<!--
{
  "documentType" : "article",
  "framework" : "Security",
  "identifier" : "/documentation/Security/certificate-oids",
  "metadataVersion" : "0.1.0",
  "role" : "collectionGroup",
  "title" : "Certificate OIDs"
}
-->

# Certificate OIDs

Use OIDs as keys in the dictionary representing certificate values.

## Discussion

These Object Identifiers (OIDs) are the keys that may appear in the dictionary returned by a call to the [`SecCertificateCopyValues(_:_:_:)`](/documentation/Security/SecCertificateCopyValues(_:_:_:)) function. The values associated with these keys are themselves dictionaries that represent the given property of a certificate, and that may have the keys listed in [Certificate Property Keys](/documentation/Security/certificate-property-keys).

## Topics

### Constants

[`let kSecOIDADC_CERT_POLICY: CFString`](/documentation/Security/kSecOIDADC_CERT_POLICY)

[`let kSecOIDAPPLE_CERT_POLICY: CFString`](/documentation/Security/kSecOIDAPPLE_CERT_POLICY)

[`let kSecOIDAPPLE_EKU_CODE_SIGNING: CFString`](/documentation/Security/kSecOIDAPPLE_EKU_CODE_SIGNING)

[`let kSecOIDAPPLE_EKU_CODE_SIGNING_DEV: CFString`](/documentation/Security/kSecOIDAPPLE_EKU_CODE_SIGNING_DEV)

[`let kSecOIDAPPLE_EKU_ICHAT_ENCRYPTION: CFString`](/documentation/Security/kSecOIDAPPLE_EKU_ICHAT_ENCRYPTION)

[`let kSecOIDAPPLE_EKU_ICHAT_SIGNING: CFString`](/documentation/Security/kSecOIDAPPLE_EKU_ICHAT_SIGNING)

[`let kSecOIDAPPLE_EKU_RESOURCE_SIGNING: CFString`](/documentation/Security/kSecOIDAPPLE_EKU_RESOURCE_SIGNING)

[`let kSecOIDAPPLE_EKU_SYSTEM_IDENTITY: CFString`](/documentation/Security/kSecOIDAPPLE_EKU_SYSTEM_IDENTITY)

[`let kSecOIDAPPLE_EXTENSION: CFString`](/documentation/Security/kSecOIDAPPLE_EXTENSION)

[`let kSecOIDAPPLE_EXTENSION_AAI_INTERMEDIATE: CFString`](/documentation/Security/kSecOIDAPPLE_EXTENSION_AAI_INTERMEDIATE)

[`let kSecOIDAPPLE_EXTENSION_ADC_APPLE_SIGNING: CFString`](/documentation/Security/kSecOIDAPPLE_EXTENSION_ADC_APPLE_SIGNING)

[`let kSecOIDAPPLE_EXTENSION_ADC_DEV_SIGNING: CFString`](/documentation/Security/kSecOIDAPPLE_EXTENSION_ADC_DEV_SIGNING)

[`let kSecOIDAPPLE_EXTENSION_APPLEID_INTERMEDIATE: CFString`](/documentation/Security/kSecOIDAPPLE_EXTENSION_APPLEID_INTERMEDIATE)

[`let kSecOIDAPPLE_EXTENSION_APPLE_SIGNING: CFString`](/documentation/Security/kSecOIDAPPLE_EXTENSION_APPLE_SIGNING)

[`let kSecOIDAPPLE_EXTENSION_CODE_SIGNING: CFString`](/documentation/Security/kSecOIDAPPLE_EXTENSION_CODE_SIGNING)

[`let kSecOIDAPPLE_EXTENSION_INTERMEDIATE_MARKER: CFString`](/documentation/Security/kSecOIDAPPLE_EXTENSION_INTERMEDIATE_MARKER)

[`let kSecOIDAPPLE_EXTENSION_ITMS_INTERMEDIATE: CFString`](/documentation/Security/kSecOIDAPPLE_EXTENSION_ITMS_INTERMEDIATE)

[`let kSecOIDAPPLE_EXTENSION_WWDR_INTERMEDIATE: CFString`](/documentation/Security/kSecOIDAPPLE_EXTENSION_WWDR_INTERMEDIATE)

[`let kSecOIDAuthorityInfoAccess: CFString`](/documentation/Security/kSecOIDAuthorityInfoAccess)

[`let kSecOIDAuthorityKeyIdentifier: CFString`](/documentation/Security/kSecOIDAuthorityKeyIdentifier)

