---
title: Certificate OIDs
framework: security
role: collectionGroup
role_heading: API Collection
path: security/certificate-oids
---

# Certificate OIDs

Use OIDs as keys in the dictionary representing certificate values.

## Overview

Overview These Object Identifiers (OIDs) are the keys that may appear in the dictionary returned by a call to the SecCertificateCopyValues(_:_:_:) function. The values associated with these keys are themselves dictionaries that represent the given property of a certificate, and that may have the keys listed in Certificate Property Keys.

## Topics

### Constants

- [kSecOIDADC_CERT_POLICY](security/ksecoidadc_cert_policy.md)
- [kSecOIDAPPLE_CERT_POLICY](security/ksecoidapple_cert_policy.md)
- [kSecOIDAPPLE_EKU_CODE_SIGNING](security/ksecoidapple_eku_code_signing.md)
- [kSecOIDAPPLE_EKU_CODE_SIGNING_DEV](security/ksecoidapple_eku_code_signing_dev.md)
- [kSecOIDAPPLE_EKU_ICHAT_ENCRYPTION](security/ksecoidapple_eku_ichat_encryption.md)
- [kSecOIDAPPLE_EKU_ICHAT_SIGNING](security/ksecoidapple_eku_ichat_signing.md)
- [kSecOIDAPPLE_EKU_RESOURCE_SIGNING](security/ksecoidapple_eku_resource_signing.md)
- [kSecOIDAPPLE_EKU_SYSTEM_IDENTITY](security/ksecoidapple_eku_system_identity.md)
- [kSecOIDAPPLE_EXTENSION](security/ksecoidapple_extension.md)
- [kSecOIDAPPLE_EXTENSION_AAI_INTERMEDIATE](security/ksecoidapple_extension_aai_intermediate.md)
- [kSecOIDAPPLE_EXTENSION_ADC_APPLE_SIGNING](security/ksecoidapple_extension_adc_apple_signing.md)
- [kSecOIDAPPLE_EXTENSION_ADC_DEV_SIGNING](security/ksecoidapple_extension_adc_dev_signing.md)
- [kSecOIDAPPLE_EXTENSION_APPLEID_INTERMEDIATE](security/ksecoidapple_extension_appleid_intermediate.md)
- [kSecOIDAPPLE_EXTENSION_APPLE_SIGNING](security/ksecoidapple_extension_apple_signing.md)
- [kSecOIDAPPLE_EXTENSION_CODE_SIGNING](security/ksecoidapple_extension_code_signing.md)
- [kSecOIDAPPLE_EXTENSION_INTERMEDIATE_MARKER](security/ksecoidapple_extension_intermediate_marker.md)
- [kSecOIDAPPLE_EXTENSION_ITMS_INTERMEDIATE](security/ksecoidapple_extension_itms_intermediate.md)
- [kSecOIDAPPLE_EXTENSION_WWDR_INTERMEDIATE](security/ksecoidapple_extension_wwdr_intermediate.md)
- [kSecOIDAuthorityInfoAccess](security/ksecoidauthorityinfoaccess.md)
- [kSecOIDAuthorityKeyIdentifier](security/ksecoidauthoritykeyidentifier.md)
- [kSecOIDBasicConstraints](security/ksecoidbasicconstraints.md)
- [kSecOIDBiometricInfo](security/ksecoidbiometricinfo.md)
- [kSecOIDCSSMKeyStruct](security/ksecoidcssmkeystruct.md)
- [kSecOIDCertIssuer](security/ksecoidcertissuer.md)
- [kSecOIDCertificatePolicies](security/ksecoidcertificatepolicies.md)
- [kSecOIDClientAuth](security/ksecoidclientauth.md)
- [kSecOIDCollectiveStateProvinceName](security/ksecoidcollectivestateprovincename.md)
- [kSecOIDCollectiveStreetAddress](security/ksecoidcollectivestreetaddress.md)
- [kSecOIDCommonName](security/ksecoidcommonname.md)
- [kSecOIDCountryName](security/ksecoidcountryname.md)
- [kSecOIDCrlDistributionPoints](security/ksecoidcrldistributionpoints.md)
- [kSecOIDCrlNumber](security/ksecoidcrlnumber.md)
- [kSecOIDCrlReason](security/ksecoidcrlreason.md)
- [kSecOIDDOTMAC_CERT_EMAIL_ENCRYPT](security/ksecoiddotmac_cert_email_encrypt.md)
