth-npRegP` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth npRegP(12) } -- Natural Person Regulated Profession Validation
id-pkio-cp-g4p-gen10PrvOth-npRegP-authy` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-npRegP authy(4) } -- Natural Person Regulated Profession Validation Authenticity
id-pkio-cp-g4p-gen10PrvOth-npRegP-conf` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-npRegP conf(7) } -- Natural Person Regulated Profession Validation Confidentiality
id-pkio-cp-g4p-gen10PrvOth-npRegP-authon` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-npRegP authon(8) } -- Natural Person Regulated Profession Validation Authentication
id-pkio-cp-g4p-gen10PrvOth-npSpon` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth npSpon(13) } -- Natural Person Sponsor Validation
id-pkio-cp-g4p-gen10PrvOth-npSpon-authy` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-npSpon authy(4) } -- Natural Person Sponsor Validation Authenticity
id-pkio-cp-g4p-gen10PrvOth-npSpon-conf` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-npSpon conf(7) } -- Natural Person Sponsor Validation Confidentiality
id-pkio-cp-g4p-gen10PrvOth-npSpon-authon` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-npSpon authon(8) } -- Natural Person Sponsor Validation Authentication
id-pkio-cp-g4p-gen10PrvOth-npRPSp` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth npRPSp(14) } -- Natural Person Regulated Profession with Sponsor Validation
id-pkio-cp-g4p-gen10PrvOth-npRPSp-authy` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-npRPSp authy(4) } -- Natural Person Regulated Profession with Sponsor Validation Authenticity
id-pkio-cp-g4p-gen10PrvOth-npRPSp-conf` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-npRPSp conf(7) } -- Natural Person Regulated Profession with Sponsor Validation Confidentiality
id-pkio-cp-g4p-gen10PrvOth-npRPSp-authon` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-npRPSp authon(8) } -- Natural Person Regulated Profession with Sponsor Validation Authentication
id-pkio-cp-g4p-gen10PrvOth-npInt` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth npInt(18) } -- Natural Person ICA-only
id-pkio-cp-g4p-gen10PrvOth-npInt-ocsp` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-npInt ocsp(10) } -- Natural Person ICA-only Delegated OCSP Responder
id-pkio-cp-g4p-gen10PrvOth-npTSP` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth npTSP(19) } -- Natural Person TSP-only
id-pkio-cp-g4p-gen10PrvOth-npTSP-ocsp` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-npTSP ocsp(10) } -- Natural Person TSP-only Delegated OCSP Responder
id-pkio-cp-g4p-gen10PrvOth-lpOrg` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth lpOrg(25) } -- Legal Person Organization Validation
id-pkio-cp-g4p-gen10PrvOth-lpOrg-authy` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-lpOrg authy(4) } -- Legal Person Organization Validation Authenticity
id-pkio-cp-g4p-gen10PrvOth-lpOrg-conf` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-lpOrg conf(7) } -- Legal Person Organization Validation Confidentiality
id-pkio-cp-g4p-gen10PrvOth-lpOrg-authon` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-lpOrg authon(8) } -- Legal Person Organization Validation Authentication
id-pkio-cp-g4p-gen10PrvOth-lpInt` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth lpInt(28) } -- Legal Person ICA-only
id-pkio-cp-g4p-gen10PrvOth-lpInt-ocsp` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-lpInt ocsp(10) } -- Legal Person ICA-only Delegated OCSP Responder
id-pkio-cp-g4p-gen10PrvOth-lpTSP` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth lpTSP(29) } -- Legal Person TSP-only
id-pkio-cp-g4p-gen10PrvOth-lpTSP-ocsp` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-gen10PrvOth-lpTSP ocsp(10) } -- Legal Person TSP-only Delegated OCSP Responder

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Certificate Policy identifiers “Generic CA using cipher 10 - Private Other root”.

4.13.5 G4 Defensie CA using cipher 10 - Private Other root CP identifiers arc

The code snippet below shows the PKIoverheid G4 Certificate Policy identifiers in the “Defensie CA using cipher 10 - Private Other root” arc in ASN.1 syntax.

-- PKIoverheid Certificate "Defensie CA using cipher 10 - Private Other root" arc
id-pkio-cp-g4p-def10PrvOth-npSpon` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-def10PrvOth npSpon(13) } -- Natural Person Sponsor Validation
id-pkio-cp-g4p-def10PrvOth-npSpon-authy` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-def10PrvOth-npSpon authy(4) } -- Natural Person Sponsor Validation Authenticity
id-pkio-cp-g4p-def10PrvOth-npSpon-conf` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-def10PrvOth-npSpon conf(7) } -- Natural Person Sponsor Validation Confidentiality
id-pkio-cp-g4p-def10PrvOth-npSpon-authon` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-def10PrvOth-npSpon authon(8) } -- Natural Person Sponsor Validation Authentication
id-pkio-cp-g4p-def10PrvOth-npInt` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-def10PrvOth npInt(18) } -- Natural Person ICA-only
id-pkio-cp-g4p-def10PrvOth-npInt-ocsp` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-def10PrvOth-npInt ocsp(10) } -- Natural Person ICA-only Delegated OCSP Responder
id-pkio-cp-g4p-def10PrvOth-npTSP` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-def10PrvOth npTSP(19) } -- Natural Person TSP-only
id-pkio-cp-g4p-def10PrvOth-npTSP-ocsp` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-def10PrvOth-npTSP ocsp(10) } -- Natural Person TSP-only Delegated OCSP Responder

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Certificate Policy identifiers in the “Defensie CA using cipher 10 - Private Other root” arc.

4.13.6 G4 CIBG CA using cipher 10 - Private Other root CP identifiers arc

The code snippet below shows the PKIoverheid G4 Certificate Policy identifiers in the “CIBG CA using cipher 10 - Private Other root” arc in ASN.1 syntax.

