Plné znění - 32025D2164

„X.&xxxx;&xxxx;&xxxx; Xxxxxxxxxxxxx xx a scheme

Each Xxxxxx Xxxxx xxxx xxxxxx x&xxxx;xxxxxxx list xxxxxxxxx xxxxxxxxxxx xxxxxxx xx the xxxxxxxxx xxxxx service providers xxxx xxx xxxxx xxxxxxxxxxx, xxxxxxxx xxxx xxxxxxxxxxx xxxxxxx xx xxx qualified xxxxx xxxxxxxx xxxx xxxxxxx, xx xxxxxxxxxx with xxx relevant xxxxxxxxxx xxxx xxxx xx Xxxxxxxxxx (XX) Xx&xxxx;910/2014.

Xxx xxxxxxx xxxxxxxxxxxxxx xx xxxx xxxxxxx xxxxx xx xxxx to xx xxxxxxxx xx xx the list xx xxxxx (xxxxxxxx) xxxxxxx xxxx Member Xxxxx’x&xxxx;xxxxxxx xxxx, xxxxxxxx xx xxx European Xxxxxxxxxx.

X.&xxxx;&xxxx;&xxxx; Policy/rules for xxx xxxxxxxxxx xx xxx xxxxxx xxxxxxxx

Xxxxxx States must xxxxxxxxx qualified xxxxx xxxxxxx providers established xx xxx xxxxxxxxx xx xxx xxxxxxxxxxx Xxxxxx Xxxxx as xxxx down xx Xxxxxxx XXX xx Xxxxxxxxxx (XX) No 910/2014 xx ensure xxxx xxxxx xxxxxxxxx trust xxxxxxx xxxxxxxxx and xxx xxxxxxxxx xxxxx xxxxxxxx xxxx provide xxxx xxx xxxxxxxxxxxx xxxx down xx xxxx Regulation.

The xxxxxxx xxxxx of Member Xxxxxx xxxxxxx, as x&xxxx;xxxxxxx, xxxxxxxxxxx xxxxxxxxx xx Articles 1 xxx&xxxx;2 xx Xxxxxxxxxxxx Xxxxxxxx (XX)&xxxx;2015/1505.

Xxx xxxxxxx xxxxx xxxxxxx xxxx xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxx xxxxx xxx xxxxxx xx xxxxxx xxxxx xxxxxxxx.

Xxxx Member Xxxxx’x&xxxx;xxxxxxx list xxxx xxxxxxx xxxxxxxxxxx xx xxx xxxxxxxx supervisory xxxxxx xxx, where xxxxxxxxxx, national xxxxxxxx, xxxxxxxxx through xxxxxxxxxxxxx xxxxxx(x) xxxxx xxxxx xxx xxxxx service xxxxxxxxx xxx the xxxxx xxxxxxxx xxxx xxxxxxx xxx xxxxxx.

X.&xxxx;&xxxx;&xxxx; Xxxxxxxxxxxxxx of xxx xxxxxxx list

Xxx xxxxxxx xxxx xxxxxxxxxx xxx xxxxxxxxxxxx, services xx xxxxxxxx xxxxxxx xx x&xxxx;xxxxxxx xxxx xxxxxxxxx xx accordance xxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014 xxx xx xxxxxxx:

X.1&xxxx;&xxxx;&xxxx; Xxxxxxxxx status xx x&xxxx;xxxxx service

Xxx qualified xxxxxx xx x&xxxx;xxxxx xxxxxxx xx xxxxxxxxx xx xxx combination xx:

—	xxx „Xxxxxxx xxxx xxxxxxxxxx“ („Xxx“) xxxxx xx x&xxxx;xxxxxxx entry;

—

where applicable, xxx xxxxxxxx xx xxx of the xxxxxxxxx xxxxxx xx xxx xxx fields „xxxxxxxxxxXxxxxxxXxxxxxxxxxx xxxxxxxxx“ xx xxx service xxxxx: — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxxXxxxxxxxxx}“: xxxxxxx xxxxxxxxxx xxx „Xxx“ identified service xx xxxxx provided xxx xxxxxxxxxx signatures; — http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/ForeSeals}“: xxxxxxx xxxxxxxxxx the „Xxx“ xxxxxxxxxx xxxxxxx xx being xxxxxxxx xxx xxxxxxxxxx xxxxx; xx — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxXxxXxxxXxxxxxxxxxxxxx}“: xxxxxxx xxxxxxxxxx xxx „Xxx“ xxxxxxxxxx xxxxxxx xx being xxxxxxxx xxx xxxxxxx xxxxxxxxxxxxxx; xxx — xxx status xxxxxxxxx xx xxx „Xxxxxxx xxxxxxx xxxxxx“ xxxxx xxxxx xx xxxx the xxxx xxxxxxxxx xx xxx „Xxxxxxx xxxxxx starting xxxx xxx xxxx“.

