Reference record for OID 1.3.6.1.5.5.7.3.27

Parent
1.3.6.1.5.5.7.3 (kp, id-kp, send-kp)
Node code
27
Node name
id-kp-cmcCA
Numeric OID
1.3.6.1.5.5.7.3.27
URN notation
urn:oid:1.3.6.1.5.5.7.3.27
ASN.1 notation

{1 3 6 1 5 5 7 3 27}

  • {iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) kp(3) id-kp-cmcCA(27)}
  • {iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) id-kp(3) id-kp-cmcCA(27)}
  • {iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) send-kp(3) id-kp-cmcCA(27)}
  • {iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) id-pkix(7) kp(3) id-kp-cmcCA(27)}
  • {iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) id-pkix(7) id-kp(3) id-kp-cmcCA(27)}
  • {iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) id-pkix(7) send-kp(3) id-kp-cmcCA(27)}
  • {iso(1) identified-organization(3) dod(6) internet(1) intSecurity(5) mechanisms(5) pkix(7) kp(3) id-kp-cmcCA(27)}
  • {iso(1) identified-organization(3) dod(6) internet(1) intSecurity(5) mechanisms(5) pkix(7) id-kp(3) id-kp-cmcCA(27)}
  • {iso(1) identified-organization(3) dod(6) internet(1) intSecurity(5) mechanisms(5) pkix(7) send-kp(3) id-kp-cmcCA(27)}
  • {iso(1) identified-organization(3) dod(6) internet(1) intSecurity(5) mechanisms(5) id-pkix(7) kp(3) id-kp-cmcCA(27)}
  • {iso(1) identified-organization(3) dod(6) internet(1) intSecurity(5) mechanisms(5) id-pkix(7) id-kp(3) id-kp-cmcCA(27)}
  • {iso(1) identified-organization(3) dod(6) internet(1) intSecurity(5) mechanisms(5) id-pkix(7) send-kp(3) id-kp-cmcCA(27)}
  • {iso(1) org(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) kp(3) id-kp-cmcCA(27)}
  • {iso(1) org(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) id-kp(3) id-kp-cmcCA(27)}
  • {iso(1) org(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) send-kp(3) id-kp-cmcCA(27)}
  • {iso(1) org(3) dod(6) internet(1) security(5) mechanisms(5) id-pkix(7) kp(3) id-kp-cmcCA(27)}
  • Additional combinations skipped.
OID-IRI notation
  • /1/3/6/1/5/5/7/3/27
  • /ISO/Identified-Organization/6/1/5/5/7/3/27
  • /ISO/3/6/1/5/5/7/3/27
Named path variants
  • /iso/identified-organization/dod/internet/security/mechanisms/pkix/kp/id-kp-cmcCA
  • /iso/identified-organization/dod/internet/security/mechanisms/pkix/id-kp/id-kp-cmcCA
  • /iso/identified-organization/dod/internet/security/mechanisms/pkix/send-kp/id-kp-cmcCA
  • /iso/identified-organization/dod/internet/security/mechanisms/id-pkix/kp/id-kp-cmcCA
  • /iso/identified-organization/dod/internet/security/mechanisms/id-pkix/id-kp/id-kp-cmcCA
  • /iso/identified-organization/dod/internet/security/mechanisms/id-pkix/send-kp/id-kp-cmcCA
  • /iso/identified-organization/dod/internet/intSecurity/mechanisms/pkix/kp/id-kp-cmcCA
  • /iso/identified-organization/dod/internet/intSecurity/mechanisms/pkix/id-kp/id-kp-cmcCA
  • /iso/identified-organization/dod/internet/intSecurity/mechanisms/pkix/send-kp/id-kp-cmcCA
  • /iso/identified-organization/dod/internet/intSecurity/mechanisms/id-pkix/kp/id-kp-cmcCA
  • /iso/identified-organization/dod/internet/intSecurity/mechanisms/id-pkix/id-kp/id-kp-cmcCA
  • /iso/identified-organization/dod/internet/intSecurity/mechanisms/id-pkix/send-kp/id-kp-cmcCA
  • /iso/org/dod/internet/security/mechanisms/pkix/kp/id-kp-cmcCA
  • /iso/org/dod/internet/security/mechanisms/pkix/id-kp/id-kp-cmcCA
  • /iso/org/dod/internet/security/mechanisms/pkix/send-kp/id-kp-cmcCA
  • /iso/org/dod/internet/security/mechanisms/id-pkix/kp/id-kp-cmcCA
  • Additional combinations skipped.