-- PKIoverheid Certificate "CIBG CA using cipher 10 - Private Other root" arc
id-pkio-cp-g4p-cibg10PrvOth-npInd` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth npInd(11) } -- Natural Person Individual Validation
id-pkio-cp-g4p-cibg10PrvOth-npInd-authy` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-npInd authy(4) } -- Natural Person Individual Validation Authenticity
id-pkio-cp-g4p-cibg10PrvOth-npInd-conf` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-npInd conf(7) } -- Natural Person Individual Validation Confidentiality
id-pkio-cp-g4p-cibg10PrvOth-npInd-authon` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-npInd authon(8) } -- Natural Person Individual Validation Authentication
id-pkio-cp-g4p-cibg10PrvOth-npRegP` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth npRegP(12) } -- Natural Person Regulated Profession Validation
id-pkio-cp-g4p-cibg10PrvOth-npRegP-authy` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-npRegP authy(4) } -- Natural Person Regulated Profession Validation Authenticity
id-pkio-cp-g4p-cibg10PrvOth-npRegP-conf` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-npRegP conf(7) } -- Natural Person Regulated Profession Validation Confidentiality
id-pkio-cp-g4p-cibg10PrvOth-npRegP-authon` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-npRegP authon(8) } -- Natural Person Regulated Profession Validation Authentication
id-pkio-cp-g4p-cibg10PrvOth-npSpon` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth npSpon(13) } -- Natural Person Sponsor Validation
id-pkio-cp-g4p-cibg10PrvOth-npSpon-authy` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-npSpon authy(4) } -- Natural Person Sponsor Validation Authenticity
id-pkio-cp-g4p-cibg10PrvOth-npSpon-conf` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-npSpon conf(7) } -- Natural Person Sponsor Validation Confidentiality
id-pkio-cp-g4p-cibg10PrvOth-npSpon-authon` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-npSpon authon(8) } -- Natural Person Sponsor Validation Authentication
id-pkio-cp-g4p-cibg10PrvOth-npRPSp` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth npRPSp(14) } -- Natural Person Regulated Profession with Sponsor Validation
id-pkio-cp-g4p-cibg10PrvOth-npRPSp-authy` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-npRPSp authy(4) } -- Natural Person Regulated Profession with Sponsor Validation Authenticity
id-pkio-cp-g4p-cibg10PrvOth-npRPSp-conf` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-npRPSp conf(7) } -- Natural Person Regulated Profession with Sponsor Validation Confidentiality
id-pkio-cp-g4p-cibg10PrvOth-npRPSp-authon` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-npRPSp authon(8) } -- Natural Person Regulated Profession with Sponsor Validation Authentication
id-pkio-cp-g4p-cibg10PrvOth-npInt` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth npInt(18) } -- Natural Person ICA-only
id-pkio-cp-g4p-cibg10PrvOth-npInt-ocsp` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-npInt ocsp(10) } -- Natural Person ICA-only Delegated OCSP Responder
id-pkio-cp-g4p-cibg10PrvOth-npTSP` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth npTSP(19) } -- Natural Person TSP-only
id-pkio-cp-g4p-cibg10PrvOth-npTSP-ocsp` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-npTSP ocsp(10) } -- Natural Person TSP-only Delegated OCSP Responder
id-pkio-cp-g4p-cibg10PrvOth-lpOrg` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth lpOrg(25) } -- Legal Person Organization Validation
id-pkio-cp-g4p-cibg10PrvOth-lpOrg-authy` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-lpOrg authy(4) } -- Legal Person Organization Validation Authenticity
id-pkio-cp-g4p-cibg10PrvOth-lpOrg-conf` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-lpOrg conf(7) } -- Legal Person Organization Validation Confidentiality
id-pkio-cp-g4p-cibg10PrvOth-lpOrg-authon` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-lpOrg authon(8) } -- Legal Person Organization Validation Authentication
id-pkio-cp-g4p-cibg10PrvOth-lpInt` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth lpInt(28) } -- Legal Person ICA-only
id-pkio-cp-g4p-cibg10PrvOth-lpInt-ocsp` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-lpInt ocsp(10) } -- Legal Person ICA-only Delegated OCSP Responder
id-pkio-cp-g4p-cibg10PrvOth-lpTSP` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth lpTSP(29) } -- Legal Person TSP-only
id-pkio-cp-g4p-cibg10PrvOth-lpTSP-ocsp` OBJECT IDENTIFIER ::= { id-pkio-cp-g4p-cibg10PrvOth-lpTSP ocsp(10) } -- Legal Person TSP-only Delegated OCSP Responder

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Certificate Policy identifiers in the “CIBG CA using cipher 10 - Private Other root” arc.

5. PKIoverheid Organization identifiers arc

The code snippet below shows the domain-level PKIoverheid Organization identifiers arc in ASN.1 syntax.

-- PKIoverheid Certificate Policy domain-level identifiers arc
id-pkio-org-pa OBJECT IDENTIFIER ::= { id-pkio-org pa(1) } -- PA
id-pkio-org-g1gov OBJECT IDENTIFIER ::= { id-pkio-org g1gov(2) } -- DEPRECATED (G1 Government)
id-pkio-org-g1g2g3cit OBJECT IDENTIFIER ::= { id-pkio-org g1g2g3cit(3) } -- G1+G2+G3 Citizen
id-pkio-org-g1com OBJECT IDENTIFIER ::= { id-pkio-org g1com(4) } -- DEPRECATED (G1 Companies)
id-pkio-org-g2g3org OBJECT IDENTIFIER ::= { id-pkio-org g2g3org(5) } -- G2+G3 Organizations
id-pkio-org-g2g3ad OBJECT IDENTIFIER ::= { id-pkio-org g2g3ad(6) } -- G2+G3 Autonomous Devices
id-pkio-org-g2g3ev OBJECT IDENTIFIER ::= { id-pkio-org g2g3ev(7) } -- G2+G3 Extended Validation
id-pkio-org-g1priv OBJECT IDENTIFIER ::= { id-pkio-org g1priv(8) } -- G1 Private
id-pkio-org-g2g3test OBJECT IDENTIFIER ::= { id-pkio-org g2g3test(9) } -- G2+G3 Test
id-pkio-org-g3smimeorgv OBJECT IDENTIFIER ::= { id-pkio-org g3smimeorgv(10) } -- G3 S/MIME Organization Validated
id-pkio-org-g3smimespov OBJECT IDENTIFIER ::= { id-pkio-org g3smimespov(11) } -- G3 S/MIME Sponsor Validated
id-pkio-org-g3smimeindv OBJECT IDENTIFIER ::= { id-pkio-org g3smimeindv(12) } -- G3 S/MIME Individual Validated

These domain-level identifiers will be referenced in the Certificate Policies in each of the following sub-domains.

