• Home

  • Documents

  • Siemens Trust Center PKI...1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is...
16
Siemens Trust Center PKI CA Hierarchy Policy 2016 4/2/2019 © Siemens 2019 Ingenuity for life Unrestricted

Siemens Trust Center PKI...1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is reorganized to SOP IT IN COR TSQ CT CYS is reorganized to CT CYS CCS IT This document will

  • Upload
    others

  • View
    3

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Siemens Trust Center PKI...1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is reorganized to SOP IT IN COR TSQ CT CYS is reorganized to CT CYS CCS IT This document will

Siemens Trust Center PKI CA Hierarchy Policy 2016

4/2/2019 © Siemens 2019 Ingenuity for life

Unrestricted

Page 2: Siemens Trust Center PKI...1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is reorganized to SOP IT IN COR TSQ CT CYS is reorganized to CT CYS CCS IT This document will

© Siemens 2019 - All Rights Reserved Unrestricted Page 2 / 16

Document History

Version Date Author Change Comment

1.0 January 31, 2019 M. Fechter / GS IT HR 7 4 First initial version

1.1 March 08, 2019 M. Fechter / GS IT HR 7 4 Department GS IT ISEC changed to CT CYS

1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is reorganized to SOP IT IN COR TSQ

CT CYS is reorganized to CT CYS CCS IT

This document will be reviewed every year or in the event of an important ad-hoc change according to the Information Security update process for documents. Each new version will be approved by the respective management level before being released.

This document is published under www.siemens.com/pki.

Scope and Applicability This document constitutes the Certificate Authority Hierarchy (CA Hierarchy) for the Siemens CA Certificates (Issuing & Root). The purpose of this document is to publicly disclose to subscribers and relying parties the business policies and practices under which Root- and Issuing CA are operated.

Document Status

This document with version 1.2 and status Released has been classified as “Unrestricted“.

Name Department Date

Author Various authors, detailed

information in document

history

Checked by Rufus Buschart

Florian Grotz

Siemens SOP IT IN COR

Siemens SOP IT IN COL 02.04.2019

Authorization Markus Wichmann Siemens CT CYS CCS IT 02.04.2019

This document has been approved by the responsible service owner at Siemens CT CYS CCS IT on April 02, 2019.

http://www.siemens.com/pki
Page 3: Siemens Trust Center PKI...1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is reorganized to SOP IT IN COR TSQ CT CYS is reorganized to CT CYS CCS IT This document will

© Siemens 2019 - All Rights Reserved Unrestricted Page 3 / 16

Table of Content

SCOPE AND APPLICABILITY ......................................................................................................................................... 2

DOCUMENT STATUS .................................................................................................................................................... 2

1 INTRODUCTION ........................................................................................................................................................ 4

1.1 OVERVIEW .................................................................................................................................................................. 4

2 SIEMENS ROOT CA.................................................................................................................................................... 5

2.1 SIEMENS TRUST CENTER ROOT CA V3.0 2016 ................................................................................................................. 5

3 SIEMENS ISSUING CA´S ............................................................................................................................................. 6

3.1 SIEMENS ISSUING CA EE AUTH 2016 .............................................................................................................................. 6 3.2 SIEMENS ISSUING CA EE NETWORK SMARTCARD AUTH 2016 .............................................................................................. 8 3.3 SIEMENS ISSUING CA EE ENC 2016 ................................................................................................................................ 9 3.4 SIEMENS ISSUING CA INTRANET CODE SIGNING 2016 ...................................................................................................... 10 3.5 SIEMENS ISSUING CA MULTI PURPOSE 2016 .................................................................................................................. 11 3.6 SIEMENS ISSUING CA MEDIUM STRENGTH AUTHENTICATION 2016 ..................................................................................... 12 3.7 SIEMENS ISSUING CA MSA IMPERSONALIZED ENTITIES 2016 ............................................................................................. 13 3.8 SIEMENS ISSUING CA INTRANET SERVER 2016 ................................................................................................................ 14 3.9 SIEMENS ISSUING CA INTERNET CODE SIGNING 2016 ....................................................................................................... 15 3.10 SIEMENS ISSUING CA INTERNET SERVER 2016 ................................................................................................................. 16

Page 4: Siemens Trust Center PKI...1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is reorganized to SOP IT IN COR TSQ CT CYS is reorganized to CT CYS CCS IT This document will

© Siemens 2019 - All Rights Reserved Unrestricted Page 4 / 16

1 Introduction This document explains the Siemens CA Hierarchy 2016 (Root & Issuing).

1.1 Overview

The following picture shows the Siemens Root CAs together with the respective Issuing CAs:

Figure 1: Siemens PKI Hierarchy 2016

Page 5: Siemens Trust Center PKI...1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is reorganized to SOP IT IN COR TSQ CT CYS is reorganized to CT CYS CCS IT This document will

© Siemens 2019 - All Rights Reserved Unrestricted Page 5 / 16

2 Siemens Root CA

2.1 Siemens Trust Center Root CA V3.0 2016

Contents Definition Value

Subject Distinguished Name (DN)