Xxxxxxxxxx xxxxxxxxxxx about xxxx x&xxxx;xxxxxxxxx xxxxxx is xxxxxxxxx xxxxxxxx xxxx xxxxxxxxxx.

X.1.1&xxxx;&xxxx;&xxxx; Xxxxxxx xxxxxx xxxxx Regulation (XX) Xx&xxxx;910/2014

Xxxxxxxxx xxx xxxxx 1 July 2016 (XXX+2), the xxxxx xx xxx „Service xxxxxxx xxxxxx“ xxxxx xxxx xx the Xxxxxxxxxxx Body xxxxxxxxxx xx a Member Xxxxx xx xxxxxxxx that x&xxxx;xxxxx service xxxxx xx xxxxxxxxxxxx x&xxxx;xxxxxxxxx xxxxx xxxxxxx xx xxx XXXxxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxx}“.

X.1.2&xxxx;&xxxx;&xxxx; Xxxxxxx xxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX

Xxxxxxxx xxxxxx 1xx Xxxx 2016 (XXX+2), xxx value of xxx „Xxxxxxx xxxxxxx xxxxxx“ xxxxx xxxx xx xxx Supervisory Xxxx xxxxxxxxxx xx x&xxxx;Xxxxxx State to xxxxxxxx xxxx x&xxxx;xxxxx xxxxxxx entry is xxxxxxxxxxxx a certification-service-provider xxxxxxx xxxxxxxxx certificates is xxx xx the xxxxxxxxx XXXx:

—	xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxxxxxxxxxxx}“;

—	xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxx}“; xx

—	xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxxxxx}“.

X.2&xxxx;&xxxx;&xxxx; Xxxxxxxxx xxxxxx xx x&xxxx;xxxxxxxxxxx

Xxxxxxxxx qualified xxxxx xxxxxxx xxxxxxxxx xxxxxxx xxxxxxxxx xxxxxxxxxxxx xxx electronic signatures, xxx electronic xxxxx xxx/xx xxx xxxxxxx xxxxxxxxxxxxxx, x&xxxx;„XX/XX“ „Service xxxx xxxxxxxxxx“ („Xxx“) xxxxx xxxxxxxxx that xxx xxx-xxxxxx xxxxxxxxxxx xxxxxx xx or xxxxx the CA xxxxxxxxxxx by xxx XX’x&xxxx;xxxxxx key and XX’x&xxxx;xxxx (xxxx CA xxxx xx xx xxxxxxxxxx xx xxxxx xxxxxx input) xxxxxxx xx the „Xxxxxxx xxxxxxx xxxxxxxxxx“ („Sdi“), xx or was x&xxxx;xxxxxxxxx xxxxxxxxxxx (XX) xx x&xxxx;xxxxxxx xxxx xxx xxxx xxxxxxxx xxxx xxx xxxxx xxxxxxx xxxxx xxxxxxxxx x&xxxx;xxxxxxx xxxxxxxxx xxxxxx (xxx xxxxxx X.1) xxx that xxx xxxxx xxxxxxxxxxxx xxx xxx with xxxxxxxxx xx xxxx xxxx xxx time.

C.2.1    Xxxxxxx xxxxx

X.2.1.1&xxxx;&xxxx;&xxxx;Xxxxxxxxxxx xxxxxx xxxxxxxxxxxx rule

The end-entity xxxxxxxxxxx xxxxxxxx the XXXX standardised XxXxxxxxxxxx xxxxxxxxx xx specified xx xxxxxxxx XXXX XX 319&xxxx;412-5 with xxx xxxxxxxxx requirements:

—	the xx-xxxx-xxx-XxXxxxxxxxxx (urn:oid:0.4.0.1862.1.1) XxXxxxxxxxx xx xxxxxxx; xxx

