Add documentation page for our OIDs

content/base-l10n/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/ca/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/cs/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/da/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/de/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/el/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/en/certificates.md

@@ -2,11 +2,11 @@
 title: Chains of Trust
 linkTitle: Chains of Trust (Root and Intermediate Certificates)
 slug: certificates
-lastmod: 2025-09-03
+lastmod: 2025-09-25
 show_lastmod: 1
 ---
 
-This page describes all of the current and relevant historical Certification Authorities operated by Let's Encrypt. Note that a CA is most correctly thought of as a key and a name: any given CA may be represented by _multiple_ certificates which all contain the same Subject and Public Key Information. In such cases, we have provided the details of all certificates which represent the CA.
+This page describes all of the current and relevant historical Certification Authorities operated by Let's Encrypt. Note that a CA is most correctly thought of as a key and a name: any given CA may be represented by _multiple_ certificates which all contain the same Subject and Public Key Information. In such cases, we have provided the details of all certificates which represent the CA. If you're looking for the Trust Anchor IDs associated with these CAs, see our page on [Object Identifiers](/docs/oids).
 
 [![ISRG Certificate Hierarchy Diagram, as of August 2025](/images/isrg-hierarchy.png)](/images/isrg-hierarchy.png)
 

content/en/docs/oids.md

@@ -0,0 +1,46 @@
+---
+title: Object Identifiers
+slug: oids
+lastmod: 2025-09-25
+show_lastmod: false
+---
+
+An Object Identifier (OID) is a dot-separated sequence of numbers used to uniquely identify various objects within the WebPKI. For example, every extension within an X.509 certificate is uniquely identified by an OID, and the OID `2.5.29.15` identifies the [Key Usage](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.3) extension. Similarly, the OID `2.23.140.1.2.1` can be placed within the body of the [Certificate Policies](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.4) extension to indicate that the certificate was validated according to the [CA/Browser Forum's "Domain Validated" criteria](https://github.com/cabforum/servercert/blob/main/docs/BR.md#12-document-name-and-identification).
+
+This page lists the OIDs used by Let's Encrypt, documents what each OID means, and points to where we use them.
+
+| OID | Description |
+| --- | ----------- |
+| <code><b>1.3.6.1.4.1.44947</b></code> | Internet Security Research Group. Parent arc for all ISRG OIDs. |
+| <code>1.3.6.1.4.1.44947.<b>1</b></code> | No meaning assigned. This legacy OID never had a standalone purpose. |
+| <code>1.3.6.1.4.1.44947.1.<b>1</b></code> | No meaning assigned. This legacy OID never had a standalone purpose. |
+| <code>1.3.6.1.4.1.44947.1.1.<b>1</b></code> | ISRG Domain Validated. This legacy OID was equivalent to 2.23.140.1.2.1, the [CA/BF Domain Validated Certificate Policy OID](https://github.com/cabforum/servercert/blob/main/docs/BR.md#12-document-name-and-identification). We used to include it in [our issuing intermediates](/certs/lets-encrypt-e1.txt), but stopped doing so to reduce certificate size. |
+| <code>1.3.6.1.4.1.44947.<b>2</b></code> | Let's Encrypt Trust Anchor IDs. Parent arc for all "trust anchors" ([CA keypairs](/certificates)), which can be used in the [Trust Anchor Identifiers](https://datatracker.ietf.org/doc/draft-ietf-tls-trust-anchor-ids/) and [Merkle Tree Certificates](https://datatracker.ietf.org/doc/draft-davidben-tls-merkle-tree-certs/) internet draft standards. OIDs in this arc are assigned approximately chronologically by issuance date. |
+| <code>1.3.6.1.4.1.44947.2.<b>1</b></code>  | ISRG Root X1               |
+| <code>1.3.6.1.4.1.44947.2.<b>2</b></code>  | Let's Encrypt Authority X1 |
+| <code>1.3.6.1.4.1.44947.2.<b>3</b></code>  | Let's Encrypt Authority X2 |
+| <code>1.3.6.1.4.1.44947.2.<b>4</b></code>  | Let's Encrypt Authority X3 |
+| <code>1.3.6.1.4.1.44947.2.<b>5</b></code>  | Let's Encrypt Authority X4 |
+| <code>1.3.6.1.4.1.44947.2.<b>6</b></code>  | ISRG Root X2               |
+| <code>1.3.6.1.4.1.44947.2.<b>7</b></code>  | Let's Encrypt E1           |
+| <code>1.3.6.1.4.1.44947.2.<b>8</b></code>  | Let's Encrypt E2           |
+| <code>1.3.6.1.4.1.44947.2.<b>9</b></code>  | Let's Encrypt R3           |
+| <code>1.3.6.1.4.1.44947.2.<b>10</b></code> | Let's Encrypt R4           |
+| <code>1.3.6.1.4.1.44947.2.<b>11</b></code> | Let's Encrypt E5           |
+| <code>1.3.6.1.4.1.44947.2.<b>12</b></code> | Let's Encrypt E6           |
+| <code>1.3.6.1.4.1.44947.2.<b>13</b></code> | Let's Encrypt E7           |
+| <code>1.3.6.1.4.1.44947.2.<b>14</b></code> | Let's Encrypt E8           |
+| <code>1.3.6.1.4.1.44947.2.<b>15</b></code> | Let's Encrypt E9           |
+| <code>1.3.6.1.4.1.44947.2.<b>16</b></code> | Let's Encrypt R10          |
+| <code>1.3.6.1.4.1.44947.2.<b>17</b></code> | Let's Encrypt R11          |
+| <code>1.3.6.1.4.1.44947.2.<b>18</b></code> | Let's Encrypt R12          |
+| <code>1.3.6.1.4.1.44947.2.<b>19</b></code> | Let's Encrypt R13          |
+| <code>1.3.6.1.4.1.44947.2.<b>20</b></code> | Let's Encrypt R14          |
+| <code>1.3.6.1.4.1.44947.2.<b>21</b></code> | ISRG Root YE               |
+| <code>1.3.6.1.4.1.44947.2.<b>22</b></code> | ISRG Root YR               |
+| <code>1.3.6.1.4.1.44947.2.<b>23</b></code> | Let's Encrypt YE1          |
+| <code>1.3.6.1.4.1.44947.2.<b>24</b></code> | Let's Encrypt YE2          |
+| <code>1.3.6.1.4.1.44947.2.<b>25</b></code> | Let's Encrypt YE3          |
+| <code>1.3.6.1.4.1.44947.2.<b>26</b></code> | Let's Encrypt YR1          |
+| <code>1.3.6.1.4.1.44947.2.<b>27</b></code> | Let's Encrypt YR2          |
+| <code>1.3.6.1.4.1.44947.2.<b>28</b></code> | Let's Encrypt YR3          |

