Security/doc/Apple_OID_Assignments.rtf

   1 {\rtf1\ansi\ansicpg1252\cocoartf1071
   2 {\fonttbl\f0\fswiss\fcharset0 Helvetica;\f1\fnil\fcharset0 HelveticaNeue;\f2\froman\fcharset0 Times-Roman;
   3 }
   4 {\colortbl;\red255\green255\blue255;\red255\green0\blue0;}
   5 {\info
   6 {\title Apple OID Assignments}
   7 {\author Doug Mitchell}
   8 {\*\company Apple Computer, Inc.}}\vieww23080\viewh23560\viewkind0
   9 \deftab720
  10 \pard\pardeftab720\qc\pardirnatural
  11
  12 \f0\fs74 \cf2 NOTICE - Moving to Security Tech Tree\
  13
  14 \fs26 \cf0 \
  15 \
  16 \
  17 Apple OID Assignments\
  18 Last Update 24 March 2010 by Richard Murphy\
  19 \pard\pardeftab720\ql\qnatural\pardirnatural
  20 \cf0 \
  21 1.0 apple ::=  \{ iso(1) member-body(2) US(840) 113635 \}\
  22 -- 1 2 840 113635\
  23 -- Top level Apple OID\
  24 \
  25 \pard\pardeftab720\li720\ql\qnatural\pardirnatural
  26 \cf0 1.1 appleDataSecurity ::= \{apple 100\}\
  27 -- 1 2 840 113635 100\
  28 -- Apple Data Security arc\
  29 \
  30 \pard\pardeftab720\li1440\ql\qnatural\pardirnatural
  31 \cf0 1.1.1 appleTrustPolicy ::= \{appleDataSecurity 1\}\
  32 -- 1 2 840 113635 100 1\
  33 -- Apple Certificate Trust Policies\
  34 \
  35 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
  36 \cf0 iSignTP ::= \{appleTrustPolicy 1\}\
  37 -- 1 2 840 113635 100 1 1\
  38 -- Apple iSign policy \
  39 \
  40 appleX509Basic ::= \{appleTrustPolicy 2\}\
  41 -- 1 2 840 113635 100 1 2\
  42 -- Apple Basic X.509 Cert Policy\
  43 \
  44 appleSSLPolicy ::= \{appleTrustPolicy 3\}\
  45 -- 1 2 840 113635 100 1 3\
  46 -- Apple SSL Cert Policy\
  47 \
  48 appleLocalCertGenPolicy ::= \{appleTrustPolicy 4\}\
  49 -- 1 2 840 113635 100 1 4\
  50 -- Apple Local Certificate Generation Policy\
  51 \
  52 appleCSRGenPolicy ::= \{appleTrustPolicy 5\}\
  53 -- 1 2 840 113635 100 1 5\
  54 -- Apple Local CSR Generation Policy\
  55 \
  56 appleCRLPolicy ::= \{appleTrustPolicy 6\}\
  57 -- 1 2 840 113635 100 1 6\
  58 -- Apple CRL Revocation Policy\
  59 \
  60 appleOCSPPolicy ::= \{appleTrustPolicy 7\}\
  61 -- 1 2 840 113635 100 1 7\
  62 -- Apple OCSP Revocation Policy\
  63 \
  64 appleSMIMEPolicy ::= \{appleTrustPolicy 8\}\
  65 -- 1 2 840 113635 100 1 8\
  66 -- Apple S/MIME Cert Policy\
  67 \
  68 appleEAPPolicy ::= \{appleTrustPolicy 9\}\
  69 -- 1 2 840 113635 100 1 9\
  70 -- Apple EAP Cert Policy\
  71 \
  72 appleSWUpdateSigningPolicy ::= \{appleTrustPolicy 10\}\
  73 -- Note: this was renamed from appleCodeSigningPolicy on 8/15/06\
  74 -- 1 2 840 113635 100 1 10\
  75 -- Apple Software Update Signing Policy\
  76 \
  77 appleIPSecPolicy ::= \{appleTrustPolicy 11\}\
  78 -- 1 2 840 113635 100 1 11\
  79 -- Apple IPSec Cert Policy\
  80 \
  81 appleIChatPolicy ::= \{appleTrustPolicy 12\}\
  82 -- 1 2 840 113635 100 1 12\
  83 -- Apple iChat Cert Policy\
  84 \
  85 appleResourceSignPolicy ::= \{appleTrustPolicy 13\}\
  86 -- 1 2 840 113635 100 1 13\
  87 -- Apple Resource Sign Cert Policy\
  88 \
  89 applePKINITClientPolicy ::= \{appleTrustPolicy 14\}\
  90 -- 1 2 840 113635 100 1 14\
  91 -- Apple Kerberos PKINIT Client Cert Policy\
  92 \
  93 applePKINITServerPolicy ::= \{appleTrustPolicy 15\}\
  94 -- 1 2 840 113635 100 1 15\
  95 -- Apple Kerberos PKINIT Server Cert Policy\
  96 \
  97 appleCodeSigningPolicy ::= \{appleTrustPolicy 16\}\
  98 -- 1 2 840 113635 100 1 16\
  99 -- Apple Code Signing Policy\
 100 \