[`let kSecOIDBasicConstraints: CFString`](/documentation/Security/kSecOIDBasicConstraints)

[`let kSecOIDBiometricInfo: CFString`](/documentation/Security/kSecOIDBiometricInfo)

[`let kSecOIDCSSMKeyStruct: CFString`](/documentation/Security/kSecOIDCSSMKeyStruct)

[`let kSecOIDCertIssuer: CFString`](/documentation/Security/kSecOIDCertIssuer)

[`let kSecOIDCertificatePolicies: CFString`](/documentation/Security/kSecOIDCertificatePolicies)

[`let kSecOIDClientAuth: CFString`](/documentation/Security/kSecOIDClientAuth)

[`let kSecOIDCollectiveStateProvinceName: CFString`](/documentation/Security/kSecOIDCollectiveStateProvinceName)

[`let kSecOIDCollectiveStreetAddress: CFString`](/documentation/Security/kSecOIDCollectiveStreetAddress)

[`let kSecOIDCommonName: CFString`](/documentation/Security/kSecOIDCommonName)

[`let kSecOIDCountryName: CFString`](/documentation/Security/kSecOIDCountryName)

[`let kSecOIDCrlDistributionPoints: CFString`](/documentation/Security/kSecOIDCrlDistributionPoints)

[`let kSecOIDCrlNumber: CFString`](/documentation/Security/kSecOIDCrlNumber)

[`let kSecOIDCrlReason: CFString`](/documentation/Security/kSecOIDCrlReason)

[`let kSecOIDDOTMAC_CERT_EMAIL_ENCRYPT: CFString`](/documentation/Security/kSecOIDDOTMAC_CERT_EMAIL_ENCRYPT)

[`let kSecOIDDOTMAC_CERT_EMAIL_SIGN: CFString`](/documentation/Security/kSecOIDDOTMAC_CERT_EMAIL_SIGN)

[`let kSecOIDDOTMAC_CERT_EXTENSION: CFString`](/documentation/Security/kSecOIDDOTMAC_CERT_EXTENSION)

[`let kSecOIDDOTMAC_CERT_IDENTITY: CFString`](/documentation/Security/kSecOIDDOTMAC_CERT_IDENTITY)

[`let kSecOIDDOTMAC_CERT_POLICY: CFString`](/documentation/Security/kSecOIDDOTMAC_CERT_POLICY)

[`let kSecOIDDeltaCrlIndicator: CFString`](/documentation/Security/kSecOIDDeltaCrlIndicator)

[`let kSecOIDDescription: CFString`](/documentation/Security/kSecOIDDescription)

[`let kSecOIDEKU_IPSec: CFString`](/documentation/Security/kSecOIDEKU_IPSec)

[`let kSecOIDEmailAddress: CFString`](/documentation/Security/kSecOIDEmailAddress)

[`let kSecOIDEmailProtection: CFString`](/documentation/Security/kSecOIDEmailProtection)

[`let kSecOIDExtendedKeyUsage: CFString`](/documentation/Security/kSecOIDExtendedKeyUsage)

[`let kSecOIDExtendedKeyUsageAny: CFString`](/documentation/Security/kSecOIDExtendedKeyUsageAny)

[`let kSecOIDExtendedUseCodeSigning: CFString`](/documentation/Security/kSecOIDExtendedUseCodeSigning)

[`let kSecOIDGivenName: CFString`](/documentation/Security/kSecOIDGivenName)

[`let kSecOIDHoldInstructionCode: CFString`](/documentation/Security/kSecOIDHoldInstructionCode)

[`let kSecOIDInvalidityDate: CFString`](/documentation/Security/kSecOIDInvalidityDate)

[`let kSecOIDIssuerAltName: CFString`](/documentation/Security/kSecOIDIssuerAltName)

[`let kSecOIDIssuingDistributionPoint: CFString`](/documentation/Security/kSecOIDIssuingDistributionPoint)

[`let kSecOIDIssuingDistributionPoints: CFString`](/documentation/Security/kSecOIDIssuingDistributionPoints)

[`let kSecOIDKERBv5_PKINIT_KP_CLIENT_AUTH: CFString`](/documentation/Security/kSecOIDKERBv5_PKINIT_KP_CLIENT_AUTH)

[`let kSecOIDKERBv5_PKINIT_KP_KDC: CFString`](/documentation/Security/kSecOIDKERBv5_PKINIT_KP_KDC)

[`let kSecOIDKeyUsage: CFString`](/documentation/Security/kSecOIDKeyUsage)

