Home Similarity Diff BR Diff CS Diff EVG Diff SMIME Diff TLS

Home Show similarity Differences BR (in/out) Differences CS (in/out) Differences EVG (in/out) Differences SMIME (in/out) Differences TLS (in/out)

BR

CS

EVG

SMIME

TLS

BR

#### 7.1.6.1 Reserved Certificate Policy Identifiers The following Certificate Policy identifiers are reserved for use by CAs as an optional means of asserting that a Certificate complies with these Requirements. `{joint-iso-itu-t(2) international-organizations(23) ca-browser-forum(140) certificate-policies(1) baseline-requirements(2) domain-validated(1)} (2.23.140.1.2.1)` `{joint-iso-itu-t(2) international-organizations(23) ca-browser-forum(140) certificate-policies(1) baseline-requirements(2) organization-validated(2)} (2.23.140.1.2.2)` `{joint-iso-itu-t(2) international-organizations(23) ca-browser-forum(140) certificate-policies(1) baseline-requirements(2) individual-validated(3)} (2.23.140.1.2.3)` `{joint‐iso‐itu‐t(2) international‐organizations(23) ca‐browser‐forum(140) certificate‐policies(1) ev-guidelines(1)} (2.23.140.1.1)`

CS

#### 7.1.6.1 Reserved Certificate Policy Identifiers The following Certificate Policy Identifier is reserved for use by CAs as a required means of asserting compliance with these Requirements for Non-EV Code Signing Certificates: `{joint-iso-itu-t(2) international-organizations(23) ca-browser-forum(140) certificate-policies(1) code-signing-requirements(4) code signing(1)}` (`2.23.140.1.4.1`) The following Certificate Policy Identifier is reserved for use by CAs as a required means of asserting compliance with these Requirements for EV Code Signing Certificates follows: `{joint-iso-itu-t(2) international-organizations(23) ca-browser-forum(140) certificate-policies(1) code-signing-requirements(3)}` (`2.23.140.1.3`) The following Certificate Policy Identifier is reserved for use by CAs as a required means of asserting compliance with these Requirements for Timestamp Certificates: `{joint-iso-itu-t(2) international-organizations(23) ca-browser-forum(140) certificate-policies(1) code-signing-requirements(4) timestamping(2)}` (`2.23.140.1.4.2`)

EVG

#### 7.1.6.1 EV Subscriber Certificates Each EV Certificate issued by the CA to a Subscriber MUST contain a policy identifier that is either defined by these Guidelines or the CA in the certificate's `certificatePolicies` extension that: 1. indicates which CA policy statement relates to that Certificate, 2. asserts the CA's adherence to and compliance with these Guidelines, and 3. is either the CA/Browser Forum’s EV policy identifier or a policy identifier that, by pre-agreement with the Application Software Supplier, marks the Certificate as being an EV Certificate. The following Certificate Policy identifier is the CA/Browser Forum’s EV policy identifier: `{joint‐iso‐itu‐t(2) international‐organizations(23) ca‐browser‐forum(140) certificate‐policies(1) ev-guidelines (1) } (2.23.140.1.1)`, if the Certificate complies with these Guidelines.

SMIME

#### 7.1.6.1 Reserved certificate policy identifiers The following CA/Browser Forum Certificate Policy identifiers are reserved for use by CAs to assert that a Certificate complies with these Requirements. | Certificate Type | Generation | Policy Identifier | | ---------------- | ---------- | ----------------- | | `Mailbox-validated` | Legacy | `2.23.140.1.5.1.1` | | `Mailbox-validated` | Multipurpose | `2.23.140.1.5.1.2` | | `Mailbox-validated` | Strict | `2.23.140.1.5.1.3` | | `Organization-validated` | Legacy | `2.23.140.1.5.2.1` | | `Organization-validated` | Multipurpose | `2.23.140.1.5.2.2` | | `Organization-validated` | Strict | `2.23.140.1.5.2.3` | | `Sponsor-validated` | Legacy | `2.23.140.1.5.3.1` | | `Sponsor-validated` | Multipurpose | `2.23.140.1.5.3.2` | | `Sponsor-validated` | Strict | `2.23.140.1.5.3.3` | | `Individual-validated` | Legacy | `2.23.140.1.5.4.1` | | `Individual-validated` | Multipurpose | `2.23.140.1.5.4.2` | | `Individual-validated` | Strict | `2.23.140.1.5.4.3` |