IANA SMI Numbers, RFC Editor
id-kp-cmcCA
{1 3 6 1 5 5 7 3 27}
id-kp-cmcCA
CMC Certification Authority
Status in source: unspecified.
Names: id-kp-cmcCA
{
"smi_kind": "OBJECT IDENTIFIER",
"definition": [
"id-kp-cmcCA",
"OBJECT",
"IDENTIFIER",
"::=",
"{",
"id-kp",
"27",
"}"
]
}Module: EnrollmentMessageSyntax-2011-v88
id-kp-cmcCA OBJECT IDENTIFIER ::= { id-kp 27 }{'PKIXCRMF-2005': ['CertReqMsg', 'PKIPublicationInfo', 'CertTemplate'], 'PKIX1Explicit88': ['AlgorithmIdentifier', 'Extension', 'Name', 'CertificateSerialNumber', 'id-ad', 'id-kp'], 'PKIX1Implicit88': ['GeneralName', 'CRLReason', 'ReasonFlags', 'GeneralNames'], 'CryptographicMessageSyntax2004': ['ContentInfo', 'Attribute', 'IssuerAndSerialNumber']}Related source files and packages:
Downloaded: 2026-10-19T00:22:56.153207+00:00.
Module: EnrollmentMessageSyntax-2025
id-kp-cmcCA OBJECT IDENTIFIER ::= { id-kp 27 }{'HMAC-2010': ['maca-hMAC-SHA256'], 'PKIXAlgs-2009': ['mda-sha1'], 'PKIXCRMF-2009': ['CertReqMsg', 'PKIPublicationInfo', 'CertTemplate'], 'PBKDF2-PRFs-2025': ['kda-PBKDF2'], 'PKIX1Explicit-2009': ['Name', 'id-pkix', 'PublicKeyAlgorithms', 'SignatureAlgorithms', 'id-ad', 'id-kp'], 'PKIX1Implicit-2009': ['CertificateSerialNumber', 'GeneralName', 'CRLReason', 'ReasonFlags', 'CertExtensions', 'GeneralNames'], 'PKIX-CommonTypes-2009': ['EXTENSION', 'ATTRIBUTE'], 'AlgorithmInformation-2009': ['DIGEST-ALGORITHM', 'KEY-WRAP', 'KEY-DERIVATION', 'MAC-ALGORITHM', 'SIGNATURE-ALGORITHM', 'PUBLIC-KEY'], 'PKIX1-PSS-OAEP-Algorithms-2009': ['mda-sha256'], 'CryptographicMessageSyntax-2010': ['ContentInfo', 'IssuerAndSerialNumber', 'CONTENT-TYPE'], 'CryptographicMessageSyntaxAlgorithms-2009': ['maca-hMAC-SHA1']}Related source files and packages:
Downloaded: 2026-10-19T00:26:54.958160+00:00.
Status in source: unspecified.
{
"value": "27",
"description": "id-kp-cmcCA"
}Downloaded: 2026-10-18T22:58:17.903721+00:00.
SMI Security for PKIX Extended Key Purpose · 1.3.6.1.5.5.7.3.
Status in this publication: Assigned.
Allocation policy in this publication: Specification Required. Current IANA registry
27 id-kp-cmcCA [RFC6402]
Downloaded: 2026-10-19T00:23:50.834312+00:00.
Status in source: unspecified.
Names: id-kp-cmcCA
{
"smi_kind": "OBJECT IDENTIFIER",
"definition": [
"id-kp-cmcCA",
"OBJECT",
"IDENTIFIER",
"::=",
"{",
"iso",
"(",
"1",
")",
"identified-organization",
"(",
"3",
")",
"dod",
"(",
"6",
")",
"internet",
"(",
"1",
")",
"security",
"(",
"5",
")",
"mechanisms",
"(",
"5",
")",
"pkix",
"(",
"7",
")",
"kp",
"(",
"3",
")",
"27",
"}"
]
}id-kp-cmcCA OBJECT IDENTIFIER ::= {
iso(1) identified-organization(3) dod(6) internet(1)
security(5) mechanisms(5) pkix(7) kp(3) 27 }Source data warning: The appendix publishes many established CMP OID/value mappings as commented examples for selecting supported InfoTypeAndValue contents. Only explicit registered numeric mappings are retained. Comment markers are omitted for comparison, with the exact commented source and edition notes preserved.