- [kSecOIDDOTMAC_CERT_EMAIL_SIGN](security/ksecoiddotmac_cert_email_sign.md)
- [kSecOIDDOTMAC_CERT_EXTENSION](security/ksecoiddotmac_cert_extension.md)
- [kSecOIDDOTMAC_CERT_IDENTITY](security/ksecoiddotmac_cert_identity.md)
- [kSecOIDDOTMAC_CERT_POLICY](security/ksecoiddotmac_cert_policy.md)
- [kSecOIDDeltaCrlIndicator](security/ksecoiddeltacrlindicator.md)
- [kSecOIDDescription](security/ksecoiddescription.md)
- [kSecOIDEKU_IPSec](security/ksecoideku_ipsec.md)
- [kSecOIDEmailAddress](security/ksecoidemailaddress.md)
- [kSecOIDEmailProtection](security/ksecoidemailprotection.md)
- [kSecOIDExtendedKeyUsage](security/ksecoidextendedkeyusage.md)
- [kSecOIDExtendedKeyUsageAny](security/ksecoidextendedkeyusageany.md)
- [kSecOIDExtendedUseCodeSigning](security/ksecoidextendedusecodesigning.md)
- [kSecOIDGivenName](security/ksecoidgivenname.md)
- [kSecOIDHoldInstructionCode](security/ksecoidholdinstructioncode.md)
- [kSecOIDInvalidityDate](security/ksecoidinvaliditydate.md)
- [kSecOIDIssuerAltName](security/ksecoidissueraltname.md)
- [kSecOIDIssuingDistributionPoint](security/ksecoidissuingdistributionpoint.md)
- [kSecOIDIssuingDistributionPoints](security/ksecoidissuingdistributionpoints.md)
- [kSecOIDKERBv5_PKINIT_KP_CLIENT_AUTH](security/ksecoidkerbv5_pkinit_kp_client_auth.md)
- [kSecOIDKERBv5_PKINIT_KP_KDC](security/ksecoidkerbv5_pkinit_kp_kdc.md)
- [kSecOIDKeyUsage](security/ksecoidkeyusage.md)
- [kSecOIDLocalityName](security/ksecoidlocalityname.md)
- [kSecOIDMS_NTPrincipalName](security/ksecoidms_ntprincipalname.md)
- [kSecOIDMicrosoftSGC](security/ksecoidmicrosoftsgc.md)
- [kSecOIDNameConstraints](security/ksecoidnameconstraints.md)
- [kSecOIDNetscapeCertSequence](security/ksecoidnetscapecertsequence.md)
- [kSecOIDNetscapeCertType](security/ksecoidnetscapecerttype.md)
- [kSecOIDNetscapeSGC](security/ksecoidnetscapesgc.md)
- [kSecOIDOCSPSigning](security/ksecoidocspsigning.md)
- [kSecOIDOrganizationName](security/ksecoidorganizationname.md)
- [kSecOIDOrganizationalUnitName](security/ksecoidorganizationalunitname.md)
- [kSecOIDPolicyConstraints](security/ksecoidpolicyconstraints.md)
- [kSecOIDPolicyMappings](security/ksecoidpolicymappings.md)
- [kSecOIDPrivateKeyUsagePeriod](security/ksecoidprivatekeyusageperiod.md)
- [kSecOIDQC_Statements](security/ksecoidqc_statements.md)
- [kSecOIDSRVName](security/ksecoidsrvname.md)
- [kSecOIDSerialNumber](security/ksecoidserialnumber.md)
- [kSecOIDServerAuth](security/ksecoidserverauth.md)
- [kSecOIDStateProvinceName](security/ksecoidstateprovincename.md)
- [kSecOIDStreetAddress](security/ksecoidstreetaddress.md)
- [kSecOIDSubjectAltName](security/ksecoidsubjectaltname.md)
- [kSecOIDSubjectDirectoryAttributes](security/ksecoidsubjectdirectoryattributes.md)
- [kSecOIDSubjectEmailAddress](security/ksecoidsubjectemailaddress.md)
- [kSecOIDSubjectInfoAccess](security/ksecoidsubjectinfoaccess.md)
- [kSecOIDSubjectKeyIdentifier](security/ksecoidsubjectkeyidentifier.md)
- [kSecOIDSubjectPicture](security/ksecoidsubjectpicture.md)
- [kSecOIDSubjectSignatureBitmap](security/ksecoidsubjectsignaturebitmap.md)
- [kSecOIDSurname](security/ksecoidsurname.md)
- [kSecOIDTimeStamping](security/ksecoidtimestamping.md)