CN=Siemens Root CA V3.0 2016;OU=Siemens Trust Center;SN=ZZZZZZA1;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Key Length 4096

Signature Algorithm sha256withRSA

Reference New Cross Certificate Siemens Trust Center Root CA V3.0 2016

Crypto Token Safenet, Inc. - rootca

Issuer Distinguished Name (DN)

CN=Siemens Root CA V3.0 2016;OU=Siemens Trust Center;SN=ZZZZZZA1;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Not Valid After: 12 years

Authority Key Identifier Include Authority Key Identifier

Subject Key Identifier Include Subject Key Identifier

Key Usage Key Cert Sign

CRL Sign

critical

Basic Constraints CA

Path Length -1

critical

Certificate Policies Any Policy 2.5.29.32.0

CPS URI http://www.siemens.com/pki/

Non-Critical

Page 6: Siemens Trust Center PKI...1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is reorganized to SOP IT IN COR TSQ CT CYS is reorganized to CT CYS CCS IT This document will

© Siemens 2019 - All Rights Reserved Unrestricted Page 6 / 16

3 Siemens Issuing CA´s

3.1 Siemens Issuing CA EE Auth 2016

Contents Definition Value

Subject Distinguished Name (DN)

CN=Siemens Issuing CA EE Auth 2016;OU=Siemens Trust Center;SN=ZZZZZZA2;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Key Length 4096

Signature Algorithm sha256withRSA

Reference New Cross Certificate Siemens Issuing CA EE Auth 2016 V2

Crypto Token Safenet, Inc. - issca

Issuer Distinguished Name (DN)

CN=Siemens Root CA V3.0 2016;OU=Siemens Trust Center;SN=ZZZZZZA1;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Not Valid After: 20.07.2022

Authority Information Access Method: CA Issuers

Type: Uniform Resource Identifier

Value: ldap://al.siemens.net/CN=ZZZZZZA1,L=PKI?cACertificate

Authority Information Access Method: CA Issuers

Type: Uniform Resource Identifier

Value: http://ah.siemens.com/pki?ZZZZZZA1.crt

Authority Information Access Method: CA Issuers

Type: Uniform Resource Identifier

Value: ldap://al.siemens.com/uid=ZZZZZZA1,o=Trustcenter?cACertificate

Authority Information Access Method: OCSP

Type: Uniform Resource Identifier

Value: http://ocsp.pki-services.siemens.com

Authority Key Identifier Include Authority Key Identifier

Subject Key Identifier Include Subject Key Identifier

Key Usage Key Cert Sign

CRL Sign

critical

Extended Key Usage kp-ClientAuth

kp-emailProtection

SmartCard Logon

OCSPSigning

Non-Critical

CRL Distribution Point Type: Uniform Resource Identifier

Value: ldap://cl.siemens.net/CN=ZZZZZZA1,L=PKI?authorityRevocationList

CRL Distribution Point Type: Uniform Resource Identifier

Value: http://ch.siemens.com/pki?ZZZZZZA1.crl

CRL Distribution Point Type: Uniform Resource Identifier

Value: ldap://cl.siemens.com/uid=ZZZZZZA1,o=Trustcenter?authorityRevocationList

Basic Constraints CA

Path Length 0

critical

Certificate Policies Siemens Public Key Infrastructure 1.3.6.1.4.1.4329.7.2.2.3.2.1

CPS URI http://www.siemens.com/pki/

Non-Critical

Siemens Public Key Infrastructure 1.3.6.1.4.1.4329.7.2.2.3.1.1

CPS URI http://www.siemens.com/pki/

Non-Critical

http://ah.siemens.com/pki?ZZZZZZA1.crt
Page 7: Siemens Trust Center PKI...1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is reorganized to SOP IT IN COR TSQ CT CYS is reorganized to CT CYS CCS IT This document will

© Siemens 2019 - All Rights Reserved Unrestricted Page 7 / 16

Siemens Public Key Infrastructure 1.3.6.1.4.1.4329.7.2.2.4.1.1

CPS URI http://www.siemens.com/pki/

Non-Critical

Siemens Public Key Infrastructure 1.3.6.1.4.1.4329.7.2.2.3.2.2

CPS URI http://www.siemens.com/pki/

Non-Critical

Siemens Public Key Infrastructure 1.3.6.1.4.1.4329.7.2.2.3.1.2

CPS URI http://www.siemens.com/pki/

Non-Critical

Siemens Public Key Infrastructure 1.3.6.1.4.1.4329.7.2.2.4.1.2

CPS URI http://www.siemens.com/pki/

Non-Critical

Siemens Public Key Infrastructure 1.3.6.1.4.1.4329.7.2.5

CPS URI http://www.siemens.com/pki/

Non-Critical

Page 8: Siemens Trust Center PKI...1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is reorganized to SOP IT IN COR TSQ CT CYS is reorganized to CT CYS CCS IT This document will

© Siemens 2019 - All Rights Reserved Unrestricted Page 8 / 16

3.2 Siemens Issuing CA EE Network Smartcard Auth 2016 Contents Definition Value

Subject Distinguished Name (DN)