Source data warning: RFC 9480 is superseded by RFC 9810. Its 1988/2002 ASN.1 editions and their dated information-value syntax are retained separately from the later publication.
id-kp-cmcCA OBJECT IDENTIFIER ::= {
iso(1) identified-organization(3) dod(6) internet(1)
security(5) mechanisms(5) pkix(7) kp(3) 27 }-- id-kp-cmcCA OBJECT IDENTIFIER ::= { id-kp 27 }-- id-kp-cmcCA OBJECT IDENTIFIER ::= { id-kp 27 }
New Section 4.5 - Extended Key Usage · Section 2.2:
Dated CMP information-type and PKI entity key-purpose identifiers. The appendix comments document registered information values and their value syntax; enabling a supported information set is environment-specific. These references do not allocate hypothetical future extension values.
Related source files and packages:
Downloaded: 2026-10-19T00:26:22.961800+00:00.
id-kp-cmcCA OBJECT IDENTIFIER ::= {
iso(1) identified-organization(3) dod(6) internet(1)
security(5) mechanisms(5) pkix(7) kp(3) 27 }Source data warning: The appendix publishes many established CMP OID/value mappings as commented examples for selecting supported InfoTypeAndValue contents. Only explicit registered numeric mappings are retained. Comment markers are omitted for comparison, with the exact commented source and edition notes preserved.
id-kp-cmcCA OBJECT IDENTIFIER ::= {
iso(1) identified-organization(3) dod(6) internet(1)
security(5) mechanisms(5) pkix(7) kp(3) 27 }-- id-kp-cmcCA OBJECT IDENTIFIER ::= { id-kp 27 }
EKU for PKI Entities · Section 4.5:
Dated CMP information-type and PKI entity key-purpose identifiers. The appendix comments document registered information values and their value syntax; enabling a supported information set is environment-specific. These references do not allocate hypothetical future extension values.
Downloaded: 2026-10-19T00:26:43.627077+00:00.
Status in source: unspecified.
Names: id-kp-cmcCA
{
"wire_encoding": {
"hex": "06 08 2b 06 01 05 05 07 03 1b",
"form": "DER OBJECT IDENTIFIER or AlgorithmIdentifier",
"numeric_oid_verified": true
},
"protocol_mapping": {
"der": "06 08 2B 06 01 05 05 07 03 1B",
"value": "15",
"registry": "c509-extended-key-usages"
}
}Downloaded: 2026-10-20T03:46:28.337296+00:00.
Internet Assigned Numbers Authority (IANA)
| OID | Name | Direct children | Descendants | Description |
|---|---|---|---|---|
| 1.3.6.1.5.5.7.3.1 | serverAuth, id-kp-serverAuth | 0 | 0 | Indicates that a certificate can be used as an SSL server certificate |
| 1.3.6.1.5.5.7.3.2 | clientAuth, id-kp-clientAuth | 0 | 0 | Indicates that a certificate can be used as a Secure Sockets Layer (SSL) client certificate |
| 1.3.6.1.5.5.7.3.3 | codeSigning, id-kp-codeSigning | 0 | 0 | Indicates that a certificate can be used for code signing |
| 1.3.6.1.5.5.7.3.4 | emailProtection, id-kp-emailProtection | 0 | 0 | Indicates that a certificate can be used for protecting email (signing, encryption, key agreement) |
| 1.3.6.1.5.5.7.3.5 | ipsecEndSystem, id-kp-ipsecEndSystem | 0 | 0 | IPSEC End System Certificate |
| 1.3.6.1.5.5.7.3.6 | ipsecTunnel, id-kp-ipsecTunnel | 0 | 0 | IPSEC Tunnel Certificate |