—

xxxxx xxxxxxx, xxx xx-xxxx-xxx-XxXxxx (xxx:xxx:0.4.0.1862.1.6) QcStatement xxxxxxxx xxxxxxx xxx xx xxx following xxxxxx: — xxx xx-xxxx-xxx-xxxxx (xxx:xxx:0.4.0.1862.6.1) XXXX xxxxxxx QC type xxxxxxxxxx; — xxx xx-xxxx-xxx-xxxxx (urn:oid:0.4.0.1862.6.2) XXXX xxxxxxx XX xxxx xxxxxxxxxx; xx — xxx xx-xxxx-xxx-xxx (xxx:xxx:0.4.0.1862.6.3) ETSI xxxxxxx XX xxxx xxxxxxxxxx.

Xxxxxxxxxx, the id-etsi-qct-QcSSCD (xxx:xxx:0.4.0.1862.4) XxXxxxxxxxx xxx xx present.

C.2.1.2   Certificate xxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX

Xxxxxxxxxx xx xxx context xx Xxxxxxxxx&xxxx;1999/93/XX and as x&xxxx;xxxxxx alternative xx xxx xxxxx xxxxxxxxxxxx xxxx, xxx end-entity xxxxxxxxxxx contains:

—	the XXXX xxxxxxxxxxxx XxXxxxxxxxxx extension (xx xxxxxxxxx xx XXXX XX 319&xxxx;412-5) xxxx xxx xx-xxxx-xxx-XxXxxxxxxxxx (xxx:xxx:0.4.0.1862.1.1) XxXxxxxxxxx xxxxx xxxxxxx;

—	xxx xxxxxx XXX+ (xxx:xxx:0.4.0.1456.1.1) ETSI xxxxxxx xxxxxxxxxxx xxxxxx OID; xx

—	xxx legacy XXX (xxx:xxx:0.4.0.1456.1.2) ETSI xxxxxxx xxxxxxxxxxx policy OID.

C.2.2    Xxxxxxxxxx rules: Xxxxxxxx xx Xxxxxxxxxxxxxx Extension

Xx „Xxx“ „Xxxxxxxxxxxxxx Xxxxxxxxx“ xxxxxxxxxxx xx xxxxxxxxx xx xxxxxx 5.5.9.2 of xxxxxxxx XXXX XX 119&xxxx;612 xx xxxxxxx, then xx xxxxxxxx to xxx xxxxx xxxxxxx xxxxx, those xxxxxxxxxxxx xxxx xxx xxxxxxxxxx xxxxxxx xxx xxx xx „Sie“ „Xxxxxxxxxxxxxx Xxxxxxxxx“ information xxxx xx xxxxxxxxxx xxxxxxxxx xx the xxxxxxxxxx xxxxxxxxxx. Xxxxx xxxxxxxxxx xxx xxxx xxxx xxxxxxxxx to xxxxxxxxxx xxx x&xxxx;xxxx xx xxxxxxxxxxxx xxxxxxx xxxxxxxxxxx xxxxxxxxxxx in the xxxxxxxxxxxxx xxxxxxxxxxx xxxxxxx. Xxxx xxx xxx xx xx xxxx xx compensate xxx x&xxxx;xxxx xx xxxxxxx xxxxxxxxxxx information in xxxxxxxxxxxx xxxxxx xxxxx 1&xxxx;Xxxx 2016 xxxxx xxxx lack xxxxx xxxxxx xx x&xxxx;xxx-xxxxxxxxxx xxxx Xxxxx I, XXX xx XX xx Regulation (XX) Xx&xxxx;910/2014. However, xxxx xxx xx xxxx xx xxxxxxx xxxxxxx xxxxxxx xxxxxxxxxxx information xxxx the information xxxxxxxx xx xxx xxxxxxxxxxx, while compliant xxxx the Xxxxxxxxxx, xxxx xxx align xxxx xxx above xxxxxxx interpretation xxxxx. Xxxxx xxxx, they xxxxxxx xxxxxxxxxx information xxxxxxxxx:

—

xxxxx qualified xxxxxx: — „XXXxxxxxxxx“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCStatement}") xxxxxxx xxx xxxxxxxxxx certificates xxx xxxxxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX xx xxxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014; xx — „XxxXxxxxxxxx“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/NotQualified}") xxxxxxx the identified xxxxxxxxxxxx are xxx xx xx xxxxxxxxxx xx qualified.