CN=Siemens Issuing CA EE Network Smartcard Auth 2016;OU=Siemens Trust Center;SN=ZZZZZZAD;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Key Length 4096

Signature Algorithm sha256withRSA

Reference New Cross Certificate Siemens Issuing CA EE Network Smartcard Auth 2016

Crypto Token Safenet, Inc. - issca

Issuer Distinguished Name (DN)

CN=Siemens Root CA V3.0 2016;OU=Siemens Trust Center;SN=ZZZZZZA1;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Not Valid After: 6 years

Authority Information Access Method: CA Issuers Type: Uniform Resource Identifier Value: ldap://al.siemens.net/CN=ZZZZZZA1,L=PKI?cACertificate

Authority Information Access Method: CA Issuers Type: Uniform Resource Identifier Value: http://ah.siemens.com/pki?ZZZZZZA1.crt

Authority Information Access Method: CA Issuers Type: Uniform Resource Identifier Value: ldap://al.siemens.com/uid=ZZZZZZA1,o=Trustcenter?cACertificate

Authority Information Access Method: OCSP Type: Uniform Resource Identifier Value: http://ocsp.pki-services.siemens.com

Authority Key Identifier Include Authority Key Identifier

Subject Key Identifier Include Subject Key Identifier

Key Usage Key Cert Sign CRL Sign critical

Extended Key Usage kp-ClientAuth

kp-emailProtection

SmartCard Logon

OCSPSigning

Non-Critical

CRL Distribution Point Type: Uniform Resource Identifier Value: ldap://cl.siemens.net/CN=ZZZZZZA1,L=PKI?authorityRevocationList

CRL Distribution Point Type: Uniform Resource Identifier Value: http://ch.siemens.com/pki?ZZZZZZA1.crl

CRL Distribution Point Type: Uniform Resource Identifier

Value: ldap://cl.siemens.com/uid=ZZZZZZA1,o=Trustcenter?authorityRevocationList

Basic Constraints CA Path Length 0 critical

Certificate Policies Siemens Public Key Infrastructure

1.3.6.1.4.1.4329.7

CPS URI http://www.siemens.com/pki/ Non-Critical

http://ah.siemens.com/pki?ZZZZZZA1.crt
Page 9: Siemens Trust Center PKI...1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is reorganized to SOP IT IN COR TSQ CT CYS is reorganized to CT CYS CCS IT This document will

© Siemens 2019 - All Rights Reserved Unrestricted Page 9 / 16

3.3 Siemens Issuing CA EE Enc 2016 Contents Definition Value

Subject Distinguished Name (DN)

CN=Siemens Issuing CA EE Enc 2016;OU=Siemens Trust Center;SN=ZZZZZZA3;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Key Length 4096

Signature Algorithm sha256withRSA

Reference New Cross Certificate

Siemens Issuing CA EE Enc 2016

Crypto Token Safenet, Inc. - issca

Issuer Distinguished Name (DN)

CN=Siemens Root CA V3.0 2016;OU=Siemens Trust Center;SN=ZZZZZZA1;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Not Valid After: 6 years

Authority Information Access Method: CA Issuers Type: Uniform Resource Identifier Value: ldap://al.siemens.net/CN=ZZZZZZA1,L=PKI?cACertificate

Authority Information Access Method: CA Issuers Type: Uniform Resource Identifier Value: http://ah.siemens.com/pki?ZZZZZZA1.crt

Authority Information Access Method: CA Issuers Type: Uniform Resource Identifier Value: ldap://al.siemens.com/uid=ZZZZZZA1,o=Trustcenter?cACertificate

Authority Information Access Method: OCSP Type: Uniform Resource Identifier Value: http://ocsp.pki-services.siemens.com

Authority Key Identifier Include Authority Key Identifier

Subject Key Identifier Include Subject Key Identifier

Key Usage Key Cert Sign CRL Sign critical

Extended Key Usage kp-emailProtection

Encrypting File System (szOID_EFS_CRYPTO)

File Recovery (szOID_EFS_RECOVERY)

OCSPSigning

Non-Critical

CRL Distribution Point Type: Uniform Resource Identifier Value: ldap://cl.siemens.net/CN=ZZZZZZA1,L=PKI?authorityRevocationList

CRL Distribution Point Type: Uniform Resource Identifier Value: http://ch.siemens.com/pki?ZZZZZZA1.crl

CRL Distribution Point Type: Uniform Resource Identifier Value: ldap://cl.siemens.com/uid=ZZZZZZA1,o=Trustcenter?authorityRevocationList

Basic Constraints CA Path Length 0 critical

Certificate Policies Siemens Public Key Infrastructure

1.3.6.1.4.1.4329.7

CPS URI http://www.siemens.com/pki/ Non-Critical

http://ah.siemens.com/pki?ZZZZZZA1.crt
Page 10: Siemens Trust Center PKI...1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is reorganized to SOP IT IN COR TSQ CT CYS is reorganized to CT CYS CCS IT This document will

© Siemens 2019 - All Rights Reserved Unrestricted Page 10 / 16

3.4 Siemens Issuing CA Intranet Code Signing 2016 Contents Definition Value

Subject Distinguished Name (DN)

