Plné znění - 32025D2164

„X.&xxxx;&xxxx;&xxxx; Xxxxxxxxxxxxx xx x&xxxx;xxxxxx

Xxxx Xxxxxx Xxxxx xxxx xxxxxx a trusted xxxx xxxxxxxxx xxxxxxxxxxx xxxxxxx xx xxx qualified xxxxx xxxxxxx xxxxxxxxx xxxx xxx xxxxx xxxxxxxxxxx, xxxxxxxx xxxx xxxxxxxxxxx xxxxxxx xx xxx xxxxxxxxx trust xxxxxxxx xxxx xxxxxxx, xx xxxxxxxxxx xxxx xxx relevant xxxxxxxxxx xxxx down xx Xxxxxxxxxx (XX) Xx&xxxx;910/2014.

Xxx xxxxxxx xxxxxxxxxxxxxx xx xxxx xxxxxxx xxxxx xx xxxx xx xx referred xx xx xxx xxxx xx xxxxx (xxxxxxxx) xxxxxxx xxxx Member Xxxxx’x&xxxx;xxxxxxx xxxx, compiled xx the Xxxxxxxx Xxxxxxxxxx.

X.&xxxx;&xxxx;&xxxx; Xxxxxx/xxxxx for xxx xxxxxxxxxx xx xxx xxxxxx xxxxxxxx

Xxxxxx States must xxxxxxxxx xxxxxxxxx trust xxxxxxx xxxxxxxxx xxxxxxxxxxx xx the xxxxxxxxx xx the designating Xxxxxx Xxxxx as xxxx xxxx in Xxxxxxx XXX xx Xxxxxxxxxx (EU) Xx&xxxx;910/2014 xx ensure xxxx xxxxx xxxxxxxxx xxxxx xxxxxxx xxxxxxxxx xxx xxx qualified xxxxx xxxxxxxx they xxxxxxx xxxx xxx xxxxxxxxxxxx xxxx xxxx in xxxx Regulation.

The xxxxxxx xxxxx xx Member Xxxxxx include, xx x&xxxx;xxxxxxx, xxxxxxxxxxx xxxxxxxxx xx Xxxxxxxx 1 xxx&xxxx;2 xx Xxxxxxxxxxxx Xxxxxxxx (XX)&xxxx;2015/1505.

Xxx xxxxxxx xxxxx xxxxxxx both xxxxxxx and xxxxxxxxxx xxxxxxxxxxx about xxx xxxxxx xx xxxxxx xxxxx xxxxxxxx.

Xxxx Member Xxxxx’x&xxxx;xxxxxxx list must xxxxxxx information xx xxx xxxxxxxx xxxxxxxxxxx xxxxxx xxx, where xxxxxxxxxx, xxxxxxxx xxxxxxxx, xxxxxxxxx through xxxxxxxxxxxxx xxxxxx(x) xxxxx xxxxx xxx xxxxx service xxxxxxxxx xxx xxx xxxxx services xxxx xxxxxxx xxx xxxxxx.

X.&xxxx;&xxxx;&xxxx; Xxxxxxxxxxxxxx of xxx xxxxxxx xxxx

Xxx xxxxxxx xxxx guidelines xxx applications, xxxxxxxx xx xxxxxxxx xxxxxxx xx a trusted xxxx xxxxxxxxx xx accordance xxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014 xxx xx xxxxxxx:

X.1&xxxx;&xxxx;&xxxx; Qualified xxxxxx xx x&xxxx;xxxxx xxxxxxx

Xxx qualified xxxxxx xx x&xxxx;xxxxx service xx indicated by xxx xxxxxxxxxxx xx:

—	xxx „Xxxxxxx xxxx identifier“ („Xxx“) xxxxx in x&xxxx;xxxxxxx xxxxx;

—

xxxxx applicable, xxx xxxxxxxx xx xxx xx xxx xxxxxxxxx xxxxxx xx xxx xxx xxxxxx „xxxxxxxxxxXxxxxxxXxxxxxxxxxx xxxxxxxxx“ in xxx service xxxxx: — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxxXxxxxxxxxx}“: xxxxxxx specifying the „Xxx“ identified xxxxxxx xx xxxxx xxxxxxxx xxx electronic xxxxxxxxxx; — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxxXxxxx}“: xxxxxxx xxxxxxxxxx xxx „Xxx“ xxxxxxxxxx xxxxxxx xx xxxxx xxxxxxxx xxx electronic xxxxx; xx — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxXxxXxxxXxxxxxxxxxxxxx}“: further xxxxxxxxxx xxx „Xxx“ xxxxxxxxxx xxxxxxx as being xxxxxxxx xxx website xxxxxxxxxxxxxx; xxx — xxx xxxxxx xxxxxxxxx to xxx „Xxxxxxx current status“ xxxxx xxxxx xx xxxx the date xxxxxxxxx xx the „Xxxxxxx xxxxxx xxxxxxxx xxxx xxx xxxx“.

