BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

B.1 PIV Object Identifiers

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
added Appendix B PIV Object Identifiers and Certificate Extension part of B

Title changed

Before · FIPS 201-2

After · FIPS 201-3

PIV Object Identifiers

Control changed

Before · FIPS 201-2

After · FIPS 201-3

Table B-1, Table B-2, and Table B-3 list details for PIV object identifiers.

Table B-1. PIV Object Identifiers for PIV eContent Types

ID Object Identifier Description id-PIV- CHUIDSecurityObject 2.16.840.1.101.3.6.1 The associated content is the concatenated contents of the CHUID, excluding the asymmetric signature field. id-PIV - biometricObject 2.16.840.1.101.3.6.2 The associated content is the concatenated CBEFF_HEADER + STD_BIOMETRIC_RECORD . Table B-2. PIV Object Identifiers for PIV Attributes

ID Object Identifier Description pivCardholder- Name 2.16.840.1.101.3.6.3 The attribute value is of type DirectoryString and specifies the PIV cardholder’s name. pivCardholder-DN 2.16.840.1.101.3.6.4 The attribute value is an X.501 type Name and specifies the DN associated with the PIV cardholder in the PIV certificates. pivSigner-DN 2.16.840.1.101.3.6.5 The attribute value is an X.501 type Name and specifies the subject name that appears in the PKI certificate for the entity that signed the biometric data record or CHUID. pivFASC-N 2.16.840.1.101.3.6.6 The pivFASC-N OID MAY appear as an X.501 type Name in the otherName field of the Subject Alternative Name extension of X.509 certificates or a signed attribute in CMS external signatures. Where used as an X.501 type Name, the syntax is OCTET STRING. Where used as an attribute, the attribute value is of type OCTET STRING. In each case, the value specifies the FASC - N of the PIV Card.

Table B-3. PIV Object Identifiers for PIV Extended Key Usage

ID Object Identifier Description id-PIV-content - signing 2.16.840.1.101.3.6.7 This specifies that the public key MAY be used to verify signatures on CHUIDs and biometric data records. id-PIV-cardAuth 2.16.840.1.101.3.6.8 This specifies that the public key is used to authenticate the PIV Card rather than the PIV cardholder.

The OIDs for certificate policies are specified in [COMMON].