CN=Siemens Issuing CA Intranet Code Signing 2016;OU=Siemens Trust Center;SN=ZZZZZZA4;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Key Length 4096

Signature Algorithm sha256withRSA

Reference New Cross Certificate

Siemens Issuing CA Intranet Code Signing 2016

Crypto Token Safenet, Inc. - issca

Issuer Distinguished Name (DN)

CN=Siemens Root CA V3.0 2016;OU=Siemens Trust Center;SN=ZZZZZZA1;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Not Valid After: 6 years

Authority Information Access Method: CA Issuers

Type: Uniform Resource Identifier

Value: ldap://al.siemens.net/CN=ZZZZZZA1,L=PKI?cACertificate

Authority Information Access Method: CA Issuers

Type: Uniform Resource Identifier

Value: http://ah.siemens.com/pki?ZZZZZZA1.crt

Authority Information Access Method: CA Issuers

Type: Uniform Resource Identifier

Value: ldap://al.siemens.com/uid=ZZZZZZA1,o=Trustcenter?cACertificate

Authority Information Access Method: OCSP

Type: Uniform Resource Identifier

Value: http://ocsp.pki-services.siemens.com

Authority Key Identifier Include Authority Key Identifier

Subject Key Identifier Include Subject Key Identifier

Key Usage Key Cert Sign

CRL Sign

critical

Extended Key Usage kp-codeSigning

OCSPSigning

Non-Critical

CRL Distribution Point Type: Uniform Resource Identifier

Value: ldap://cl.siemens.net/CN=ZZZZZZA1,L=PKI?authorityRevocationList

CRL Distribution Point Type: Uniform Resource Identifier

Value: http://ch.siemens.com/pki?ZZZZZZA1.crl

CRL Distribution Point Type: Uniform Resource Identifier

Value: ldap://cl.siemens.com/uid=ZZZZZZA1,o=Trustcenter?authorityRevocationList

Basic Constraints CA

Path Length 0

critical

Page 11: Siemens Trust Center PKI...1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is reorganized to SOP IT IN COR TSQ CT CYS is reorganized to CT CYS CCS IT This document will

© Siemens 2019 - All Rights Reserved Unrestricted Page 11 / 16

3.5 Siemens Issuing CA Multi Purpose 2016 Contents Definition Value

Subject Distinguished Name (DN)

CN=Siemens Issuing CA Multi Purpose 2016;OU=Siemens Trust Center;SN=ZZZZZZA5;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Key Length 4096

Signature Algorithm sha256withRSA

Reference New Cross Certificate

Siemens Issuing CA Multi Purpose 2016

Crypto Token Safenet, Inc. - issca

Issuer Distinguished Name (DN)

CN=Siemens Root CA V3.0 2016;OU=Siemens Trust Center;SN=ZZZZZZA1;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Not Valid After: 6 years

Authority Information Access Method: CA Issuers Type: Uniform Resource Identifier Value: ldap://al.siemens.net/CN=ZZZZZZA1,L=PKI?cACertificate

Authority Information Access Method: CA Issuers Type: Uniform Resource Identifier Value: http://ah.siemens.com/pki?ZZZZZZA1.crt

Authority Information Access Method: CA Issuers Type: Uniform Resource Identifier Value: ldap://al.siemens.com/uid=ZZZZZZA1,o=Trustcenter?cACertificate

Authority Information Access Method: OCSP Type: Uniform Resource Identifier Value: http://ocsp.pki-services.siemens.com

Authority Key Identifier Include Authority Key Identifier

Subject Key Identifier Include Subject Key Identifier

Key Usage Key Cert Sign CRL Sign critical

Extended Key Usage kp-ClientAuth

kp-emailProtection

OCSPSigning

Non-Critical

CRL Distribution Point Type: Uniform Resource Identifier Value: ldap://cl.siemens.net/CN=ZZZZZZA1,L=PKI?authorityRevocationList

CRL Distribution Point Type: Uniform Resource Identifier Value: http://ch.siemens.com/pki?ZZZZZZA1.crl

CRL Distribution Point Type: Uniform Resource Identifier Value: ldap://cl.siemens.com/uid=ZZZZZZA1,o=Trustcenter?authorityRevocationList

Basic Constraints CA Path Length 0 critical

Certificate Policies Siemens Public Key Infrastructure

1.3.6.1.4.1.4329.7

CPS URI http://www.siemens.com/pki/ Non-Critical

http://ah.siemens.com/pki?ZZZZZZA1.crt
Page 12: Siemens Trust Center PKI...1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is reorganized to SOP IT IN COR TSQ CT CYS is reorganized to CT CYS CCS IT This document will

© Siemens 2019 - All Rights Reserved Unrestricted Page 12 / 16

3.6 Siemens Issuing CA Medium Strength Authentication 2016 Contents Definition Value

Subject Distinguished Name (DN)

CN=Siemens Issuing CA Medium Strength Authentication 2016;OU=Siemens Trust Center;SN=ZZZZZZA6;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Key Length 4096