—

the nature xx xxxxx qualification: — „QCForESig“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXXxx}") meaning xxx identified xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx xx qualified, xxx xxxxxxxxx certificates xxx xxxxxxxxxx signature xxxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014; — „XXXxxXXxxx“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCForESeal}") xxxxxxx xxx identified xxxxxxxxxxxx, when xxxxxxx xx xxxxxx xx xxxxxxxxx, xxx xxxxxxxxx xxxxxxxxxxxx xxx electronic xxxx under Regulation (XX) Xx&xxxx;910/2014; xx — „XXXxxXXX“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCForWSA}") xxxxxxx xxx identified xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx xx qualified, xxx qualified xxxxxxxxxxxx xxx website authentication xxxxx Regulation (XX) Xx&xxxx;910/2014.

—

xxxxxxx xx not xxx private key xxxxxxx xx x&xxxx;xxxxxxxxx xxxxxxxxx or xxxxxxxxx xxxx creation device (XXXX) xxx xxx xxxxxx thereof: — „QCWithQSCD“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxXXXX}") xxxxxxx xxx xxxxxxxxxx certificates, xxxx xxxxxxx or xxxxxx xx xxxxxxxxx, xxxx xxxxx xxxxxxx xxx xxxxxxxx in x&xxxx;XXXX; — „XXXxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxXXXX}") xxxxxxx xxx xxxxxxxxxx certificates, xxxx xxxxxxx xx xxxxxx as xxxxxxxxx, xxxx xxx xxxxx xxxxxxx key xxxxxxxx xx a QSCD; — „QCQSCDStatusAsInCert“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxXxXxXxxx}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx or xxxxxx xx qualified, xx xxxxxxx xxxxxx xxxxxxx xxxxxxxxxxx xxxxxxxxxxx about xxxxxxx or xxx xxxxx private xxx xx xxxxxxxx xx x&xxxx;XXXX; xx — „XXXXXXXxxxxxxXxXxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxxXxXxxxxx}") xxxxxxx xxx xxxxxxxxxx certificates, xxxx xxxx are claimed xx xxxxxx as xxxxxxxxx, xxxx xxxxx xxxxxxx key xx xxxxxxxx in x&xxxx;XXXX xxx which xxx xxxxxxxxxx xxx xxxxxxxxxx xx xxxx private xxx is done xx a qualified TSP xx xxxxxx of xxx xxxxxx xxxxx xxxxxxxx xx xxxxxxxxx xx xxx xxxxxxxxxxx;

Xxxxxxxxxx xx xxx xxxxxxx xx xxxxxxxxxxxx xxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX, xxx xxxxxxxxx xxxxxxxxxx xxx xxxxxxx and xxxxxxx xxxxxxxxxx xxxxxxxxxxx xxxxxxxxx:

—

xxxxxxx xx not the xxxxxxx xxx xxxxxxx xx x&xxxx;xxxxxx signature xxxxxxxx device (XXXX): — „XXXxxxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxXXXX}") xxxxxxx xxx identified xxxxxxxxxxxx, xxxx claimed xx xxxxxx xx qualified, xxxx xxxxx xxxxxxx xxx xxxxxxxx xx xx XXXX; — „XXXxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxXXXX}") meaning xxx xxxxxxxxxx xxxxxxxxxxxx, when xxxxxxx xx stated xx xxxxxxxxx, do xxx have their xxxxxxx xxx residing xx xx XXXX; xx — „XXXXXXXxxxxxXxXxXxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxXxXxXxxx}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, when claimed xx xxxxxx as xxxxxxxxx, do xxxxxxx xxxxxx xxxxxxx xxxxxxxxxxx xxxxxxxxxxx about whether xx xxx xxxxx xxxxxxx xxx xx xxxxxxxx xx xx XXXX.

—	xxx issuance to x&xxxx;Xxxxx Xxxxxx: — „XXXxxXxxxxXxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXxxxxXxxxxx}") xxxxxxx the xxxxxxxxxx certificates, xxxx xxxxxxx or xxxxxx xx xxxxxxxxx, are xxxxxx to x&xxxx;Xxxxx Xxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX.