Descriptions

IANA SMI Numbers, RFC Editor

id-kp-cmcCA

id-kp-cmcCA — IANA CBOR Encoded X.509 mappings

CMC Certification Authority

Source records

id-kp-cmcCA

Status in source: unspecified.

Names: id-kp-cmcCA

Technical details
{
  "smi_kind": "OBJECT IDENTIFIER",
  "definition": [
    "id-kp-cmcCA",
    "OBJECT",
    "IDENTIFIER",
    "::=",
    "{",
    "id-kp",
    "27",
    "}"
  ]
}
  • RFC Editor · RFC 6402 · RFC errata · Publisher's source file: Certificate Management over CMS (CMC) Updates

    Module: EnrollmentMessageSyntax-2011-v88

    Published definition
    id-kp-cmcCA OBJECT IDENTIFIER ::= { id-kp 27 }
    Module imports
    {'PKIXCRMF-2005': ['CertReqMsg', 'PKIPublicationInfo', 'CertTemplate'], 'PKIX1Explicit88': ['AlgorithmIdentifier', 'Extension', 'Name', 'CertificateSerialNumber', 'id-ad', 'id-kp'], 'PKIX1Implicit88': ['GeneralName', 'CRLReason', 'ReasonFlags', 'GeneralNames'], 'CryptographicMessageSyntax2004': ['ContentInfo', 'Attribute', 'IssuerAndSerialNumber']}
    · Download Certificate Management over CMS (CMC) Updates

    Related source files and packages:


    Source location: EnrollmentMessageSyntax-2011-v88::id-kp-cmcCA.
    Source version and references

    Downloaded: 2026-10-19T00:22:56.153207+00:00.

  • RFC Editor · RFC 10002 · RFC errata · Publisher's source file: Certificate Management over CMS (CMC)

    Module: EnrollmentMessageSyntax-2025

    Published definition
    id-kp-cmcCA OBJECT IDENTIFIER ::= { id-kp 27 }
    Module imports
    {'HMAC-2010': ['maca-hMAC-SHA256'], 'PKIXAlgs-2009': ['mda-sha1'], 'PKIXCRMF-2009': ['CertReqMsg', 'PKIPublicationInfo', 'CertTemplate'], 'PBKDF2-PRFs-2025': ['kda-PBKDF2'], 'PKIX1Explicit-2009': ['Name', 'id-pkix', 'PublicKeyAlgorithms', 'SignatureAlgorithms', 'id-ad', 'id-kp'], 'PKIX1Implicit-2009': ['CertificateSerialNumber', 'GeneralName', 'CRLReason', 'ReasonFlags', 'CertExtensions', 'GeneralNames'], 'PKIX-CommonTypes-2009': ['EXTENSION', 'ATTRIBUTE'], 'AlgorithmInformation-2009': ['DIGEST-ALGORITHM', 'KEY-WRAP', 'KEY-DERIVATION', 'MAC-ALGORITHM', 'SIGNATURE-ALGORITHM', 'PUBLIC-KEY'], 'PKIX1-PSS-OAEP-Algorithms-2009': ['mda-sha256'], 'CryptographicMessageSyntax-2010': ['ContentInfo', 'IssuerAndSerialNumber', 'CONTENT-TYPE'], 'CryptographicMessageSyntaxAlgorithms-2009': ['maca-hMAC-SHA1']}
    · Download Certificate Management over CMS (CMC)

    Related source files and packages:

    Show all 5 related files and packages

    Source location: EnrollmentMessageSyntax-2025::id-kp-cmcCA.
    Source version and references

    Downloaded: 2026-10-19T00:26:54.958160+00:00.

1.3.6.1.5.5.7.3.27

Status in source: unspecified.

Technical details
{
  "value": "27",
  "description": "id-kp-cmcCA"
}

id-kp-cmcCA

Status in source: unspecified.

Names: id-kp-cmcCA

Technical details
{
  "smi_kind": "OBJECT IDENTIFIER",
  "definition": [
    "id-kp-cmcCA",
    "OBJECT",
    "IDENTIFIER",
    "::=",
    "{",
    "iso",
    "(",
    "1",
    ")",
    "identified-organization",
    "(",
    "3",
    ")",
    "dod",
    "(",
    "6",
    ")",
    "internet",
    "(",
    "1",
    ")",
    "security",
    "(",
    "5",
    ")",
    "mechanisms",
    "(",
    "5",
    ")",
    "pkix",
    "(",
    "7",
    ")",
    "kp",
    "(",
    "3",
    ")",
    "27",
    "}"
  ]
}
  • RFC Editor · RFC 9480 · RFC errata · Publisher's source file: Certificate Management Protocol (CMP) Updates · Official record
    Published definition
    id-kp-cmcCA OBJECT IDENTIFIER ::= {
             iso(1) identified-organization(3) dod(6) internet(1)
             security(5) mechanisms(5) pkix(7) kp(3) 27 }

    Source data warning: The appendix publishes many established CMP OID/value mappings as commented examples for selecting supported InfoTypeAndValue contents. Only explicit registered numeric mappings are retained. Comment markers are omitted for comparison, with the exact commented source and edition notes preserved.