 101 applePackageSigningPolicy ::= \{appleTrustPolicy 17\}\
 102 -- 1 2 840 113635 100 1 17\
 103 -- Apple Package Signing Policy\
 104 \
 105 \
 106 \pard\pardeftab720\li1440\ql\qnatural\pardirnatural
 107 \cf0 1.1.2 appleSecurityAlgorithm ::=  \{appleDataSecurity 2\}\
 108 -- 1 2 840 113635 100 2\
 109 -- Apple Security Algorithms\
 110 \
 111 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 112 \cf0 appleFEE ::= \{ appleSecurityAlgorithm 1\}\
 113 -- 1 2 840 113635 100 2 1\
 114 -- Apple Fast Elliptic Encryption\
 115 \
 116 appleASC ::= \{ appleSecurityAlgorithm 2\}\
 117 -- 1 2 840 113635 100 2 2\
 118 -- Apple Secure Compression\
 119 \
 120 appleFEE_MD5 ::= \{ appleSecurityAlgorithm 3\}\
 121 -- 1 2 840 113635 100 2 3\
 122 -- Apple FEE with MD5 signature\
 123 \
 124 appleFEE_SHA1::= \{ appleSecurityAlgorithm 4\}\
 125 -- 1 2 840 113635 100 2 4\
 126 -- Apple FEE with MSHA1D5 signature\
 127 \
 128 appleFEED ::= \{ appleSecurityAlgorithm 5\}\
 129 -- 1 2 840 113635 100 2 5\
 130 -- Apple FEE with direct embedding\
 131 \
 132 appleFEEDEXP ::= \{ appleSecurityAlgorithm 6\}\
 133 -- 1 2 840 113635 100 2 6\
 134 -- Apple FEE with direct embedding, experimental\
 135 \
 136 appleECDSA ::= \{ appleSecurityAlgorithm 7\}\
 137 -- 1 2 840 113635 100 2 7\
 138 -- Apple FEE/ECDSA signature\
 139 \
 140 \pard\pardeftab720\li1440\ql\qnatural\pardirnatural
 141 \cf0 1.1.3 appleDotMacCertificate ::=  \{appleDataSecurity 3\}\
 142 -- 1 2 840 113635 100 3\
 143 -- Apple .mac certificate arc\
 144 \
 145 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 146 \cf0 1.1.3.1 dotMacCertificateRequest ::= \{ appleDotMacCertificate 1\}\
 147 -- 1 2 840 113635 100 3 1\
 148 -- Apple .mac certificate request arc\
 149 \
 150 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 151 \cf0 dotMacCertReqIdentity ::= \{ dotMacCertificateRequest 1\}\
 152 -- 1 2 840 113635 100 3 1 1\
 153 -- Apple .mac Identity certificate request \
 154 -- Actually Used for encrypted iChat certs; deprecated in Leopard\
 155 \
 156 dotMacCertReqEmailSign ::= \{ dotMacCertificateRequest 2\}\
 157 -- 1 2 840 113635 100 3 1 2\
 158 -- Apple .mac Email Signing certificate request \
 159 \
 160 dotMacCertReqEmailEncrypt ::= \{ dotMacCertificateRequest 3\}\
 161 -- 1 2 840 113635 100 3 1 3\
 162 -- Apple .mac Email Encryption certificate request \
 163 \
 164 dotMacCertReqArchiveList ::= \{ dotMacCertificateRequest 4\}\
 165 -- 1 2 840 113635 100 3 1 4\
 166 -- Apple .mac archive list request \
 167 \
 168 dotMacCertReqArchiveStore ::= \{ dotMacCertificateRequest 5\}\
 169 -- 1 2 840 113635 100 3 1 5\
 170 -- Apple .mac archive store request \
 171 \
 172 dotMacCertReqArchiveFetch ::= \{ dotMacCertificateRequest 6\}\
 173 -- 1 2 840 113635 100 3 1 6\
 174 -- Apple .mac archive fetch request \
 175 \
 176 dotMacCertReqArchiveRemove ::= \{ dotMacCertificateRequest 7\}\
 177 -- 1 2 840 113635 100 3 1 7\
 178 -- Apple .mac archive remove request \
 179 \
 180 dotMacCertReqSign ::= \{ dotMacCertificateRequest 8\}\
 181 -- 1 2 840 113635 100 3 1 8\
 182 -- Apple .mac signing certificate request \
 183 \
 184 \pard\pardeftab720\ql\qnatural\pardirnatural
 185 \cf0 \
 186 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 187 \cf0 1.1.3.2 dotMacCertificateExtension ::= \{ appleDotMacCertificate 2\}\
 188 -- 1 2 840 113635 100 3 2\
 189 -- Apple .mac certificate extension arc\
 190 \