content/es/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/fa/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/fi/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/fr/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/he/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/hr/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/hu/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/id/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/it/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/ja/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/ko/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/pl/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/pt-br/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/ru/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/si/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/sr/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/sv/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/ta/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/th/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/tr/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/uk/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/uz/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/vi/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/zh-cn/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

content/zh-tw/docs/oids.md

@@ -0,0 +1,9 @@
+---
+title: Object Identifiers
+slug: oids
+date: 2025-09-25
+lastmod: 2025-09-25
+show_lastmod: false
+untranslated: 1
+---
+

themes/le-2025/layouts/shortcodes/docs_index.html

@@ -38,6 +38,7 @@ <h1 id="{{ anchorize (i18n "advanced_subscriber_information") }}">{{ i18n "advan
     <li>{{ template "link" (dict "context" . "page" "/docs/a-warm-welcome-to-asn1-and-der") }}</li>
     <li><a href="/2019/10/09/onboarding-your-customers-with-lets-encrypt-and-acme.html">{{ i18n "onboarding_customers" }}</a></li>
     <li>{{ template "link" (dict "context" . "page" "/docs/lencr-org.md") }}</li>
+    <li>{{ template "link" (dict "context" . "page" "/docs/oids.md") }}</li>
 </ul>
 
 <h1 id="{{ anchorize (i18n "client_developer_information") }}">{{ i18n "client_developer_information" }}</h1>