    Source data warning: RFC 9480 is superseded by RFC 9810. Its 1988/2002 ASN.1 editions and their dated information-value syntax are retained separately from the later publication.

    Related ASN.1 definitions
    id-kp-cmcCA OBJECT IDENTIFIER ::= {
             iso(1) identified-organization(3) dod(6) internet(1)
             security(5) mechanisms(5) pkix(7) kp(3) 27 }
    -- id-kp-cmcCA OBJECT IDENTIFIER ::= { id-kp 27 }
    -- id-kp-cmcCA OBJECT IDENTIFIER ::= { id-kp 27 }
    RFC 9480 use documented in November 2023

    New Section 4.5 - Extended Key Usage · Section 2.2:

    Dated CMP information-type and PKI entity key-purpose identifiers. The appendix comments document registered information values and their value syntax; enabling a supported information set is environment-specific. These references do not allocate hypothetical future extension values.

    · Download Certificate Management Protocol (CMP) Updates

    Related source files and packages:

    Show all 5 related files and packages

    Source location: RFC9480 supplemental 2.2::id-kp-cmcCA.
    Source version and references

    Downloaded: 2026-10-19T00:26:22.961800+00:00.

  • RFC Editor · RFC 9810 · RFC errata · Publisher's source file: Internet X.509 Public Key Infrastructure -- Certificate Management Protocol (CMP) · Official record
    Published definition
    id-kp-cmcCA OBJECT IDENTIFIER ::= {
            iso(1) identified-organization(3) dod(6) internet(1)
            security(5) mechanisms(5) pkix(7) kp(3) 27 }

    Source data warning: The appendix publishes many established CMP OID/value mappings as commented examples for selecting supported InfoTypeAndValue contents. Only explicit registered numeric mappings are retained. Comment markers are omitted for comparison, with the exact commented source and edition notes preserved.

    Related ASN.1 definitions
    id-kp-cmcCA OBJECT IDENTIFIER ::= {
            iso(1) identified-organization(3) dod(6) internet(1)
            security(5) mechanisms(5) pkix(7) kp(3) 27 }
    -- id-kp-cmcCA OBJECT IDENTIFIER ::= { id-kp 27 }
    RFC 9810 use documented in July 2025

    EKU for PKI Entities · Section 4.5:

    Dated CMP information-type and PKI entity key-purpose identifiers. The appendix comments document registered information values and their value syntax; enabling a supported information set is environment-specific. These references do not allocate hypothetical future extension values.

    · Download Internet X.509 Public Key Infrastructure -- Certificate Management Protocol (CMP)
    Source location: RFC9810 supplemental 4.5::id-kp-cmcCA.
    Source version and references

    Downloaded: 2026-10-19T00:26:43.627077+00:00.

id-kp-cmcCA

Status in source: unspecified.

Names: id-kp-cmcCA

Technical details
{
  "wire_encoding": {
    "hex": "06 08 2b 06 01 05 05 07 03 1b",
    "form": "DER OBJECT IDENTIFIER or AlgorithmIdentifier",
    "numeric_oid_verified": true
  },
  "protocol_mapping": {
    "der": "06 08 2B 06 01 05 05 07 03 1B",
    "value": "15",
    "registry": "c509-extended-key-usages"
  }
}

Information from OID Repository

Automatically extracted from IETF RFC 6402.

First Registration Authority (inferred from ancestor 1.3.6.1.5.5.7)

IETF PKIX Working group

Current Registration Authority (inferred from ancestor 1.3.6.1.5.5.7)

Internet Assigned Numbers Authority (IANA)

Siblings (44)