 191 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 192 \cf0 dotMacCertExtensionIdentity ::= \{ dotMacCertificateExtension 1\}\
 193 -- 1 2 840 113635 100 3 2 1\
 194 -- Apple .mac certificate extended key use: Identity\
 195 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 196 \cf0 \
 197 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 198 \cf0 dotMacCertExtensionEmailSign ::= \{ dotMacCertificateExtension 2\}\
 199 -- 1 2 840 113635 100 3 2 2\
 200 -- Apple .mac certificate extended key use: Email Signing\
 201 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 202 \cf0 \
 203 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 204 \cf0 dotMacCertExtensionEmailEncrypt ::= \{ dotMacCertificateExtension 3\}\
 205 -- 1 2 840 113635 100 3 2 3\
 206 -- Apple .mac certificate extended key use: Email Encrypt\
 207 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 208 \cf0 \
 209 \pard\pardeftab720\ql\qnatural\pardirnatural
 210 \cf0 \
 211 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 212 \cf0 1.1.3.3 dotMacCertificateRequestValues ::= \{ appleDotMacCertificate 3\}\
 213 -- 1 2 840 113635 100 3 3\
 214 -- Apple .mac certificate request parameter arc\
 215 \
 216         dotMacCertRequestValueUserName ::= \{ dotMacCertificateRequestValues 1\}\
 217 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 218 \cf0 -- 1 2 840 113635 100 3 3 1\
 219 -- Apple .mac certificate request parameter: userName\
 220 \
 221 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 222 \cf0    dotMacCertRequestValuePasssword ::= \{ dotMacCertificateRequestValues 2\}\
 223 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 224 \cf0 -- 1 2 840 113635 100 3 3 2\
 225 -- Apple .mac certificate request parameter: password\
 226 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 227 \cf0 \
 228         dotMacCertRequestValueHostName ::= \{ dotMacCertificateRequestValues 3\}\
 229 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 230 \cf0 -- 1 2 840 113635 100 3 3 3\
 231 -- Apple .mac certificate request parameter: hostName\
 232 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 233 \cf0 \
 234         dotMacCertRequestValueRenew ::= \{ dotMacCertificateRequestValues 4\}\
 235 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 236 \cf0 -- 1 2 840 113635 100 3 3 4\
 237 -- Apple .mac certificate request parameter: Renew flag\
 238 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 239 \cf0 \
 240         dotMacCertRequestValueAsync ::= \{ dotMacCertificateRequestValues 5\}\
 241 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 242 \cf0 -- 1 2 840 113635 100 3 3 5\
 243 -- Apple .mac certificate request parameter: asynchronous flag\
 244 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 245 \cf0 \
 246         dotMacCertRequestValueIsPending ::= \{ dotMacCertificateRequestValues 6\}\
 247 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 248 \cf0 -- 1 2 840 113635 100 3 3 6\
 249 -- Apple .mac certificate request parameter: poll server for pending request\
 250 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 251 \cf0 \
 252         dotMacCertRequestValueTypeIChat ::= \{ dotMacCertificateRequestValues 7\}\
 253 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 254 \cf0 -- 1 2 840 113635 100 3 3 7\
 255 -- Apple .mac certificate request parameter: cert type = iChat\
 256 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 257 \cf0 \
 258         dotMacCertRequestValueTypeSharedServices ::= \
