OIDs are just numbers in an official registry. So the answer depends on what you want or need the OID for. You describe you want it for data encipherment keystore, it sounds like you want PKI Mechanisms:
- 18.104.22.168.5.5 are internet security mechanisms:
- 22.214.171.124.5.5.7 are PKI mechanisms:
- 126.96.36.199.188.8.131.52 are Key Purposes:
So you're looking for OIDs defining a certificate's purpose, for PKI Mechanisms and Purposes 184.108.40.206.220.127.116.11 is probably the root ID you're needing.
For more clarification, OID's like 18.104.22.168.22.214.171.124.126.96.36.199.21 is a private organization's OID registered publicly for a purpose use. Specifically this one looks like it's a nortel networks certificates OID which may or may not exist anymore (and may have been moved).
Under 188.8.131.52.4 for internet private organizations.
- 184.108.40.206.4.1 is for enterprises.
- 220.127.116.11.4.1.45 is Nortel Networks OIDs, specifically related to their SNMP MIB response numbers. Anything under this is going to be related to items responding in SNMP requests.
- 18.104.22.168.4.1.311 is Microsoft
- 22.214.171.124.4.1.311.10 is Microsoft's crypto 2.0 (oid-info.com say's see OIDs associated with Microsoft's Cryptography: link was broken, probably also why a lot of the OID's under 311 is moved or broken.)
If you're creating a organization ID like an entierprise ID, you can just make it up for a non public use; 126.96.36.199.4.1.995 or something can be your fake enterprise's OID.
But certain devices and systems may expect certain OIDs to exists in the certificate for it to be accepted.