5.1 PA sub-domain Organization identifiers arc

The code snippet below shows the PKIoverheid Certificate Policy identifiers arc in the Policy Authority (PA) sub-domain in ASN.1 syntax.

-- PKIoverheid Certificate Policy PA sub-domain identifiers arc

id-pkio-org-pa-tsp OBJECT IDENTIFIER ::= { id-pkio-org-pa tsp(1) } -- Trust Service Provider

The table below gives a more reader-friendly overview of the PKIoverheid Organization identifiers arc in the PA sub-domain.

5.2 Government (Public G1) sub-domain PKIoverheid Organization identifiers arc (DEPRECATED)

The code snippet below shows the PKIoverheid Organization identifiers arc in the Government (Public G1) sub-domain in ASN.1 syntax.

-- PKIoverheid Organization Government (Public G1) sub-domain identifiers arc
id-pkio-org-g1gov-nova OBJECT IDENTIFIER ::= { id-pkio-org-g1gov nova(1) } -- DEPRECATED
id-pkio-org-g1gov-nova-auth OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-nova auth(1) } -- DEPRECATED
id-pkio-org-g1gov-nova-nonrep OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-nova nonrep(2) } -- DEPRECATED
id-pkio-org-g1gov-nova-conf OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-nova conf(3) } -- DEPRECATED
id-pkio-org-g1gov-pink OBJECT IDENTIFIER ::= { id-pkio-org-g1gov pink(2) } -- DEPRECATED
id-pkio-org-g1gov-pink-auth OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-pink auth(1) } -- DEPRECATED
id-pkio-org-g1gov-pink-nonrep OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-pink nonrep(2) } -- DEPRECATED
id-pkio-org-g1gov-pink-conf OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-pink conf(3) } -- DEPRECATED
id-pkio-org-g1gov-pink-svc OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-pink svc(4) } -- DEPRECATED
id-pkio-org-g1gov-pink-getronics OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-pink getronics(5) } -- DEPRECATED
id-pkio-org-g1gov-diginotar OBJECT IDENTIFIER ::= { id-pkio-org-g1gov diginotar(3) } -- DEPRECATED
id-pkio-org-g1gov-diginotar-ca-pkio OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-diginotar pkio-ca(1) } -- DEPRECATED
id-pkio-org-g1gov-uzireg OBJECT IDENTIFIER ::= { id-pkio-org-g1gov uzireg(4) } -- DEPRECATED
id-pkio-org-g1gov-uzireg-tsp OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-uzireg tsp(1) } -- DEPRECATED
id-pkio-org-g1gov-uzireg-tsp-zorgverlener OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-uzireg-tsp zorgverlener(1) } -- DEPRECATED
id-pkio-org-g1gov-uzireg-tsp-mdwnaam OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-uzireg-tsp medewerker-op-naam(2) } -- DEPRECATED
id-pkio-org-g1gov-uzireg-tsp-mdwnietnaam OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-uzireg-tsp medewerker-niet-op-naam(3) } -- DEPRECATED
id-pkio-org-g1gov-uzireg-tsp-svc OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-uzireg-tsp services(4) } -- DEPRECATED
id-pkio-org-g1gov-uzireg-tsp-zovarserver OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-uzireg-tsp zovarserver(5) } - DEPRECATED
id-pkio-org-g1gov-defence OBJECT IDENTIFIER ::= { id-pkio-org-g1gov defence(6) } -- DEPRECATED
id-pkio-org-g1gov-defence-tsp OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-defence tsp(1) } -- DEPRECATED
id-pkio-org-g1gov-defence-defensiepas OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-defence defensiepas(2) } -- DEPRECATED
id-pkio-org-g1gov-kpn OBJECT IDENTIFIER ::= { id-pkio-org-g1gov kpn(7) } -- DEPRECATED
id-pkio-org-g1gov-kpn-tsp OBJECT IDENTIFIER ::= { id-pkio-org-g1gov-kpn tsp(1) } -- DEPRECATED

The table below gives a more reader-friendly overview of the end-nodes in the PKIoverheid Organizations identifiers arc in the Government (Public G1) sub-domain.

5.3 Citizen (Public G1+G2+G3) sub-domain PKIoverheid Organization identifiers arc

The code snippet below shows the PKIoverheid Organization identifiers arc in the Citizen (Public G1+G2+G3) sub-domain in ASN.1 syntax.

-- PKIoverheid Organization Citizen (Public G1+G2+G3) sub-domain identifiers arc
id-pkio-org-g1g2g3cit-esg OBJECT IDENTIFIER ::= { id-pkio-org-g1g2g3cit esg(1) } -- DEPRECATED
id-pkio-org-g1g2g3cit-esg-pers OBJECT IDENTIFIER ::= { id-pkio-org-g1g2g3cit-esg pers(1) } -- DEPRECATED
id-pkio-org-g1g2g3cit-ddy OBJECT IDENTIFIER ::= { id-pkio-org-g1g2g3cit ddy(1) } -- Digidentity Citizen Hierarchy CA
id-pkio-org-g1g2g3cit-ddy-cit OBJECT IDENTIFIER ::= { id-pkio-org-g1g2g3cit-ddy cit(1) } -- Digidentity Citizen Hierarchy CA for Citizen certificates 
id-pkio-org-g1g2g3cit-ddy-sscd OBJECT IDENTIFIER ::= { id-pkio-org-g1g2g3cit-ddy sscd(2) } -- Digidentity Citizen Hierarchy CA for SSCD certificates
id-pkio-org-g1g2g3cit-qv OBJECT IDENTIFIER ::= { id-pkio-org-g1g2g3cit qv(3) } -- QuoVadis Citizen Hierarchy CA
id-pkio-org-g1g2g3cit-qv-cit OBJECT IDENTIFIER ::= { id-pkio-org-g1g2g3cit-qv cit(1) } -- QuoVadis Citizen Hierarchy CA for Citizen certificates
id-pkio-org-g1g2g3cit-cb OBJECT IDENTIFIER ::= { id-pkio-org-g1g2g3cit cb(4) } -- Cleverbase Citizen Hierarchy CA
id-pkio-org-g1g2g3cit-cb-cit OBJECT IDENTIFIER ::= { id-pkio-org-g1g2g3cit-cb cit(1) } -- Cleverbase Citizen Hierarchy CA for Citizen certificates