 259 \pard\pardeftab720\li3600\fi720\ql\qnatural\pardirnatural
 260 \cf0 \{ dotMacCertificateRequestValues 8\}\
 261 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 262 \cf0 -- 1 2 840 113635 100 3 3 8\
 263 -- Apple .mac certificate request parameter: cert type = Shared Services\
 264 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 265 \cf0 \
 266         dotMacCertRequestValueTypeEmailEncrypt ::= \
 267 \pard\pardeftab720\li3600\fi720\ql\qnatural\pardirnatural
 268 \cf0 \{ dotMacCertificateRequestValues 9\}\
 269 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 270 \cf0 -- 1 2 840 113635 100 3 3 9\
 271 -- Apple .mac certificate request parameter: cert type = Email Encryption\
 272 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 273 \cf0 \
 274         dotMacCertRequestValueTypeEmailSigning ::= \
 275 \pard\pardeftab720\li3600\fi720\ql\qnatural\pardirnatural
 276 \cf0 \{ dotMacCertificateRequestValues 10\}\
 277 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 278 \cf0 -- 1 2 840 113635 100 3 3 10\
 279 -- Apple .mac certificate request parameter: cert type = Email Signing\
 280 \
 281 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 282 \cf0 \
 283 \pard\pardeftab720\li1440\ql\qnatural\pardirnatural
 284 \cf0 \
 285 1.1.4 appleExtendedKeyUsage ::= \{appleDataSecurity 4\}\
 286 -- 1 2 840 113635 100 4\
 287 -- Apple Extended Key Usage arc\
 288 \
 289 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 290 \cf0 appleCodeSigning ::= \{ appleExtendedKeyUsage 1\}\
 291 -- 1 2 840 113635 100 4 1\
 292 -- Apple Code Signing Extended Key Usage \
 293 \pard\pardeftab720\ql\qnatural\pardirnatural
 294 \cf0 \
 295 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 296 \cf0 appleCodeSigningDevelopment ::= \{ appleCodeSigning 1\}\
 297 -- 1 2 840 113635 100 4 1 1\
 298 -- Apple Code Signing Extended Key Usage, Development \
 299 \
 300 appleSoftwareUpdateSigning ::= \{ appleCodeSigning 2\}\
 301 -- 1 2 840 113635 100 4 1 2\
 302 -- Apple Software Update Signing Extended Key Usage\
 303 \
 304         appleSoftwareUpdateTestSigning ::= \{ appleSoftwareUpdateSigning 1\}\
 305         -- 1 2 840 113635 100 4 1 2 1\
 306         -- Apple Software Update Test Signing Extended Key Usage\
 307 \
 308 appleCodeSigningThirdParty ::= \{ appleCodeSigning 3\}\
 309 -- 1 2 840 113635 100 4 1 3\
 310 -- Apple Third-Party Code Signing Extended Key Usage\
 311 \
 312 appleResourceSigning ::= \{ appleCodeSigning 4\}\
 313 -- 1 2 840 113635 100 4 1 4\
 314 -- Apple Resource Signing Extended Key Usage\
 315 \
 316 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 317 \cf0 appleIChatSigning ::= \{ appleExtendedKeyUsage 2\}\
 318 -- 1 2 840 113635 100 4 2\
 319 -- Apple iChat Signing Extended Key Usage \
 320 \
 321 appleIChatEncryption ::= \{ appleExtendedKeyUsage 3\}\
 322 -- 1 2 840 113635 100 4 3\
 323 -- Apple iChat Encryption Extended Key Usage \
 324 \pard\pardeftab720\ql\qnatural\pardirnatural
 325 \cf0 \
 326 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 327 \cf0 appleSystemIdentity ::= \{ appleExtendedKeyUsage 4\}\
 328 -- 1 2 840 113635 100 4 4\
 329 -- Apple System Identity Extended Key Usage \
 330 \pard\pardeftab720\ql\qnatural\pardirnatural
 331 \cf0 \
 332 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 333 \cf0 appleCryptoEnv ::= \{ appleExtendedKeyUsage 5\}\
 334 -- 1 2 840 113635 100 4 5\
 335 -- Apple Encryption Environment Extended Key Usage \