Signature Algorithm sha256withRSA

Reference New Cross Certificate

Siemens Issuing CA Medium Strength Authentication 2016

Crypto Token Safenet, Inc. - issca

Issuer Distinguished Name (DN)

CN=Siemens Root CA V3.0 2016;OU=Siemens Trust Center;SN=ZZZZZZA1;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Not Valid After: 6 years

Authority Information Access

Method: CA Issuers

Type: Uniform Resource Identifier Value: ldap://al.siemens.net/CN=ZZZZZZA1,L=PKI?cACertificate

Authority Information Access

Method: CA Issuers

Type: Uniform Resource Identifier Value: http://ah.siemens.com/pki?ZZZZZZA1.crt

Authority Information Access

Method: CA Issuers

Type: Uniform Resource Identifier Value: ldap://al.siemens.com/uid=ZZZZZZA1,o=Trustcenter?cACertificate

Authority Information Access

Method: OCSP

Type: Uniform Resource Identifier Value: http://ocsp.pki-services.siemens.com

Authority Key Identifier Include Authority Key Identifier

Subject Key Identifier Include Subject Key Identifier

Key Usage Key Cert Sign CRL Sign critical

Extended Key Usage kp-ClientAuth

kp-emailProtection

OCSPSigning Non-Critical

CRL Distribution Point Type: Uniform Resource Identifier Value: ldap://cl.siemens.net/CN=ZZZZZZA1,L=PKI?authorityRevocationList

CRL Distribution Point Type: Uniform Resource Identifier Value: http://ch.siemens.com/pki?ZZZZZZA1.crl

CRL Distribution Point Type: Uniform Resource Identifier Value: ldap://cl.siemens.com/uid=ZZZZZZA1,o=Trustcenter?authorityRevocationList

Basic Constraints CA Path Length 0 critical

Certificate Policies Siemens Public Key Infrastructure

1.3.6.1.4.1.4329.7

CPS URI http://www.siemens.com/pki/ Non-Critical

http://ah.siemens.com/pki?ZZZZZZA1.crt
Page 13: Siemens Trust Center PKI...1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is reorganized to SOP IT IN COR TSQ CT CYS is reorganized to CT CYS CCS IT This document will

© Siemens 2019 - All Rights Reserved Unrestricted Page 13 / 16

3.7 Siemens Issuing CA MSA Impersonalized Entities 2016 Contents Definition Value

Subject Distinguished Name (DN)

CN=Siemens Issuing CA MSA Impersonalized Entities 2016;OU=Siemens Trust Center;SN=ZZZZZZAB;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Key Length 4096

Signature Algorithm sha256withRSA

Reference New Cross Certificate

Siemens Issuing CA MSA Impersonalized Entities 2016

Crypto Token Safenet, Inc. - issca

Issuer Distinguished Name (DN)

CN=Siemens Root CA V3.0 2016;OU=Siemens Trust Center;SN=ZZZZZZA1;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Not Valid After: 6 years

Authority Information Access

Method: CA Issuers

Type: Uniform Resource Identifier Value: ldap://al.siemens.net/CN=ZZZZZZA1,L=PKI?cACertificate

Authority Information Access

Method: CA Issuers

Type: Uniform Resource Identifier Value: http://ah.siemens.com/pki?ZZZZZZA1.crt

Authority Information Access

Method: CA Issuers

Type: Uniform Resource Identifier Value: ldap://al.siemens.com/uid=ZZZZZZA1,o=Trustcenter?cACertificate

Authority Information Access

Method: OCSP

Type: Uniform Resource Identifier Value: http://ocsp.pki-services.siemens.com

Authority Key Identifier Include Authority Key Identifier

Subject Key Identifier Include Subject Key Identifier

Key Usage Key Cert Sign CRL Sign critical

Extended Key Usage kp-ClientAuth

OCSPSigning

Non-Critical

CRL Distribution Point Type: Uniform Resource Identifier Value: ldap://cl.siemens.net/CN=ZZZZZZA1,L=PKI?authorityRevocationList

CRL Distribution Point Type: Uniform Resource Identifier Value: http://ch.siemens.com/pki?ZZZZZZA1.crl

CRL Distribution Point Type: Uniform Resource Identifier Value: ldap://cl.siemens.com/uid=ZZZZZZA1,o=Trustcenter?authorityRevocationList

Basic Constraints CA Path Length 0 critical

Certificate Policies Siemens Public Key Infrastructure

1.3.6.1.4.1.4329.7

CPS URI http://www.siemens.com/pki/ Non-Critical

http://ah.siemens.com/pki?ZZZZZZA1.crt
Page 14: Siemens Trust Center PKI...1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is reorganized to SOP IT IN COR TSQ CT CYS is reorganized to CT CYS CCS IT This document will

© Siemens 2019 - All Rights Reserved Unrestricted Page 14 / 16

3.8 Siemens Issuing CA Intranet Server 2016 Contents Definition Value

Subject Distinguished Name (DN)

CN=Siemens Issuing CA Intranet Server 2016;OU=Siemens Trust Center;SN=ZZZZZZA7;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Key Length 4096