| 1.3.6.1.5.5.7.3.7 | ipsecUser, id-kp-ipsecUser | 0 | 0 | IPSEC User Certificate |
| 1.3.6.1.5.5.7.3.8 | timeStamping, id-kp-timeStamping, timestamping | 0 | 0 | PKIX key purpose timeStamping Indicates that a certificate can be used to bind the hash of an object to a time from a trusted … |
| 1.3.6.1.5.5.7.3.9 | ocspSigning, id-kp-OCSPSigning | 7 | 7 | Indicates that a X.509 Certificates corresponding private key may be used by an authority to sign OCSP-Responses |
| 1.3.6.1.5.5.7.3.10 | dvcs, id-kp-dvcs | 0 | 0 | PKIX key purpose dvcs |
| 1.3.6.1.5.5.7.3.11 | 11 | 0 | 0 | "sbgpCertAAServerAuth" key purpose |
| 1.3.6.1.5.5.7.3.12 | 12 | 0 | 0 | id-kp-scvp-responder |
| 1.3.6.1.5.5.7.3.13 | id-kp-eapOverPPP | 0 | 0 | Extended key usage value: id-kp-eapOverPPP |
| 1.3.6.1.5.5.7.3.14 | id-kp-eapOverLAN | 0 | 0 | Extended key usage: id-kp-eapOverLAN |
| 1.3.6.1.5.5.7.3.15 | id-kp-scvpServer | 0 | 0 | |
| 1.3.6.1.5.5.7.3.16 | id-kp-scvpClient | 0 | 0 | |
| 1.3.6.1.5.5.7.3.17 | id-kp-ipsecIKE | 0 | 0 | |
| 1.3.6.1.5.5.7.3.18 | 18, id-kp-capwapAC | 0 | 0 | |
| 1.3.6.1.5.5.7.3.19 | id-kp-capwapWTP | 0 | 0 | Control And Provisioning of Wireless Access Points (CAPWAP), Wireless Termination Points (WTP) |
| 1.3.6.1.5.5.7.3.20 | id-kp-sipDomain | 0 | 0 | Extended Key Usage (EKU) values for Session Initiation Protocol (SIP) domains |
| 1.3.6.1.5.5.7.3.21 | secureShellClient, id-kp-secureShellClient | 0 | 0 | id-kp-secureShellClient (indicates that the key can be used for a Secure Shell client) |
| 1.3.6.1.5.5.7.3.22 | secureShellServer, id-kp-secureShellServer | 0 | 0 | id-kp-secureShellServer (indicates that the key can be used for a Secure Shell server) |
| 1.3.6.1.5.5.7.3.23 | 23, id-kp-sendRouter | 0 | 0 | Extended key usage value: id-kp-sendRouter |
| 1.3.6.1.5.5.7.3.24 | 24, id-kp-sendProxiedRouter | 0 | 0 | Extended key usage value: id-kp-sendProxy |
| 1.3.6.1.5.5.7.3.25 | 25, id-kp-sendOwner | 0 | 0 | Extended key usage value: id-kp-sendOwner |
| 1.3.6.1.5.5.7.3.26 | 26, id-kp-sendProxiedOwner | 0 | 0 | Extended key usage value: id-kp-sendProxiedOwner |
| 1.3.6.1.5.5.7.3.28 | id-kp-cmcRA | 0 | 0 | |
| 1.3.6.1.5.5.7.3.29 | id-kp-cmcArchive | 0 | 0 | |
| 1.3.6.1.5.5.7.3.30 | id-kp-bgpsec-router | 0 | 0 | |
| 1.3.6.1.5.5.7.3.31 | 31 | 0 | 0 | |
| 1.3.6.1.5.5.7.3.32 | id-kp-cmKGA | 0 | 0 | |
| 1.3.6.1.5.5.7.3.33 | id-kp-rpcTLSClient | 0 | 0 | |
| 1.3.6.1.5.5.7.3.34 | id-kp-rpcTLSServer | 0 | 0 | |
| 1.3.6.1.5.5.7.3.35 | id-kp-bundleSecurity | 0 | 0 | |
| 1.3.6.1.5.5.7.3.36 | id-kp-documentSigning | 0 | 0 | |
| 1.3.6.1.5.5.7.3.37 | id-kp-jwt | 0 | 0 | |
| 1.3.6.1.5.5.7.3.38 | id-kp-httpContentEncrypt | 0 | 0 | |
| 1.3.6.1.5.5.7.3.39 | id-kp-oauthAccessTokenSigning | 0 | 0 | |
| 1.3.6.1.5.5.7.3.40 | id-kp-imUri | 0 | 0 | |
| 1.3.6.1.5.5.7.3.41 | id-kp-configSigning | 0 | 0 | |
| 1.3.6.1.5.5.7.3.42 | id-kp-trustAnchorConfigSigning | 0 | 0 | |
| 1.3.6.1.5.5.7.3.43 | id-kp-updatePackageSigning | 0 | 0 | |
| 1.3.6.1.5.5.7.3.44 | id-kp-safetyCommunication | 0 | 0 | |
| 1.3.6.1.5.5.7.3.45 | 45 | 0 | 0 |