 336 \pard\pardeftab720\ql\qnatural\pardirnatural
 337 \cf0 \
 338 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 339 \cf0 appleCryptoProductionEnv ::= \{ appleCryptoEnv 1\}\
 340 -- 1 2 840 113635 100 4 5 1\
 341 -- Apple Encryption Production Environment Extended Key Usage \
 342 \pard\pardeftab720\ql\qnatural\pardirnatural
 343 \cf0 \
 344 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 345 \cf0 appleCryptoMaintenanceEnv ::= \{ appleCryptoEnv 2\}\
 346 -- 1 2 840 113635 100 4 5 2\
 347 -- Apple Encryption Maintenance Environment Extended Key Usage \
 348 \pard\pardeftab720\ql\qnatural\pardirnatural
 349 \cf0 \
 350 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 351 \cf0 appleCryptoTestEnv ::= \{ appleCryptoEnv 3\}\
 352 -- 1 2 840 113635 100 4 5 3\
 353 -- Apple Encryption Test Environment Extended Key Usage \
 354 \pard\pardeftab720\ql\qnatural\pardirnatural
 355 \cf0 \
 356 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 357 \cf0 appleCryptoDevelopmentEnv ::= \{ appleCryptoEnv 4\}\
 358 -- 1 2 840 113635 100 4 5 4\
 359 -- Apple Encryption Development Environment Extended Key Usage \
 360 \pard\pardeftab720\ql\qnatural\pardirnatural
 361 \cf0 \
 362 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 363 \cf0 appleCryptoQoS ::= \{ appleExtendedKeyUsage 6\}\
 364 -- 1 2 840 113635 100 4 6\
 365 -- Apple Encryption Quality of Service Extended Key Usage \
 366 \pard\pardeftab720\ql\qnatural\pardirnatural
 367 \cf0 \
 368 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 369 \cf0 appleCryptoTier0QoS ::= \{ appleCryptoQoS 1\}\
 370 -- 1 2 840 113635 100 4 6 1\
 371 -- Apple Encryption Tier 0 Quality of Service Extended Key Usage \
 372 \pard\pardeftab720\ql\qnatural\pardirnatural
 373 \cf0 \
 374 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 375 \cf0 appleCryptoTier0QoS ::= \{ appleCryptoQoS 2\}\
 376 -- 1 2 840 113635 100 4 6 2\
 377 -- Apple Encryption Tier 1 Quality of Service Extended Key Usage \
 378 \pard\pardeftab720\ql\qnatural\pardirnatural
 379 \cf0 \
 380 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 381 \cf0 appleCryptoTier0QoS ::= \{ appleCryptoQoS 3\}\
 382 -- 1 2 840 113635 100 4 6 3\
 383 -- Apple Encryption Tier 2 Quality of Service Extended Key Usage \
 384 \pard\pardeftab720\ql\qnatural\pardirnatural
 385 \cf0 \
 386 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 387 \cf0 appleCryptoTier0QoS ::= \{ appleCryptoQoS 4\}\
 388 -- 1 2 840 113635 100 4 6 4\
 389 -- Apple Encryption Tier 3 Quality of Service Extended Key Usage \
 390 \
 391 \pard\pardeftab720\ql\qnatural
 392 \cf0                    appleID ::= \{ appleExtendedKeyUsage 7\}\
 393                         -- 1 2 840 113635 100 4 7\
 394                         -- Apple ID Extended Key Usage\
 395 \pard\pardeftab720\li2880\ql\qnatural\pardirnatural
 396 \cf0 \
 397 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 398 \cf0 \
 399 \pard\pardeftab720\li1440\ql\qnatural\pardirnatural
 400 \cf0 1.1.5 appleCertificatePolicies ::= \{appleDataSecurity 5\}\
 401 -- 1 2 840 113635 100 5\
 402 -- Apple Certificate Policies arc\
 403 \
 404 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 405 \cf0 appleCertificatePolicyID ::= \{ appleCertificatePolicies 1\}\
 406 -- 1 2 840 113635 100 5 1\
 407 -- Apple Certificate Policy \
 408 \pard\pardeftab720\ql\qnatural\pardirnatural
 409 \cf0 \
 410 \pard\pardeftab720\li2160\ql\qnatural\pardirnatural