Signature Algorithm sha256withRSA

Reference New Cross Certificate

Siemens Issuing CA Intranet Server 2016

Crypto Token Safenet, Inc. - issca

Issuer Distinguished Name (DN)

CN=Siemens Root CA V3.0 2016;OU=Siemens Trust Center;SN=ZZZZZZA1;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Not Valid After: 6 years

Authority Information Access

Method: CA Issuers

Type: Uniform Resource Identifier Value: ldap://al.siemens.net/CN=ZZZZZZA1,L=PKI?cACertificate

Authority Information Access

Method: CA Issuers

Type: Uniform Resource Identifier Value: http://ah.siemens.com/pki?ZZZZZZA1.crt

Authority Information Access

Method: CA Issuers

Type: Uniform Resource Identifier Value: ldap://al.siemens.com/uid=ZZZZZZA1,o=Trustcenter?cACertificate

Authority Information Access

Method: OCSP

Type: Uniform Resource Identifier Value: http://ocsp.pki-services.siemens.com

Authority Key Identifier Include Authority Key Identifier

Subject Key Identifier Include Subject Key Identifier

Key Usage Key Cert Sign CRL Sign critical

Extended Key Usage kp-serverAuth kp-clientAuth OCSPSigning Non-Critical

CRL Distribution Point Type: Uniform Resource Identifier Value: ldap://cl.siemens.net/CN=ZZZZZZA1,L=PKI?authorityRevocationList

CRL Distribution Point Type: Uniform Resource Identifier Value: http://ch.siemens.com/pki?ZZZZZZA1.crl

CRL Distribution Point Type: Uniform Resource Identifier Value: ldap://cl.siemens.com/uid=ZZZZZZA1,o=Trustcenter?authorityRevocationList

Basic Constraints CA Path Length 0 critical

Certificate Policies Siemens Public Key Infrastructure

1.3.6.1.4.1.4329.7

CPS URI http://www.siemens.com/pki/ Non-Critical

http://ah.siemens.com/pki?ZZZZZZA1.crt
Page 15: Siemens Trust Center PKI...1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is reorganized to SOP IT IN COR TSQ CT CYS is reorganized to CT CYS CCS IT This document will

© Siemens 2019 - All Rights Reserved Unrestricted Page 15 / 16

3.9 Siemens Issuing CA Internet Code Signing 2016 Contents Definition Value

Subject Distinguished Name (DN)

CN=Siemens Issuing CA Internet Code Signing 2016;OU=Siemens Trust Center;SN=ZZZZZZA8;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Key Length 4096

Signature Algorithm sha256withRSA

Reference New P10 Request Siemens Issuing CA Internet Code Signing 2016

Crypto Token Safenet, Inc. - issca

Issuer Distinguished Name (DN)

CN = QuoVadis Enterprise Trust CA 2 G3 O = QuoVadis Limited C = BM

Not Valid After: 6 years

Authority Information Access

Method: CA Issuers

Type: Uniform Resource Identifier Value: http://trust.quovadisglobal.com/qventca2g3.crt

Authority Information Access

Method: OCSP

Type: Uniform Resource Identifier Value: http://qventca2g3.ocsp.quovadisglobal.com

Authority Key Identifier Include Authority Key Identifier

Subject Key Identifier Include Subject Key Identifier

Key Usage Key Cert Sign CRL Sign critical

Extended Key Usage kp-codeSigning OCSPSigning Non-Critical

CRL Distribution Point Type: Uniform Resource Identifier Value: http://crl.quovadisglobal.com/qventca2g3.crl

Basic Constraints CA Path Length 0 critical

Certificate Policies QV OID which idenifies Siemens

1.3.6.1.4.1.8024.0.2.1800.0

CPS URI http://www.quovadisglobal.com/repository Non-Critical

Certificate Policies Microsoft Root Program (section 4.A.15) required OID for non EV Code Signing

2.23.140.1.4

CPS URI Non-Critical

Certificate Policies Siemens PKI 1.3.6.1.4.1.4329.7 CPS URI http://www.siemens.com/pki/ Non-Critical

Name Constraints Subtree Type Permitted Subtrees Minimum empty Maximum MAX Name Type Directory Name (X.500) Value C=DE;SP=Bayern;L=Muenchen;O=Siemens

Page 16: Siemens Trust Center PKI...1.2 April 01, 2019 M. Fechter / SOP IT IN COR TSQ GS IT HR 7 4 is reorganized to SOP IT IN COR TSQ CT CYS is reorganized to CT CYS CCS IT This document will

© Siemens 2019 - All Rights Reserved Unrestricted Page 16 / 16

3.10 Siemens Issuing CA Internet Server 2016 Contents Definition Value

Subject Distinguished Name (DN)

CN=Siemens Issuing CA Internet Server 2016;OU=Siemens Trust Center;SN=ZZZZZZA9;O=Siemens;L=Muenchen;SP=Bayern;C=DE

Key Length 4096

Signature Algorithm sha256withRSA

Reference New P10 Request Siemens Issuing CA Internet Server 2016

Crypto Token Safenet, Inc. - issca

Issuer Distinguished Name (DN)