[`let kSecOIDLocalityName: CFString`](/documentation/Security/kSecOIDLocalityName)

[`let kSecOIDMS_NTPrincipalName: CFString`](/documentation/Security/kSecOIDMS_NTPrincipalName)

[`let kSecOIDMicrosoftSGC: CFString`](/documentation/Security/kSecOIDMicrosoftSGC)

[`let kSecOIDNameConstraints: CFString`](/documentation/Security/kSecOIDNameConstraints)

[`let kSecOIDNetscapeCertSequence: CFString`](/documentation/Security/kSecOIDNetscapeCertSequence)

[`let kSecOIDNetscapeCertType: CFString`](/documentation/Security/kSecOIDNetscapeCertType)

[`let kSecOIDNetscapeSGC: CFString`](/documentation/Security/kSecOIDNetscapeSGC)

[`let kSecOIDOCSPSigning: CFString`](/documentation/Security/kSecOIDOCSPSigning)

[`let kSecOIDOrganizationName: CFString`](/documentation/Security/kSecOIDOrganizationName)

[`let kSecOIDOrganizationalUnitName: CFString`](/documentation/Security/kSecOIDOrganizationalUnitName)

[`let kSecOIDPolicyConstraints: CFString`](/documentation/Security/kSecOIDPolicyConstraints)

[`let kSecOIDPolicyMappings: CFString`](/documentation/Security/kSecOIDPolicyMappings)

[`let kSecOIDPrivateKeyUsagePeriod: CFString`](/documentation/Security/kSecOIDPrivateKeyUsagePeriod)

[`let kSecOIDQC_Statements: CFString`](/documentation/Security/kSecOIDQC_Statements)

[`let kSecOIDSRVName: CFString`](/documentation/Security/kSecOIDSRVName)

[`let kSecOIDSerialNumber: CFString`](/documentation/Security/kSecOIDSerialNumber)

[`let kSecOIDServerAuth: CFString`](/documentation/Security/kSecOIDServerAuth)

[`let kSecOIDStateProvinceName: CFString`](/documentation/Security/kSecOIDStateProvinceName)

[`let kSecOIDStreetAddress: CFString`](/documentation/Security/kSecOIDStreetAddress)

[`let kSecOIDSubjectAltName: CFString`](/documentation/Security/kSecOIDSubjectAltName)

[`let kSecOIDSubjectDirectoryAttributes: CFString`](/documentation/Security/kSecOIDSubjectDirectoryAttributes)

[`let kSecOIDSubjectEmailAddress: CFString`](/documentation/Security/kSecOIDSubjectEmailAddress)

[`let kSecOIDSubjectInfoAccess: CFString`](/documentation/Security/kSecOIDSubjectInfoAccess)

[`let kSecOIDSubjectKeyIdentifier: CFString`](/documentation/Security/kSecOIDSubjectKeyIdentifier)

[`let kSecOIDSubjectPicture: CFString`](/documentation/Security/kSecOIDSubjectPicture)

[`let kSecOIDSubjectSignatureBitmap: CFString`](/documentation/Security/kSecOIDSubjectSignatureBitmap)

[`let kSecOIDSurname: CFString`](/documentation/Security/kSecOIDSurname)

[`let kSecOIDTimeStamping: CFString`](/documentation/Security/kSecOIDTimeStamping)

[`let kSecOIDTitle: CFString`](/documentation/Security/kSecOIDTitle)

[`let kSecOIDUseExemptions: CFString`](/documentation/Security/kSecOIDUseExemptions)

[`let kSecOIDX509V1CertificateIssuerUniqueId: CFString`](/documentation/Security/kSecOIDX509V1CertificateIssuerUniqueId)

[`let kSecOIDX509V1CertificateSubjectUniqueId: CFString`](/documentation/Security/kSecOIDX509V1CertificateSubjectUniqueId)

[`let kSecOIDX509V1IssuerName: CFString`](/documentation/Security/kSecOIDX509V1IssuerName)

[`let kSecOIDX509V1IssuerNameCStruct: CFString`](/documentation/Security/kSecOIDX509V1IssuerNameCStruct)

[`let kSecOIDX509V1IssuerNameLDAP: CFString`](/documentation/Security/kSecOIDX509V1IssuerNameLDAP)

[`let kSecOIDX509V1IssuerNameStd: CFString`](/documentation/Security/kSecOIDX509V1IssuerNameStd)

[`let kSecOIDX509V1SerialNumber: CFString`](/documentation/Security/kSecOIDX509V1SerialNumber)