 411 \cf0 appleDotMacCertificatePolicyID ::= \{ appleCertificatePolicies 2\}\
 412 -- 1 2 840 113635 100 5 2\
 413 -- Apple .Mac certificate policy ID\
 414 \
 415 appleADCCertificatePolicyID ::= \{ appleCertificatePolicies 3\}\
 416 -- 1 2 840 113635 100 5 3\
 417 -- ADC Certificate Policy\
 418 -- unused\
 419 \
 420 appleiPhoneOSDeviceCertificiatePolicyMarker::= \{ appleCertificatePolicies 4\}\
 421 -- 1 2 840 113635 100 5 4\
 422 -- Markers for iPhone OS Device Certificate Policies, used for external sources to trust iPhone OS devices\
 423 \
 424         appleBBCDeviceCertificatePolicyID ::= \{ appleiPhoneOSDeviceCertificiatePolicyMarker 1 \}\
 425         -- 1 2 840 113635 100 5 4 1\
 426         -- BBC's Policy\
 427 \
 428         \
 429 \
 430 \pard\pardeftab720\li1440\ql\qnatural\pardirnatural
 431 \cf0 1.1.6 appleCertificateExtensions ::= \{appleDataSecurity 6\}\
 432 -- 1 2 840 113635 100 6\
 433 -- Apple Certificate Extensions arc\
 434 \
 435         appleCertificateExtensionCodeSigning ::= \{ appleCertificateExtensions 1 \}\
 436         -- 1 2 840 113635 100 6 1\
 437         -- Apple Code Signature\
 438 \
 439                 appleCertificateExtensionAppleSigning ::= \{ appleCertificateExtensionCodeSigning 1 \}\
 440                 -- 1 2 840 113635 100 6 1 1\
 441                 -- Apple Released Code Signature\
 442 \
 443                 appleCertificateExtensionWWDRDevelopmentSigning ::= \{ appleCertificateExtensionCodeSigning 2 \}\
 444                 -- 1 2 840 113635 100 6 1 2\
 445                 -- Apple World Wide Developer Relations Certificates for Code Signing during development\
 446 \
 447                 appleCertificateExtensionAppleReleaseSigning ::= \{ appleCertificateExtensionCodeSigning 3 \}\
 448                 -- 1 2 840 113635 100 6 1 3\
 449                 -- Apple World Wide Developer Relations Certificates for Code Signing for General Release through the iTMS\
 450 \
 451                         appleCertificateExtensionAppleTestSigning ::= \{ appleCertificateExtensionAppleReleaseSigning 1 \}\
 452                         -- 1 2 840 113635 100 6 1 3 1\
 453                         -- Apple World Wide Developer Relations Certificates for Code Signing for Test Release through the iTMS\
 454 \pard\pardeftab720\ql\qnatural
 455 \cf0 \
 456 \pard\pardeftab720\li1440\ql\qnatural\pardirnatural
 457 \cf0            appleCertificateExtensionWWDRSubmissionSigning ::= \{ appleCertificateExtensionCodeSigning 4 \}\
 458                 -- 1 2 840 113635 100 6 1 4\
 459 \pard\pardeftab720\ql\qnatural
 460 \cf0                            -- Apple World Wide Developer Relations Certificates for Code Signing GM from developer to Apple\
 461 \pard\pardeftab720\li1440\ql\qnatural\pardirnatural
 462 \cf0 \
 463 \
 464         appleCertificateExtensionIntermediateMarker ::= \{ appleCertificateExtensions 2 \}\
 465         -- 1 2 840 113635 100 6 2\
 466         -- Extension Markers for Apple Intermediate Certificates\
 467 \
 468                 appleCertificateExtensionWWDRIntermediate ::= \{ appleCertificateExtensionIntermediateMarker 1 \}\
 469                 -- 1 2 840 113635 100 6 2 1\
 470                 -- Marker for the WWDR Intermediate Certificate\
 471 \
 472 \pard\pardeftab720\ql\qnatural
 473 \cf0                            appleCertificateExtensioniTunesStoreIntermediate ::= \{ appleCertificateExtensionIntermediateMarker 2 \}\