CN = QuoVadis Enterprise Trust CA 2 G3 O = QuoVadis Limited C = BM

Not Valid After: 6 years

Authority Information Access

Method: CA Issuers

Type: Uniform Resource Identifier Value: http://trust.quovadisglobal.com/qventca2g3.crt

Authority Information Access

Method: OCSP

Type: Uniform Resource Identifier Value: http://qventca2g3.ocsp.quovadisglobal.com

Authority Key Identifier Include Authority Key Identifier

Subject Key Identifier Include Subject Key Identifier

Key Usage Key Cert Sign CRL Sign critical

Extended Key Usage kp-clientAuth OCSPSigning kp-serverAuth Non-Critical

CRL Distribution Point Type: Uniform Resource Identifier Value: http://crl.quovadisglobal.com/qventca2g3.crl

Basic Constraints CA Path Length 0 critical

Certificate Policies QV OID which idenifies Siemens

1.3.6.1.4.1.8024.0.2.1800.0

CPS URI http://www.quovadisglobal.com/repository Non-Critical

Certificate Policies OV OID 2.23.140.1.2.2 Non-Critical

Certificate Policies Policy Identifier= PLACEHOLDER. POSSIBLE CAB FORUM OID

1.3.6.1.4.1.4329.7

CPS URI http://www.siemens.com/pki/ Non-Critical


TSQ Endura and TSQ Quantiva Mass Spectrometers …

TSQ Endura and TSQ Quantiva Mass Spectrometers …

Documents
Reorganized National Government of China.pdf

Reorganized National Government of China.pdf

Documents
CYS National Annex to CYS EN 1998-1:2004 Eurocode 8: Design of

CYS National Annex to CYS EN 1998-1:2004 Eurocode 8: Design of

Documents
Finnigan TSQ Quantum Discovery MAXtools.thermofisher.com/content/sfs/manuals/TSQ Quantum...For Research Use Only Not for use in Diagnostic Procedures Finnigan TSQ® Quantum Discovery

Finnigan TSQ Quantum Discovery MAXtools.thermofisher.com/content/sfs/manuals/TSQ Quantum...For Research Use Only Not for use in Diagnostic Procedures Finnigan TSQ® Quantum Discovery

Documents
TSQ Red Hill Presentation

TSQ Red Hill Presentation

Documents
TSQ Altis, TSQ Quantis, and TSQ Fortis Getting Connected Guide … · 2018. 8. 21. · x TSQ Altis, TSQ Quantis, and TSQ Fortis Getting Connected Guide Thermo Scientific Accessing

TSQ Altis, TSQ Quantis, and TSQ Fortis Getting Connected Guide … · 2018. 8. 21. · x TSQ Altis, TSQ Quantis, and TSQ Fortis Getting Connected Guide Thermo Scientific Accessing

Documents
mock cys 1.pdf

mock cys 1.pdf

Documents
Site-directed Mutagenesis of Cys-15 and Cys-20 of Pulmonary

Site-directed Mutagenesis of Cys-15 and Cys-20 of Pulmonary

Documents
Cys-Xaa2-Cys-Xaa4-His-Xaa4-Cys peptide Spectroscopic anda ... · Proc. Natl. Acad. Sci. USA Vol. 86, pp. 4047-4051, June 1989 Biochemistry Aretroviral Cys-Xaa2-Cys-Xaa4-His-Xaa4-Cys

Cys-Xaa2-Cys-Xaa4-His-Xaa4-Cys peptide Spectroscopic anda ... · Proc. Natl. Acad. Sci. USA Vol. 86, pp. 4047-4051, June 1989 Biochemistry Aretroviral Cys-Xaa2-Cys-Xaa4-His-Xaa4-Cys

Documents
Renewable Tsq Rfp

Renewable Tsq Rfp

Documents
ASEAN CYS Proposal

ASEAN CYS Proposal

Documents
TSQ Series II TSQ Altis, TSQ Quantis, and TSQ Fortis ... · The TSQ Altis, TSQ Quantis, and TSQ Fortis Preinstallation Requirements Guide is intended for the following Thermo Scientific™

TSQ Series II TSQ Altis, TSQ Quantis, and TSQ Fortis ... · The TSQ Altis, TSQ Quantis, and TSQ Fortis Preinstallation Requirements Guide is intended for the following Thermo Scientific™

Documents
Laughter Yoga for CYS

Laughter Yoga for CYS

Documents
Cys summercamp2014info

Cys summercamp2014info

Documents
TSQ Endura and TSQ Quantiva Getting Started Guide...xiv TSQ Endura and TSQ Quantiva Getting Started Guide Thermo Scientific Accessing Documentation The TSQ Endura and TSQ Quantiva

TSQ Endura and TSQ Quantiva Getting Started Guide...xiv TSQ Endura and TSQ Quantiva Getting Started Guide Thermo Scientific Accessing Documentation The TSQ Endura and TSQ Quantiva

Documents
TSQ 8000 Evo - Conquer Scientific · Thermo Scientific TSQ 8000 Evo User Guide ix P Preface This guide contains detailed information about how to use your Thermo Scientific TSQ 8000™