[`let kSecOIDX509V1Signature: CFString`](/documentation/Security/kSecOIDX509V1Signature)

[`let kSecOIDX509V1SignatureAlgorithm: CFString`](/documentation/Security/kSecOIDX509V1SignatureAlgorithm)

[`let kSecOIDX509V1SignatureAlgorithmParameters: CFString`](/documentation/Security/kSecOIDX509V1SignatureAlgorithmParameters)

[`let kSecOIDX509V1SignatureAlgorithmTBS: CFString`](/documentation/Security/kSecOIDX509V1SignatureAlgorithmTBS)

[`let kSecOIDX509V1SignatureCStruct: CFString`](/documentation/Security/kSecOIDX509V1SignatureCStruct)

[`let kSecOIDX509V1SignatureStruct: CFString`](/documentation/Security/kSecOIDX509V1SignatureStruct)

[`let kSecOIDX509V1SubjectName: CFString`](/documentation/Security/kSecOIDX509V1SubjectName)

[`let kSecOIDX509V1SubjectNameCStruct: CFString`](/documentation/Security/kSecOIDX509V1SubjectNameCStruct)

[`let kSecOIDX509V1SubjectNameLDAP: CFString`](/documentation/Security/kSecOIDX509V1SubjectNameLDAP)

[`let kSecOIDX509V1SubjectNameStd: CFString`](/documentation/Security/kSecOIDX509V1SubjectNameStd)

[`let kSecOIDX509V1SubjectPublicKey: CFString`](/documentation/Security/kSecOIDX509V1SubjectPublicKey)

[`let kSecOIDX509V1SubjectPublicKeyAlgorithm: CFString`](/documentation/Security/kSecOIDX509V1SubjectPublicKeyAlgorithm)

[`let kSecOIDX509V1SubjectPublicKeyAlgorithmParameters: CFString`](/documentation/Security/kSecOIDX509V1SubjectPublicKeyAlgorithmParameters)

[`let kSecOIDX509V1SubjectPublicKeyCStruct: CFString`](/documentation/Security/kSecOIDX509V1SubjectPublicKeyCStruct)

[`let kSecOIDX509V1ValidityNotAfter: CFString`](/documentation/Security/kSecOIDX509V1ValidityNotAfter)

[`let kSecOIDX509V1ValidityNotBefore: CFString`](/documentation/Security/kSecOIDX509V1ValidityNotBefore)

[`let kSecOIDX509V1Version: CFString`](/documentation/Security/kSecOIDX509V1Version)

[`let kSecOIDX509V3Certificate: CFString`](/documentation/Security/kSecOIDX509V3Certificate)

[`let kSecOIDX509V3CertificateCStruct: CFString`](/documentation/Security/kSecOIDX509V3CertificateCStruct)

[`let kSecOIDX509V3CertificateExtensionCStruct: CFString`](/documentation/Security/kSecOIDX509V3CertificateExtensionCStruct)

[`let kSecOIDX509V3CertificateExtensionCritical: CFString`](/documentation/Security/kSecOIDX509V3CertificateExtensionCritical)

[`let kSecOIDX509V3CertificateExtensionId: CFString`](/documentation/Security/kSecOIDX509V3CertificateExtensionId)

[`let kSecOIDX509V3CertificateExtensionStruct: CFString`](/documentation/Security/kSecOIDX509V3CertificateExtensionStruct)

[`let kSecOIDX509V3CertificateExtensionType: CFString`](/documentation/Security/kSecOIDX509V3CertificateExtensionType)

[`let kSecOIDX509V3CertificateExtensionValue: CFString`](/documentation/Security/kSecOIDX509V3CertificateExtensionValue)

[`let kSecOIDX509V3CertificateExtensionsCStruct: CFString`](/documentation/Security/kSecOIDX509V3CertificateExtensionsCStruct)

[`let kSecOIDX509V3CertificateExtensionsStruct: CFString`](/documentation/Security/kSecOIDX509V3CertificateExtensionsStruct)

[`let kSecOIDX509V3CertificateNumberOfExtensions: CFString`](/documentation/Security/kSecOIDX509V3CertificateNumberOfExtensions)

[`let kSecOIDX509V3SignedCertificate: CFString`](/documentation/Security/kSecOIDX509V3SignedCertificate)

[`let kSecOIDX509V3SignedCertificateCStruct: CFString`](/documentation/Security/kSecOIDX509V3SignedCertificateCStruct)


---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)