 474                                 -- 1 2 840 113635 100 6 2 2\
 475                                 -- Marker for the iTunes Store Intermediate Certificate\
 476 \pard\pardeftab720\ql\qnatural
 477
 478 \f1\fs24 \cf0 \
 479 \pard\pardeftab720\li1440\ql\qnatural\pardirnatural
 480
 481 \f0\fs26 \cf0
 482 \f1\fs24 appleCertificateExtensionClientSSL
 483 \f0\fs26  ::= \{ appleCertificateExtensions 3 \}\
 484         -- 1 2 840 113635 100 6 3\
 485         -- Extension Markers for Apple SSL Push Service\
 486 \
 487 \pard\pardeftab720\ql\qnatural
 488
 489 \f1\fs24 \cf0                           appleCertificateExtensionDevelopmentApplePushServiceClientSSL\'a0::= \{ appleCertificateExtensionClientSSL 1 \}\
 490                                         --\'a01 2 840 113635 100 6 3 1\
 491                                         -- Apple World Wide Developer Relations Client SSL Certificates for Accessing the Development Apple Push Service\
 492 \
 493                                 appleCertificateExtensionProductionApplePushServiceClientSSL\'a0::= \{ appleCertificateExtensionClientSSL 2 \}\
 494                                         --\'a01 2 840 113635 100 6 3 2\
 495                                         -- Apple World Wide Developer Relations Client SSL Certificates for Accessing the Production Apple Push Service\
 496 \pard\pardeftab720\li1440\ql\qnatural\pardirnatural
 497
 498 \f0\fs26 \cf0 \
 499         appleOtherNameExtensionMarker ::= \{ appleCertificateExtensions 4 \}\
 500         -- 1 2 840 113635 100 6 4\
 501         -- Extension Markers for Apple Specific SubjectAltName otherNames\
 502 \
 503                 appleDeviceVersion ::= \{ appleOtherNameExtensionMarker 1 \}\
 504                 -- 1 2 840 113635 100 6 4 1\
 505                 -- Extension Markers for device version string, expects UTF8 to follow in SubjectAltName\
 506                 \
 507                 appleOSVersion ::= \{ appleOtherNameExtensionMarker 2 \}\
 508                 -- 1 2 840 113635 100 6 4 2\
 509                 -- Extension Markers for OS version string, expects UTF8 to follow in SubjectAltName\
 510 \pard\pardeftab720\ql\qnatural
 511
 512 \f1\fs24 \cf0   \
 513 \pard\pardeftab720\ql\qnatural
 514
 515 \f0\fs26 \cf0                   appleCertificateExtensioniTunesStoreData ::= \{ appleCertificateExtensions 5 \} \
 516                         -- 1 2 840 113635 100 6 5\
 517                         -- Apple Receipt Signature\
 518 \
 519                                 appleCertificateExtensioniTSPurchaseReceiptSigning ::= \{ appleCertificateExtensioniTunesStoreData 1 \}\
 520                                 -- 1 2 840 113635 100 6 5 1\
 521                                 -- Apple iTunes Store Certificates for Signing Receipts of Purchases from the iTS\
 522 \
 523                                 appleCertificateExtensioniTSPurchaseRequestSigning ::= \{ appleCertificateExtensioniTunesStoreData 2 \}\
 524                                 -- 1 2 840 113635 100 6 5 2\
 525                                 -- Apple iTunes Store Certificates for Signing Requests to Purchase for the iTS\
 526 \pard\pardeftab720\li1440\ql\qnatural\pardirnatural
 527 \cf0            \
 528 \pard\pardeftab720\ql\qnatural
 529 \cf0 \
 530                         appleCertificateExtensioniPodAccessoryFirmwareUpdate ::= \{ appleCertificateExtensions 6 \} \
 531                         -- 1 2 840 113635 100 6 6\