- [kSecOIDTitle](security/ksecoidtitle.md)
- [kSecOIDUseExemptions](security/ksecoiduseexemptions.md)
- [kSecOIDX509V1CertificateIssuerUniqueId](security/ksecoidx509v1certificateissueruniqueid.md)
- [kSecOIDX509V1CertificateSubjectUniqueId](security/ksecoidx509v1certificatesubjectuniqueid.md)
- [kSecOIDX509V1IssuerName](security/ksecoidx509v1issuername.md)
- [kSecOIDX509V1IssuerNameCStruct](security/ksecoidx509v1issuernamecstruct.md)
- [kSecOIDX509V1IssuerNameLDAP](security/ksecoidx509v1issuernameldap.md)
- [kSecOIDX509V1IssuerNameStd](security/ksecoidx509v1issuernamestd.md)
- [kSecOIDX509V1SerialNumber](security/ksecoidx509v1serialnumber.md)
- [kSecOIDX509V1Signature](security/ksecoidx509v1signature.md)
- [kSecOIDX509V1SignatureAlgorithm](security/ksecoidx509v1signaturealgorithm.md)
- [kSecOIDX509V1SignatureAlgorithmParameters](security/ksecoidx509v1signaturealgorithmparameters.md)
- [kSecOIDX509V1SignatureAlgorithmTBS](security/ksecoidx509v1signaturealgorithmtbs.md)
- [kSecOIDX509V1SignatureCStruct](security/ksecoidx509v1signaturecstruct.md)
- [kSecOIDX509V1SignatureStruct](security/ksecoidx509v1signaturestruct.md)
- [kSecOIDX509V1SubjectName](security/ksecoidx509v1subjectname.md)
- [kSecOIDX509V1SubjectNameCStruct](security/ksecoidx509v1subjectnamecstruct.md)
- [kSecOIDX509V1SubjectNameLDAP](security/ksecoidx509v1subjectnameldap.md)
- [kSecOIDX509V1SubjectNameStd](security/ksecoidx509v1subjectnamestd.md)
- [kSecOIDX509V1SubjectPublicKey](security/ksecoidx509v1subjectpublickey.md)
- [kSecOIDX509V1SubjectPublicKeyAlgorithm](security/ksecoidx509v1subjectpublickeyalgorithm.md)
- [kSecOIDX509V1SubjectPublicKeyAlgorithmParameters](security/ksecoidx509v1subjectpublickeyalgorithmparameters.md)
- [kSecOIDX509V1SubjectPublicKeyCStruct](security/ksecoidx509v1subjectpublickeycstruct.md)
- [kSecOIDX509V1ValidityNotAfter](security/ksecoidx509v1validitynotafter.md)
- [kSecOIDX509V1ValidityNotBefore](security/ksecoidx509v1validitynotbefore.md)
- [kSecOIDX509V1Version](security/ksecoidx509v1version.md)
- [kSecOIDX509V3Certificate](security/ksecoidx509v3certificate.md)
- [kSecOIDX509V3CertificateCStruct](security/ksecoidx509v3certificatecstruct.md)
- [kSecOIDX509V3CertificateExtensionCStruct](security/ksecoidx509v3certificateextensioncstruct.md)
- [kSecOIDX509V3CertificateExtensionCritical](security/ksecoidx509v3certificateextensioncritical.md)
- [kSecOIDX509V3CertificateExtensionId](security/ksecoidx509v3certificateextensionid.md)
- [kSecOIDX509V3CertificateExtensionStruct](security/ksecoidx509v3certificateextensionstruct.md)
- [kSecOIDX509V3CertificateExtensionType](security/ksecoidx509v3certificateextensiontype.md)
- [kSecOIDX509V3CertificateExtensionValue](security/ksecoidx509v3certificateextensionvalue.md)
- [kSecOIDX509V3CertificateExtensionsCStruct](security/ksecoidx509v3certificateextensionscstruct.md)
- [kSecOIDX509V3CertificateExtensionsStruct](security/ksecoidx509v3certificateextensionsstruct.md)
- [kSecOIDX509V3CertificateNumberOfExtensions](security/ksecoidx509v3certificatenumberofextensions.md)
- [kSecOIDX509V3SignedCertificate](security/ksecoidx509v3signedcertificate.md)
- [kSecOIDX509V3SignedCertificateCStruct](security/ksecoidx509v3signedcertificatecstruct.md)