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Organizations identifiers arc in the Citizen (Public G1+G2+G3) sub-domain.

5.4 Companies (Public G1) sub-domain PKIoverheid Organization identifiers arc (DEPRECATED)

The code snippet below shows the PKIoverheid Organization identifiers arc in the Companies (Public G1) sub-domain in ASN.1 syntax.

-- PKIoverheid Organization Companies (Public G1) sub-domain identifiers arc
id-pkio-org-g1com-kvk OBJECT IDENTIFIER ::= { id-pkio-org-g1com kvk(1) } -- DEPRECATED
id-pkio-org-g1com-kvk-auth OBJECT IDENTIFIER ::= { id-pkio-org-g1com-kvk auth(1) } -- DEPRECATED
id-pkio-org-g1com-kvk-nonrep OBJECT IDENTIFIER ::= { id-pkio-org-g1com-kvk nonrep(2) } -- DEPRECATED
id-pkio-org-g1com-kvk-conf OBJECT IDENTIFIER ::= { id-pkio-org-g1com-kvk conf(3) } -- DEPRECATED

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Organizations identifiers arc in the Companies (Public G1) sub-domain.

5.5 Organization (Public G2), Organization Person/Services (Public G3), and Server 2020 (EV G1) sub-domain Organization identifiers arc

The code snippet below shows the PKIoverheid Organization identifiers arc in the Organization (Public G2), Organization Person/services (Public G3), and Server 2020 (EV G1) sub-domain in ASN.1 syntax.

-- PKIoverheid Organization (Public G2), Organization Person/Services (Public G3), and Server 2020 (EV G1)
-- sub-domain Organization identifiers arc
id-pkio-org-g2g3org-venw OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org minvenw(1) } -- "Ministerie van Verkeer en Waterstaat" CA
id-pkio-org-g2g3org-venw-org OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-venw org(1) } -- "Ministerie van Verkeer en Waterstaat" CA for Organization certificates
id-pkio-org-g2g3org-venw-bct OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-venw bctcard(2) } -- "Ministerie van Verkeer en Waterstaat" CA for "Boordcomputer Taxi" card certificates
id-pkio-org-g2g3org-qv OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org qv(2) } -- QuoVadis CA
id-pkio-org-g2g3org-qv-tsp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-qv tsp(1) } -- QuoVadis CA TSP
id-pkio-org-g2g3org-esg OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org esg(3) } -- DEPRECATED
id-pkio-org-g2g3org-esg-tsp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-esg tsp(1) } -- DEPRECATED
id-pkio-org-g2g3org-getronics OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org getronics(4) } -- DEPRECATED
id-pkio-org-g2g3org-getronics-tsp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-getronics tsp(1) } -- DEPRECATED
id-pkio-org-g2g3org-getronics-justice OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-getronics justice(2) } -- DEPRECATED
id-pkio-org-g2g3org-cibg OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org cibg(5) } -- CIBG CA
id-pkio-org-g2g3org-cibg-zorgtsp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-cibg zorgtsp(1) } -- CIBG CA Healthcare TSP
id-pkio-org-g2g3org-cibg-uzizorgverlener OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-cibg uzizorgverlener(2) } -- CIBG CA for UZI Register "Zorgverlener" certificates
id-pkio-org-g2g3org-cibg-uzimdwopnaam OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-cibg uzimdwopnaam(3) } -- CIBG CA for UZI Register "Medewerker op naam" certificates
id-pkio-org-g2g3org-cibg-uzimdwnietopnaam OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-cibg uzimdwnietopnaam(4) } -- CIBG CA for UZI Register "Medewerker niet op naam" certificates
id-pkio-org-g2g3org-cibg-uziserver OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-cibg uziserver(5) } -- CIBG CA for UZI Register Server certificates
id-pkio-org-g2g3org-cibg-zovarserver OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-cibg zovarserver(6) } -- CIBG CA for ZOVAR Server certificates
id-pkio-org-g2g3org-cibg-zorgbeheerder OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-cibg zorgbeheerder(7) } -- CIBG CA for "Zorgbeheerder" certificates
id-pkio-org-g2g3org-diginotar OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org diginotar(6) } -- DEPRECATED
id-pkio-org-g2g3org-diginotar-tsp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-diginotar tsp(1) } -- DEPRECATED
id-pkio-org-g2g3org-defensie OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org defence(7) } -- Department of Defence CA
id-pkio-org-g2g3org-defensie-tsp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-defence tsp(1) } -- Department of Defence CA TSP
id-pkio-org-g2g3org-defensie-defensiepas OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-defence defensiepas(2) } -- Department of Defence CA Defensiepas
id-pkio-org-g2g3org-ddy OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org ddy(8) } -- Digidentity CA
id-pkio-org-g2g3org-ddy-org OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-ddy org(1) } -- Digidentity CA for Organizational certificates
id-pkio-org-g2g3org-ddy-sscd OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-ddy sscd(2) } -- Digidentity CA for SSCD certificates
id-pkio-org-g2g3org-ddy-svc OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-ddy svc(3) } -- Digidentity CA for Services certificates
id-pkio-org-g2g3org-kpn OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org kpn(9) } -- KPN CA
id-pkio-org-g2g3org-kpn-tsp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-kpn tsp(1) } -- KPN CA TSP
id-pkio-org-g2g3org-kpn-justice OBJECT IDENTIFIER ::= { id-pkio-org-g2g3org-kpn justice(2) } -- KPN CA for the Justice Department

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Organizations identifiers arc in the 5.5 Organization (Public G2), Organization Person/Services (Public G3), and Server 2020 (EV G1) sub-domain.