 532                         -- iPod Accessory Firmware Updates\
 533 \
 534                                 appleCertificateExtensioniPodAccessoryFirmwareUpdateRelease ::= \{ appleCertificateExtensioniPodAccessoryFirmwareUpdate 1 \}\
 535                                 -- 1 2 840 113635 100 6 6 1\
 536                                 -- iPod Accessory Firmware Updates Release Certificates\
 537 \
 538                                 appleCertificateExtensioniPodAccessoryFirmwareUpdateTest ::= \{ appleCertificateExtensioniPodAccessoryFirmwareUpdate 2 \}\
 539                                 -- 1 2 840 113635 100 6 6 2\
 540                                 -- iPod Accessory Firmware Updates Test Certificates\
 541 \pard\pardeftab720\li1440\ql\qnatural\pardirnatural
 542 \cf0 \
 543 \pard\pardeftab720\ql\qnatural
 544
 545 \fs24 \cf0 \
 546                 1.1.7 appleFairPlayCertificate ::= \'a0\{appleDataSecurity 7\}\
 547                 -- 1 2 840 113635 100 7\
 548                 -- Apple FairPlay certificate arc\
 549 \
 550                         1.1.7.2 fairplayCertificateExtension ::= \{ appleFairPlayCertificate 1\}\
 551                         -- 1 2 840 113635 100 7 1\
 552                         -- Apple FairPlay certificate extension arc\
 553 \
 554 \'a0\'a0                                fairplayCertExtensionAAA ::= \{ fairplayCertificateExtension 1\}\
 555 \'a0                            \'a0-- 1 2 840 113635 100 7 1 1\
 556 \'a0                            \'a0-- Apple FairPlay certificate extended Application Authentication & Authorization: Policy\
 557 \
 558 \pard\pardeftab720\li1440\ql\qnatural\pardirnatural
 559
 560 \fs26 \cf0 \
 561 \pard\pardeftab720\ql\qnatural\pardirnatural
 562 \cf0 \
 563 \pard\pardeftab720\ql\qnatural\pardirnatural
 564
 565 \f2\fs24 \cf0 \
 566 \
 567 \pard\pardeftab720\li1440\ql\qnatural\pardirnatural
 568 \cf0 \
 569 \pard\pardeftab720\ql\qnatural\pardirnatural
 570
 571 \b \cf0 \ul \ulc0 Revision History\
 572 \ulnone \
 573 \ul    Date   \ulnone   \ul Change    \
 574
 575 \b0 \ulnone 03/24/10    Added AppleID EKU\
 576 02/10/10        Added appleCertificateExtensioniPodAccessoryFirmwareUpdate subarc\
 577 06/12/09        Added appleCertificateExtensioniTunesStoreData and appleCertificateExtensioniTunesStoreIntermediate\
 578 01/19/09        Adding SSL Push Service Extention Hiearchy\
 579 04/30/08        appleCertificateExtensionAppleReleaseSigning and appleSoftwareUpdateSigning now have .1 testing subordinates\
 580 04/08/08        Added Fairplay Arc\
 581 02/29/08        Fixed Comments for WWDR Phone SDK Cert Extensions\
 582 02/12/08        Changed Code Signing Critical Certificate Extensions from ADC to WWDR - re-ordered them,\
 583                 Added the intermediate cert  marker sub-arc\
 584 01/21/08        Added Code Signing Critical Certificate Extensions\
 585 04/04/07        Added appleCryptoEnv and appleCryptoQoS ExtendedKeyUse trees
 586 \b \
 587
 588 \b0 09/14/06    Added dotMacCertReqEncryptedIChat, dotMacCertReqCollaboration\
 589 08/16/06        Changes AppleCodeSigningPolicy to appleSWUpdateSigningPolicy\
 590                 Added (new) AppleCodeSigningPolicy\
 591                 Added applePackageSigningPolicy\
 592 01/28/05        Added appleCertificatePolicies arc  \
 593                 Moved dotMacCertPolicyID to appleCertificatePolicies arc\
 594 01/25/05        Added dotMacCertPolicyID\
 595 }