Xxxx:

Xxx xxxxxxxxxxx xxxxxxxx xx xxx xxxxxxx xxxx xx xx xx xxxxxxxxxx as xxxxxxxx xxxxxxx that xxx xxxxxxxxxxx xx not xx be xxxxxxxxxx xx xxxxxxxxx if xxx end-entity certificate xxxx xxx follow xxx xx xxx xxxxxxx xxxxx xxxxxxx xxxxx, and: — if xx „Xxx“ „Xxxxxxxxxxxxxx Xxxxxxxxx“ xxxxxxxxxxx is present xxx xxx xxxxx xxxxxx&xxxx;XX/XX xxxxxxxxxxxxx service xxxxx xx qualify xxx xxxxxxxxxxx xxxx x&xxxx;„XXXxxxxxxxx“ xxxxxxxxx, or — a „Sie“ „Xxxxxxxxxxxxxx Xxxxxxxxx“ information xx present for xxx trust anchor CA/QC xxxxxxxxxxxxx xxxxxxx xxxxx xx xxxxxxx the xxxxxxxxxxx with a „NotQualified“ xxxxxxxxx.

X.3&xxxx;&xxxx;&xxxx; Xxxxx xxxxxxx

„Xxxxxxx digital identifiers“ xxx xx be xxxx xx Xxxxx Xxxxxxx in xxx xxxxxxx of validating xxxxxxxxxx xxxxxxxxxx or xxxxx xxx xxxxx xxxxxx’x&xxxx;xx xxxx xxxxxxx’x&xxxx;xxxxxxxxxxx xx xx be xxxxxxxxx against xxxxxxxxxxx xx xxx xxxxxxx xxxx, xxxxx only xxx public key xxx the associated xxxxxxx xxxx xxx xxxxxx as Trust Xxxxxx information. Xxxx xxxx xxxx xxx xxxxxxxxxxx xxxxxxxxxx xxx xxxxxx xxx identifying xxx xxxxxxx, xxxx xxx xx xx xxxxxxxxxx as Trust Xxxxxx xxxxxxxxxxxx conveying xxxxxxxxx xxxxxxxxxxx with xxxxxx xx the xxxxxxxxxxx xxxxxxxx xxxxxxxx xx Xxxxx Xxxxxx xxxxxxxxxxx.

X.4&xxxx;&xxxx;&xxxx; Xxxxxxx xxxx xxx xxx interpretation xx xxxxx xxxxxxx xxxxxxx

Xxx xxxxxxx xxxx xxx xxxxxxxxxxxxxx xx any „Sti“ xxxx xxxxx, xxxxxxxx xxxxxxx specified xxxxxxx x&xxxx;„Xxx“ „additionalServiceInformation“, xxx xxxxxxxxxxxxx xx qualified xxxxx services xx xxxx, for that „Xxx“ xxxxxxxxxx xxxxxxx xxxx, xxx xxxxxxxx xx xxxxxxxxxxx xxxx x&xxxx;„Xxx“ „xxxxxxxxxxXxxxxxxXxxxxxxxxxx“ XXX, xxx xxxxxx xxxxxxx xxxxx according to xxx „Xxxxxxx name“ xxxxx xxxxx and xxxxxxxx xxxxxxxxxx by xxx „Xxxxxxx xxxxxxx xxxxxxxx“ xxxxx value xxx xxx xxxxxxx xxxxxxxx xxxxxx xxxxxxxxx xx xxx „Service xxxxxxx xxxxxx“ xxxxx xxxxx as xxxx xxx xxxx xxxxxxxxx xx xxx „Current xxxxxx xxxxxxxx xxxx xxx xxxx“.

Xxxxxxxx xxxxxxxxxxxxxx xxxxx for any xxxxxxxxxx xxxxxxxxxxx xxxx xxxxxx to a listed xxxxxxx (e.g. „Xxxxxxx xxxxxxxxxxx xxxxxxxxxx“ xxxxx) xxx be xxxxx, xxxx xxxxxxxxxx, xx xxx Member State xxxxxxxx XXX as xxxx of xxx xxxxxxx „Xxxxxx xxxx/xxxxxxxxx/xxxxx“ xxxxx.

Xxxxxx xxxxx xx xxx xxxxxxxxxxxx acts xxxxxxx xxxxxxxx xx Xxxxxxx&xxxx;22(5) xx Regulation (XX) Xx&xxxx;910/2014 for xxxxxxx xxxxxxx xx xxx xxxxxxxxxxxxxx xx xxx fields xx xxx Member Xxxxxx‘ xxxxxxx xxxxx.“;