5.6 Autonomous Devices (Public G2+G3) sub-domain PKIoverheid Organization identifiers arc

The code snippet below shows the PKIoverheid Organization identifiers arc in the Autonomous Devices (Public G2+G3) sub-domain in ASN.1 syntax.

-- PKIoverheid Organization Autonomous Devices (Public G2+G3) sub-domain identifiers arc
id-pkio-org-g2g3ad-venw OBJECT IDENTIFIER ::= { id-pkio-org-g2g3ad minvenw(1) } -- "Ministerie van Verkeer en Waterstaat" CA
id-pkio-org-g2g3ad-venw-adtsp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3ad-venw adtsp(1) } -- DEPRECATED
id-pkio-org-g2g3ad-venw-bctcard OBJECT IDENTIFIER ::= { id-pkio-org-g2g3ad-venw bctcard(2) } -- "Ministerie van Verkeer en Waterstaat" CA for "Boordcomputer Taxi" card certificates
id-pkio-org-g2g3ad-ienm OBJECT IDENTIFIER ::= { id-pkio-org-g2g3ad minienm(2) } -- "Ministerie van Verkeer en Waterstaat" CA
id-pkio-org-g2g3ad-ienm-adtsp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3ad-ienm adtsp(1) } -- "Ministerie van Verkeer en Waterstaat" CA for "Boordcomputer Taxi" card certificates
id-pkio-org-g2g3ad-ienw OBJECT IDENTIFIER ::= { id-pkio-org-g2g3ad minienw(3) } -- "Ministerie van Infrastructuur en Waterstaat" CA
id-pkio-org-g2g3ad-ienw-adtsp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3ad-ienw adtsp(1) } -- "Ministerie van Infrastructuur en Waterstaat" CA for Autonomous Devices certificates

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Organizations identifiers arc in the Autonomous Devices (Public G2+G3) sub-domain.

5.7 S/MIME Organization Validated (Public G3) sub-domain PKIoverheid Organization identifiers arc

The code snippet below shows the PKIoverheid Organization identifiers arc in the S/MIME Organization Validated (Public G3) sub-domain in ASN.1 syntax.

-- PKIoverheid Organization S/MIME Organization Validated (Public G3) sub-domain identifiers arc
id-pkio-org-g3smimeorgv-def OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeorgv def(1) } -- Dutch Ministry of Defence CA for Public S/MIME Organization Validated
id-pkio-org-g3smimeorgv-cibg OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeorgv cibg(2) } -- CIBG CA for Public S/MIME Organization Validated
id-pkio-org-g3smimeorgv-kpn OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeorgv kpn(3) } -- KPN CA for Public S/MIME Organization Validated
id-pkio-org-g3smimeorgv-qv OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeorgv qv(4) } -- QuoVadis CA for Public S/MIME Organization Validated
id-pkio-org-g3smimeorgv-cb OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeorgv cb(5) } -- Cleverbase CA for Public S/MIME Organization Validated

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Organizations identifiers arc in the S/MIME Organization Validated (Public G3) sub-domain.

5.8 S/MIME Sponsor Validated (Public G3) sub-domain PKIoverheid Organization identifiers arc

The code snippet below shows the PKIoverheid Organization identifiers arc in the S/MIME Sponsor Validated (Public G3) sub-domain in ASN.1 syntax.

-- PKIoverheid Organization S/MIME Sponsor Validated (Public G3) sub-domain identifiers arc
id-pkio-org-g3smimespov-def OBJECT IDENTIFIER ::= { id-pkio-org-g3smimespov def(1) } -- Dutch Ministry of Defence CA for Public S/MIME Sponsor Validated
id-pkio-org-g3smimespov-cibg OBJECT IDENTIFIER ::= { id-pkio-org-g3smimespov cibg(2) } -- CIBG CA for Public S/MIME Sponsor Validated
id-pkio-org-g3smimespov-kpn OBJECT IDENTIFIER ::= { id-pkio-org-g3smimespov kpn(3) } -- KPN CA for Public S/MIME Sponsor Validated
id-pkio-org-g3smimespov-qv OBJECT IDENTIFIER ::= { id-pkio-org-g3smimespov qv(4) } -- QuoVadis CA for Public S/MIME Sponsor Validated
id-pkio-org-g3smimespov-cb OBJECT IDENTIFIER ::= { id-pkio-org-g3smimespov cb(5) } -- Cleverbase CA for Public S/MIME Sponsor Validated

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Organizations identifiers arc in the S/MIME Sponsor Validated (Public G3) sub-domain.

5.9 S/MIME Individual Validated (Public G3) sub-domain PKIoverheid Organization identifiers arc

The code snippet below shows the PKIoverheid Individual identifiers arc in the S/MIME Sponsor Validated (Public G3) sub-domain in ASN.1 syntax.

-- PKIoverheid Organization S/MIME Individual Validated (Public G3) sub-domain identifiers arc
id-pkio-org-g3smimeindv-def OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeindv def(1) } -- Dutch Ministry of Defence CA for Public S/MIME Individual Validated
id-pkio-org-g3smimeindv-cibg OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeindv cibg(2) } -- CIBG CA for Public S/MIME Individual Validated
id-pkio-org-g3smimeindv-kpn OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeindv kpn(3) } -- KPN CA for Public S/MIME Individual Validated
id-pkio-org-g3smimeindv-qv OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeindv qv(4) } -- QuoVadis CA for Public S/MIME Individual Validated
id-pkio-org-g3smimeindv-cb OBJECT IDENTIFIER ::= { id-pkio-org-g3smimeindv cb(5) } -- Cleverbase CA for Public S/MIME Individual Validated

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Organizations identifiers arc in the S/MIME Individual Validated (Public G3) sub-domain.

