  .  2.
 


 ,        .     ,        12  2026    ?  ,    ?   ?       2    .





 

  .  2.











     1    ,    .    ,       (, ,   . .),    ,      ,      .   PKI           :

  (private key)    ;

  (  CA  certificate authority)       ,     ,   ()      ,   (public key)  ;

    ,     ;

         ,     .

-,     Public Key Infrastructure,   PKI.       .      -   ,         ,        , ,    WEB-   HTTPS.          ,         HTTPS,      ,   .  ,        ?

   , ..   2    .  ,        .     ,        12  2026    ?  ,    ?   ?       2    .




   12.12.2026   .





             .        .     SSL-  ,  ,      1    Microsoft.      ,      SSL-.











 .




  :    :.    Microsoft :

  

  

 ,  ,  .  -       .

-        1 ,       Microsoft, ,      ,         (CRL).           ?

    .

 :         ?

:

    (    All Issuance Policies)         (wildcard). 

 ,      -         .          .

    ( X.509)        (OID): 2.5.29.32.0.



      ASN.1   .

!   ,   ASN.1    Microsoft   OID 2.5.29.32.0.    .

  :    "Microsoft Root Certificate Authority 2011"    OID 2.5.29.32.0?

:

  Microsoft Root Certificate Authority 2011 (         )  Certificate Policies ( , 2.5.29.32)      (2.5.29.32.0)       :

1.    (Implicit Wildcard)   RFC 5280

       (RFC 5280),        . 

    (Root CA)    ,         ,           (Any Policy).

   2.5.29.32.0              .

   ?

 :         ?

:

   (   Windows  All Application Policies)     ,            .

     ,        .      ,  .

    (X.509)        (OID): 2.5.29.37.0 (   Any Extended Key Usage  AnyEKU).

  :    "Microsoft Root Certificate Authority 2011"    OID 2.5.29.37.0?

:

   Microsoft Root Certificate Authority 2011   OID 2.5.29.37.0 (   / Any EKU)     :  - PKI     Microsoft.

     Enhanced Key Usage (  , OID 2.5.29.37)  ,               .

   Any EKU (2.5.29.37.0)     .  Windows         .

***

    .. :

 ,   

   

     ,   

     

***

,   -  -   .

        SSL-  .

  1.      .

  2.      .

  3. 1.3.6.1.4.1.4146.1.10.

  4. 2.23.140.1.2.1.








     Certificate policies.










    .

 :       1.3.6.1.4.1.4146.1.10?

:

    (OID) 1.3.6.1.4.1.4146.1.10       (Domain Validation Certificates Policy),     GlobalSign

  OID    Certificate Policies  ,    ,      :

 :   SSL/TLS-      (DV SSL).        ,       (,   DNS-    ).          .




  .


   .

   ,     (https://www.litres.ru/book/mihail-evgenevich-maslennikov/infrastruktura-otkrytykh-kliuchei-chast-2-74630448/)  .

      Visa, MasterCard, Maestro,    ,   ,     ,  PayPal, WebMoney, ., QIWI ,       .