OIDNameDirect childrenDescendantsDescription
1.3.6.1.5.5.7.3.1 serverAuth, id-kp-serverAuth00 Indicates that a certificate can be used as an SSL server certificate
1.3.6.1.5.5.7.3.2 clientAuth, id-kp-clientAuth00 Indicates that a certificate can be used as a Secure Sockets Layer (SSL) client certificate
1.3.6.1.5.5.7.3.3 codeSigning, id-kp-codeSigning00 Indicates that a certificate can be used for code signing
1.3.6.1.5.5.7.3.4 emailProtection, id-kp-emailProtection00 Indicates that a certificate can be used for protecting email (signing, encryption, key agreement)
1.3.6.1.5.5.7.3.5 ipsecEndSystem, id-kp-ipsecEndSystem00 IPSEC End System Certificate
1.3.6.1.5.5.7.3.6 ipsecTunnel, id-kp-ipsecTunnel00 IPSEC Tunnel Certificate
1.3.6.1.5.5.7.3.7 ipsecUser, id-kp-ipsecUser00 IPSEC User Certificate
1.3.6.1.5.5.7.3.8 timeStamping, id-kp-timeStamping, timestamping00 PKIX key purpose timeStamping

Indicates that a certificate can be used to bind the hash of an object to a time from a trusted …
1.3.6.1.5.5.7.3.9 ocspSigning, id-kp-OCSPSigning77 Indicates that a X.509 Certificates corresponding private key may be used by an authority to sign OCSP-Responses
1.3.6.1.5.5.7.3.10 dvcs, id-kp-dvcs00 PKIX key purpose dvcs
1.3.6.1.5.5.7.3.11 1100 "sbgpCertAAServerAuth" key purpose
1.3.6.1.5.5.7.3.12 1200 id-kp-scvp-responder
1.3.6.1.5.5.7.3.13 id-kp-eapOverPPP00 Extended key usage value: id-kp-eapOverPPP
1.3.6.1.5.5.7.3.14 id-kp-eapOverLAN00 Extended key usage: id-kp-eapOverLAN
1.3.6.1.5.5.7.3.15 id-kp-scvpServer00
1.3.6.1.5.5.7.3.16 id-kp-scvpClient00
1.3.6.1.5.5.7.3.17 id-kp-ipsecIKE00
1.3.6.1.5.5.7.3.18 18, id-kp-capwapAC00
1.3.6.1.5.5.7.3.19 id-kp-capwapWTP00 Control And Provisioning of Wireless Access Points (CAPWAP), Wireless Termination Points (WTP)
1.3.6.1.5.5.7.3.20 id-kp-sipDomain00 Extended Key Usage (EKU) values for Session Initiation Protocol (SIP) domains
1.3.6.1.5.5.7.3.21 secureShellClient, id-kp-secureShellClient00 id-kp-secureShellClient (indicates that the key can be used for a Secure Shell client)
1.3.6.1.5.5.7.3.22 secureShellServer, id-kp-secureShellServer00 id-kp-secureShellServer (indicates that the key can be used for a Secure Shell server)
1.3.6.1.5.5.7.3.23 23, id-kp-sendRouter00 Extended key usage value: id-kp-sendRouter
1.3.6.1.5.5.7.3.24 24, id-kp-sendProxiedRouter00 Extended key usage value: id-kp-sendProxy
1.3.6.1.5.5.7.3.25 25, id-kp-sendOwner00 Extended key usage value: id-kp-sendOwner
1.3.6.1.5.5.7.3.26 26, id-kp-sendProxiedOwner00 Extended key usage value: id-kp-sendProxiedOwner
1.3.6.1.5.5.7.3.28 id-kp-cmcRA00
1.3.6.1.5.5.7.3.29 id-kp-cmcArchive00
1.3.6.1.5.5.7.3.30 id-kp-bgpsec-router00
1.3.6.1.5.5.7.3.31 3100
1.3.6.1.5.5.7.3.32 id-kp-cmKGA00
1.3.6.1.5.5.7.3.33 id-kp-rpcTLSClient00
1.3.6.1.5.5.7.3.34 id-kp-rpcTLSServer00
1.3.6.1.5.5.7.3.35 id-kp-bundleSecurity00
1.3.6.1.5.5.7.3.36 id-kp-documentSigning00
1.3.6.1.5.5.7.3.37 id-kp-jwt00
1.3.6.1.5.5.7.3.38 id-kp-httpContentEncrypt00
1.3.6.1.5.5.7.3.39 id-kp-oauthAccessTokenSigning00
1.3.6.1.5.5.7.3.40 id-kp-imUri00
1.3.6.1.5.5.7.3.41 id-kp-configSigning00
1.3.6.1.5.5.7.3.42 id-kp-trustAnchorConfigSigning00
1.3.6.1.5.5.7.3.43 id-kp-updatePackageSigning00
1.3.6.1.5.5.7.3.44 id-kp-safetyCommunication00
1.3.6.1.5.5.7.3.45 4500