5.10 Extended Validation (EV) domain PKIoverheid Organization identifiers arc

The code snippet below shows the PKIoverheid Organization identifiers arc in the Extended Validation (EV G1) sub-domain in ASN.1 syntax.

-- PKIoverheid Organization Extended Validation (EV G1) sub-domain identifiers arc
id-pkio-org-g1ev-qv OBJECT IDENTIFIER ::= { id-pkio-org-g1ev qv(1) } -- QuoVadis Extended Validation Hierarchy CA
id-pkio-org-g1ev-qv-tsp OBJECT IDENTIFIER ::= { id-pkio-org-g1ev-qv tsp(1) } -- QuoVadis Extended Validation Hierarchy CA TSP
id-pkio-org-g1ev-kpn OBJECT IDENTIFIER ::= { id-pkio-org-g1ev kpn(2) } -- KPN Extended Validation Hierarchy CA
id-pkio-org-g1ev-kpn-tsp OBJECT IDENTIFIER ::= { id-pkio-org-g1ev-kpn tsp(1) } -- KPN Extended Validation Hierarchy CA TSP

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Organizations identifiers arc in the Extended Validation (EV G1) domain.

5.11 Private root (Private G1) domain PKIoverheid Organization identifiers arc

The code snippet below shows the PKIoverheid Organization identifiers arc in the Private Root (Private G1) domain in ASN.1 syntax.

-- PKIoverheid Organization Private Root (Private G1) domain identifiers arc
id-pkio-org-g1priv-qv OBJECT IDENTIFIER ::= { id-pkio-org-g1priv qv(1) } -- QuoVadis Private Hierarchy CA
id-pkio-org-g1priv-qv-pers OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-qv pers(1) } -- QuoVadis Private Hierarchy CA for Personal certificates
id-pkio-org-g1priv-qv-svc OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-qv svc(2) } -- QuoVadis Private Hierarchy CA for Services certificates
id-pkio-org-g1priv-cibg OBJECT IDENTIFIER ::= { id-pkio-org-g1priv cibg(3) } -- CIBG Private Hierarchy CA
id-pkio-org-g1priv-cibg-uziserver OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-cibg uziserver(5) } -- CIBG Private Hierarchy CA for UZI Register Server certificates
id-pkio-org-g1priv-cibg-zovarserver OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-cibg zovarserver(6) } -- CIBG Private Hierarchy CA for ZOVAR Server certificates
id-pkio-org-g1priv-ddy OBJECT IDENTIFIER ::= { id-pkio-org-g1priv ddy(4) } -- Digidentity Private Hierarchy CA
id-pkio-org-g1priv-ddy-svc OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-ddy svc(3) } -- Digidentity Private Hierarchy CA for Services certificates
id-pkio-org-g1priv-kpn OBJECT IDENTIFIER ::= { id-pkio-org-g1priv kpn(5) } -- KPN Private Hierarchy CA
id-pkio-org-g1priv-kpn-svc OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-kpn svc(1) } -- KPN Private Hierarchy CA for Services certificates
id-pkio-org-g1priv-kpn-server OBJECT IDENTIFIER ::= { id-pkio-org-g1priv-kpn server(2) } -- KPN Private Hierarchy CA for Server certificates

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Organizations identifiers arc in the Private Root (Private G1) sub-domain.

5.12 Test (Trial G2+G3) domain PKIoverheid Organization identifiers arc

The code snippet below shows the PKIoverheid Organization identifiers arc in the Test (Trial G2+G3) domain in ASN.1 syntax.

NOTE: The Test sub-domain is sometimes referred to as Trial domain.

-- PKIoverheid Organization Test (Trial G2+G3) domain identifiers arc
id-pkio-org-g2g3test-diginotar OBJECT IDENTIFIER ::= { id-pkio-org-g2g3test diginotar(1) } -- DEPRECATED
id-pkio-org-g2g3test-diginotar-tsp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3test-diginotar tsp(1) } -- DEPRECATED
id-pkio-org-g2g3test-qv OBJECT IDENTIFIER ::= { id-pkio-org-g2g3test qv(2) } -- QuoVadis Test Hierarchy CA
id-pkio-org-g2g3test-qv-tsp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3test-qv tsp(1) } -- QuoVadis Test Hierarchy CA TSP
id-pkio-org-g2g3test-esg OBJECT IDENTIFIER ::= { id-pkio-org-g2g3test esg(3) } -- DEPRECATED
id-pkio-org-g2g3test-esg-tsp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3test-esg tsp(1) } -- DEPRECATED
id-pkio-org-g2g3test-kpn OBJECT IDENTIFIER ::= { id-pkio-org-g2g3test kpn(4) } -- KPN Test Hierarchy CA
id-pkio-org-g2g3test-kpn-tsp OBJECT IDENTIFIER ::= { id-pkio-org-g2g3test-kpn tsp(1) } -- KPN Test Hierarchy CA TSP

The table below gives a more reader-friendly overview of the end nodes in the PKIoverheid Organizations identifiers arc in the Test (Trial G2+G3) domain.

6 PKIoverheid Pilots identifiers arc (DEPRECATED)

The code snippet below shows the top-level PKIoverheid Pilots identifiers arc in ASN.1 syntax.

Note: At this point (2020) it is not known anymore what the exact purpose was of the Pilots identifiers arc. Most probably it was meant for an initial PKIoverheid pilot before it was taken into production, possibly later reused as an earlier implementation of a test domain. The arc was primarily used in 2002 and 2003, it seems.

