Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I was looking at this site, and out of interest, I was having a look at the certificate in Chrome 32, on Windows 8.1, and I had a look at the certificate.

I saw this really strange intention, Apart from the usual:

Ensures the identity of a remote computer

Proves your identity to a remote computer

I saw this one too:


enter image description here

What is this intention/permission for, and what does it do?

share|improve this question
So, its a unique ID for Verisign? – George Feb 11 '14 at 22:09
1 are correct. – TheCleaner Feb 11 '14 at 22:14
up vote 11 down vote accepted

It is an OID, not random numbers.

According to wikipedia:

Extended Validation certificate identification

EV certificates are standard x.509 digital certificates. The primary way to identify an EV certificate is by referencing the Certificate Policies extension field. Each issuer uses a different object identifier (OID) in this field to identify their EV certificates, and each OID is documented in the issuer's Certification Practice Statement. As with root certificate authorities in general, browsers may not recognize all issuers.

In the case of this OID:

VeriSign 2.16.840.1.113733. VeriSign EV CPS v. 3.3, p. 87

share|improve this answer
Thanks for the fast answer. So is this just like a unique ID for the company/site that is vending/issuing the certificate? Sorry, but I don't really know much about certificates! – George Feb 11 '14 at 22:07
Yes, these ID's are typically identified by validation software (probably hardcoded, but dont know) as a means to identify it as a EV certificate rather than a standard certificate. – Matthew Ife Feb 11 '14 at 22:13

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.