TSQ 8000 Evo - Conquer Scientific · Thermo Scientific TSQ 8000 Evo User Guide ix P Preface This guide contains detailed information about how to use your Thermo Scientific TSQ 8000™

Documents
CYS zine - kclibrary.org

CYS zine - kclibrary.org

Documents
Seylan Bank - CA Sri Lanka (Ceylon) Plc, 2014/15) Cargills (Ceylon) Plc J}uNehf;F kw;Wk ; gzpf;$w;W 4.1 epWtdj;jpd ; tsq;fs ; 4.2 ngsjPf 4.3 kdpj tsq;fs ; tsq;fs ; 4.4 epjpfs; tsq;fs

Seylan Bank - CA Sri Lanka (Ceylon) Plc, 2014/15) Cargills (Ceylon) Plc J}uNehf;F kw;Wk ; gzpf;$w;W 4.1 epWtdj;jpd ; tsq;fs ; 4.2 ngsjPf 4.3 kdpj tsq;fs ; tsq;fs ; 4.4 epjpfs; tsq;fs

Documents
TAVOLA ROTONDA: I TUMORI DELLA TIROIDE … MIDOLLARI TIROIDE E...23-38 Cys 609 1 0 1 23-38 Cys 611 3 3 1 23-38 Cys 618 7 9 7 23-38 Cys 620 7 8 4 57 Cys 630 1 1 3 113 Cys 634 68 37

TAVOLA ROTONDA: I TUMORI DELLA TIROIDE … MIDOLLARI TIROIDE E...23-38 Cys 609 1 0 1 23-38 Cys 611 3 3 1 23-38 Cys 618 7 9 7 23-38 Cys 620 7 8 4 57 Cys 630 1 1 3 113 Cys 634 68 37

Documents
Cys profile

Cys profile

Documents
An TSQ-73 Technical Description

An TSQ-73 Technical Description

Documents
Gene Expression Regulation Mutations - Class Websitesclasses.biology.ucsd.edu/bild1.SP16/Lect-18.pdf · UGC (cys) UGG (trp) UGC (cys) UGA (STOP) UGC (cys) UGU (cys) (e.g. Duplications

Gene Expression Regulation Mutations - Class Websitesclasses.biology.ucsd.edu/bild1.SP16/Lect-18.pdf · UGC (cys) UGG (trp) UGC (cys) UGA (STOP) UGC (cys) UGU (cys) (e.g. Duplications

Documents
TSQ Duo - Amazon S3

TSQ Duo - Amazon S3

Documents
Geranylgeranylated Rab in Cys-Ala-Cys, Cys-Cys, carboxyl ... · Proc. NatI. Acad. Sci. USA Vol. 91, pp. 10712-10716, October1994 Biochemistry GeranylgeranylatedRabproteinsterminatingin

Geranylgeranylated Rab in Cys-Ala-Cys, Cys-Cys, carboxyl ... · Proc. NatI. Acad. Sci. USA Vol. 91, pp. 10712-10716, October1994 Biochemistry GeranylgeranylatedRabproteinsterminatingin

Documents
TSQ Vantage Triple-Stage Quadrupole Mass Spectrometertools.thermofisher.com/content/sfs/brochures/TSQ Vantage.pdf0.6 0.7 0.8 0.70 TSQ Vantage with G2 Ion Optics Generation 1 (G1) Ion

TSQ Vantage Triple-Stage Quadrupole Mass Spectrometertools.thermofisher.com/content/sfs/brochures/TSQ Vantage.pdf0.6 0.7 0.8 0.70 TSQ Vantage with G2 Ion Optics Generation 1 (G1) Ion

Documents
SANDING MACHINE · 2019-10-23 · 9 satos TSQ 16 satos TSQ 22 satos TSQ 28 satos TSQ 32 Panel thickness mm 2.5 – 50 2.5 – 50 2.5 – 50 2.5 – 50 Max. panel width mm 1,650 2,250

SANDING MACHINE · 2019-10-23 · 9 satos TSQ 16 satos TSQ 22 satos TSQ 28 satos TSQ 32 Panel thickness mm 2.5 – 50 2.5 – 50 2.5 – 50 2.5 – 50 Max. panel width mm 1,650 2,250

Documents
CYS InnovDesignFeature ShimmeringLace Collar LowRes

CYS InnovDesignFeature ShimmeringLace Collar LowRes

Documents
CYS InnovDesignFeature EthnicStrings Collar LowRes

CYS InnovDesignFeature EthnicStrings Collar LowRes

Documents
Ensuring Customer Success - Thermo Fisher Scientific...Ensuring Customer Success 2 Introduction to Thermo Scientific TSQ Altis MS and TSQ Quantis MS TSQ Altis MS TSQ Quantis MS Performance:

Ensuring Customer Success - Thermo Fisher Scientific...Ensuring Customer Success 2 Introduction to Thermo Scientific TSQ Altis MS and TSQ Quantis MS TSQ Altis MS TSQ Quantis MS Performance:

Documents
TSQ 8000 Evo - Thermo Fisher Scientific

TSQ 8000 Evo - Thermo Fisher Scientific

Documents