-- PKIoverheid top-level Pilots identifiers arc
id-pkio-pilots-defs OBJECT IDENTIFIER ::= id-pkio-pilots defs(1) } -- DEPRECATED
id-pkio-pilots-cp OBJECT IDENTIFIER ::= { id-pkio-pilots cp(2) } -- DEPRECATED
id-pkio-pilots-org OBJECT IDENTIFIER ::= id-pkio-pilots org(3) } -- DEPRECATED

The table below gives a more reader-friendly overview of the PKIoverheid top-level Pilots identifiers arc.

Subsequent paragraphs will describe these top-level Pilots identifiers in-depth.

6.1 Pilots Definition identifiers arc (DEPRECATED)

No definitions were defined in this top-level Pilots identifier.

6.2 Pilots Certificate Profile identifiers arc (DEPRECATED)

The code snippet below shows the domain-level Pilots Certificate Policy identifiers arc in ASN.1 syntax.

-- Pilots Certificate Policy domain-level identifiers arc
id-pkio-pilots-cp-pa OBJECT IDENTIFIER ::= { id-pkio-pilots-cp pa(1) } -- DEPRECATED
id-pkio-pilots-cp-gov OBJECT IDENTIFIER ::= { id-pkio-pilots-cp gov(2) } -- DEPRECATED
id-pkio-pilots-cp-cit OBJECT IDENTIFIER ::= { id-pkio-pilots-cp cit(3) } -- DEPRECATED
id-pkio-pilots-cp-com OBJECT IDENTIFIER ::= { id-pkio-pilots-cp com(4) } -- DEPRECATED

These domain-level identifiers will be referenced in the Certificate Policies in each of the following sub-paragraphs.

6.2.1 Pilots PA sub-domain CP identifiers arc (DEPRECATED)

The code snippet below shows the Pilots Certificate Policy identifiers arc in the Policy Authority (PA) sub-domain in ASN.1 syntax.

-- Pilots Certificate Policy PA sub-domain identifiers arc
id-pkio-pilots-cp-pa-root OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-pa root(1) } -- DEPRECATED
id-pkio-pilots-cp-pa-dom OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-pa dom(2) } -- DEPRECATED
id-pkio-pilots-cp-pa-gov OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-pa gov(3) } -- DEPRECATED
id-pkio-pilots-cp-pa-cit OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-pa cit(4) } -- DEPRECATED
id-pkio-pilots-cp-pa-com OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-pa com(5) } -- DEPRECATED
id-pkio-pilots-cp-pa-tsp OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-pa tsp(6) } -- DEPRECATED

The table below gives a more reader-friendly overview of the end nodes in the Pilots Certificate Policy identifiers arc in the PA sub-domain.

6.2.2 Pilots Government sub-domain CP identifiers arc (DEPRECATED)

The code snippet below shows the Pilots Certificate Policy identifiers arc in the Government sub-domain in ASN.1 syntax.

-- Pilots Certificate Policy Government sub-domain identifiers arc
id-pkio-pilots-cp-gov-auth OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov auth(1) } -- DEPRECATED
id-pkio-pilots-cp-gov-auth-std OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-auth std(1) } -- DEPRECATED
id-pkio-pilots-cp-gov-auth-robin OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-auth robin(2) } -- DEPRECATED
id-pkio-pilots-cp-gov-nonrep OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov nonrep(2) } -- DEPRECATED
id-pkio-pilots-cp-gov-nonrep-std OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-nonrep std(1) } -- DEPRECATED
id-pkio-pilots-cp-gov-nonrep-robin OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-nonrep robin(2) } -- DEPRECATED
id-pkio-pilots-cp-gov-conf OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov conf(3) } -- DEPRECATED
id-pkio-pilots-cp-gov-conf-std OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-conf std(1) } -- DEPRECATED
id-pkio-pilots-cp-gov-conf-robin OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-conf robin(2) } -- DEPRECATED
id-pkio-pilots-cp-gov-svc-auth OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov svc-auth(4) } -- DEPRECATED
id-pkio-pilots-cp-gov-svc-auth-std OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-svc-auth std(1) } -- DEPRECATED
id-pkio-pilots-cp-gov-svc-auth-robin OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-svc-auth robin(2) } -- DEPRECATED
id-pkio-pilots-cp-gov-svc-conf OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov svc-conf(5) } -- DEPRECATED
id-pkio-pilots-cp-gov-svc-conf-std OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-svc-conf std(1) } -- DEPRECATED
id-pkio-pilots-cp-gov-svc-conf-robin OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-gov-svc-conf robin(2) } -- DEPRECATED

The table below gives a more reader-friendly overview of the end nodes in the Pilots Certificate Policy identifiers arc in the Government sub-domain.

6.2.3 Pilots Citizen sub-domain CP identifiers arc (DEPRECATED)

The code snippet below shows the Pilots Certificate Policy identifiers arc in the Citizen sub-domain in ASN.1 syntax.

-- Pilots Certificate Policy Citizen sub-domain identifiers arc
id-pkio-pilots-cp-cit-auth OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-cit auth(1) } -- DEPRECATED
id-pkio-pilots-cp-cit-nonrep OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-cit nonrep(2) } -- DEPRECATED
id-pkio-pilots-cp-cit-conf OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-cit conf(3) } -- DEPRECATED

The table below gives a more reader-friendly overview of the end nodes in the Pilots Certificate Policy identifiers arc in the Citizen sub-domain.

6.2.4 Pilots Companies sub-domain CP identifiers arc (DEPRECATED)

The code snippet below shows the Pilots Certificate Policy identifiers arc in the Companies sub-domain in ASN.1 syntax.

-- Pilots Certificate Policy Companies sub-domain identifiers arc
id-pkio-pilots-cp-com-auth OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com auth(1) } -- DEPRECATED
id-pkio-pilots-cp-com-auth-std OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com-auth std(1) } -- DEPRECATED
id-pkio-pilots-cp-com-auth-cibg OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com-auth cibg(2) } -- DEPRECATED
id-pkio-pilots-cp-com-nonrep OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com nonrep(2) } -- DEPRECATED
id-pkio-pilots-cp-com-nonrep-std OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com-nonrep std(1) } -- DEPRECATED
id-pkio-pilots-cp-com-nonrep-cibg OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com-nonrep cibg(2) } -- DEPRECATED
id-pkio-pilots-cp-com-conf OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com conf(3) } -- DEPRECATED
id-pkio-pilots-cp-com-conf-std OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com-conf std(1) } -- DEPRECATED
id-pkio-pilots-cp-com-conf-cibg OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com-conf cibg(2) } -- DEPRECATED
id-pkio-pilots-cp-com-svc-auth OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com svc-auth(4) } -- DEPRECATED
id-pkio-pilots-cp-com-svc-conf OBJECT IDENTIFIER ::= { id-pkio-pilots-cp-com svc-conf(5) } -- DEPRECATED

The table below gives a more reader-friendly overview of the end nodes in the Pilots Certificate Policy identifiers arc in the Companies sub-domain.

6.3 Pilots Organization identifiers arc (DEPRECATED)

The code snippet below shows the domain-level Pilots Organization identifiers arc in ASN.1 syntax.

-- Pilots Organization domain-level identifiers arc
id-pkio-pilots-org-pa OBJECT IDENTIFIER ::= { id-pkio-pilots-org pa(1) } -- DEPRECATED
id-pkio-pilots-org-gov OBJECT IDENTIFIER ::= { id-pkio-pilots-org gov(2) } -- DEPRECATED
id-pkio-pilots-org-cit OBJECT IDENTIFIER ::= { id-pkio-pilots-org cit(3) } -- DEPRECATED
id-pkio-pilots-org-com OBJECT IDENTIFIER ::= { id-pkio-pilots-org com(4) } -- DEPRECATED

These domain-level identifiers will be expanded upon in the Organization identifiers in each of the following sub-paragraphs.

6.3.1 Pilots PA sub-domain Organization identifiers arc (DEPRECATED)

The code snippet below shows the Pilots Organization identifiers arc in the Policy Authority (PA) sub-domain in ASN.1 syntax.

-- Pilots Organization PA sub-domain identifiers arc
id-pkio-org-pilots-pa-ictu OBJECT IDENTIFIER ::= { id-pkio-org-pilots-pa ictu(1) } -- DEPRECATED
id-pkio-org-pilots-pa-ictu-auth OBJECT IDENTIFIER ::= { id-pkio-org-pilots-pa-ictu auth(1) } -- DEPRECATED
id-pkio-org-pilots-pa-ictu-nonrep OBJECT IDENTIFIER ::= { id-pkio-org-pilots-pa-ictu nonrep(2) } -- DEPRECATED
id-pkio-org-pilots-pa-ictu-conf OBJECT IDENTIFIER ::= { id-pkio-org-pilots-pa-ictu conf(3) } -- DEPRECATED

The table below gives a more reader-friendly overview of the Pilots Organization identifiers arc in the PA sub-domain.

6.3.2 Pilots Government sub-domain Organization identifiers arc (DEPRECATED)

The code snippet below shows the Pilots Organization identifiers arc in the Government sub-domain in ASN.1 syntax.

-- Pilots Organization Government sub-domain identifiers arc
id-pkio-org-pilots-gov-sc OBJECT IDENTIFIER ::= { id-pkio-org-pilots-gov sc(1) } -- DEPRECATED
id-pkio-org-pilots-gov-sc-auth OBJECT IDENTIFIER ::= { id-pkio-org-pilots-gov-sc auth(1) } -- DEPRECATED
id-pkio-org-pilots-gov-sc-nonrep OBJECT IDENTIFIER ::= { id-pkio-org-pilots-gov-sc nonrep(2) } -- DEPRECATED
id-pkio-org-pilots-gov-sc-conf OBJECT IDENTIFIER ::= { id-pkio-org-pilots-gov-sc conf(3) } -- DEPRECATED
id-pkio-org-pilots-gov-robin OBJECT IDENTIFIER ::= { id-pkio-org-pilots-gov robin(1) } -- DEPRECATED
id-pkio-org-pilots-gov-robin-libroca OBJECT IDENTIFIER ::= { id-pkio-org-pilots-gov-robin libroca(1) } -- DEPRECATED
id-pkio-org-pilots-gov-robin-libroca-ca OBJECT IDENTIFIER ::= { id-pkio-org-pilots-gov-robin-libroca ca(1) } -- DEPRECATED

The table below gives a more reader-friendly overview of the Pilots Organization identifiers arc in the Government sub-domain.

6.3.3 Pilots Citizen sub-domain Organization identifiers arc (DEPRECATED)

No identifiers were defined in the Pilots Citizen sub-domain identifier arc.

6.3.4 Pilots Companies sub-domain Organization identifiers arc (DEPRECATED)

The code snippet below shows the Pilots Organization identifiers arc in the Companies sub-domain in ASN.1 syntax.

-- Pilots Organization Companies sub-domain identifiers arc
id-pkio-org-pilots-com-sc OBJECT IDENTIFIER ::= { id-pkio-org-pilots-com sc(1) } -- DEPRECATED
id-pkio-org-pilots-cim-sc-auth OBJECT IDENTIFIER ::= { id-pkio-org-pilots-com-sc auth(1) } -- DEPRECATED
id-pkio-org-pilots-com-sc-nonrep OBJECT IDENTIFIER ::= { id-pkio-org-pilots-com-sc nonrep(2) } -- DEPRECATED
id-pkio-org-pilots-com-sc-conf OBJECT IDENTIFIER ::= { id-pkio-org-pilots-com-sc conf(3) } -- DEPRECATED
id-pkio-org-pilots-com-cibg OBJECT IDENTIFIER ::= { id-pkio-org-pilots-com cibg(1) } -- DEPRECATED
id-pkio-org-pilots-com-cibg-tsp OBJECT IDENTIFIER ::= { id-pkio-org-pilots-com-cibg tsp(1) } -- DEPRECATED

The table below gives a more reader-friendly overview of the Pilots Organization identifiers arc in the Companies sub-domain.