Xxxxxxxxxx xxxxxxxxxxx xxxxx xxxx x&xxxx;xxxxxxxxx xxxxxx xx xxxxxxxxx xxxxxxxx xxxx xxxxxxxxxx.

X.1.1&xxxx;&xxxx;&xxxx; Xxxxxxx status xxxxx Xxxxxxxxxx (EU) Xx&xxxx;910/2014

Xxxxxxxxx xxx xxxxx 1&xxxx;Xxxx 2016 (XXX+2), xxx xxxxx xx xxx „Service xxxxxxx status“ field xxxx xx xxx Xxxxxxxxxxx Body xxxxxxxxxx xx a Member State xx xxxxxxxx that x&xxxx;xxxxx xxxxxxx entry xx representing x&xxxx;xxxxxxxxx xxxxx service is xxx XXXxxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxx}“.

X.1.2&xxxx;&xxxx;&xxxx; Service xxxxxx under Xxxxxxxxx&xxxx;1999/93/XX

Xxxxxxxx before 1xx Xxxx 2016 (UTC+2), xxx xxxxx xx xxx „Service xxxxxxx xxxxxx“ xxxxx used xx the Supervisory Xxxx xxxxxxxxxx xx x&xxxx;Xxxxxx State xx xxxxxxxx xxxx a trust xxxxxxx xxxxx xx xxxxxxxxxxxx x&xxxx;xxxxxxxxxxxxx-xxxxxxx-xxxxxxxx xxxxxxx xxxxxxxxx certificates is xxx xx xxx xxxxxxxxx XXXx:

—	xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxxxxxxxxxxx}“;

—	xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxx}“; xx

—	xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxxxxx}“.

X.2&xxxx;&xxxx;&xxxx; Xxxxxxxxx xxxxxx xx x&xxxx;xxxxxxxxxxx

Xxxxxxxxx xxxxxxxxx xxxxx xxxxxxx providers xxxxxxx xxxxxxxxx xxxxxxxxxxxx xxx xxxxxxxxxx signatures, xxx electronic xxxxx xxx/xx xxx xxxxxxx xxxxxxxxxxxxxx, x&xxxx;„XX/XX“ „Service xxxx identifier“ („Xxx“) xxxxx xxxxxxxxx xxxx xxx xxx-xxxxxx xxxxxxxxxxx xxxxxx by xx xxxxx xxx XX xxxxxxxxxxx xx the XX’x&xxxx;xxxxxx xxx xxx XX’x&xxxx;xxxx (xxxx XX xxxx to xx xxxxxxxxxx xx trust xxxxxx xxxxx) xxxxxxx xx the „Service xxxxxxx xxxxxxxxxx“ („Xxx“), xx xx xxx x&xxxx;xxxxxxxxx xxxxxxxxxxx (XX) xx x&xxxx;xxxxxxx xxxx xxx xxxx xxxxxxxx xxxx xxx xxxxx xxxxxxx entry xxxxxxxxx x&xxxx;xxxxxxx xxxxxxxxx status (xxx xxxxxx X.1) xxx xxxx xxx xxxxx xxxxxxxxxxxx xxx xxx xxxx xxxxxxxxx xx xxxx date xxx time.

C.2.1    Xxxxxxx xxxxx

C.2.1.1   Certificate xxxxxx xxxxxxxxxxxx xxxx

Xxx end-entity xxxxxxxxxxx xxxxxxxx the XXXX xxxxxxxxxxxx XxXxxxxxxxxx xxxxxxxxx xx xxxxxxxxx xx standard XXXX XX 319&xxxx;412-5 with xxx following xxxxxxxxxxxx:

—	xxx xx-xxxx-xxx-XxXxxxxxxxxx (xxx:xxx:0.4.0.1862.1.1) XxXxxxxxxxx xx xxxxxxx; xxx

—

xxxxx xxxxxxx, the xx-xxxx-xxx-XxXxxx (xxx:xxx:0.4.0.1862.1.6) XxXxxxxxxxx xxxxxxxx xxxxxxx xxx xx xxx xxxxxxxxx values: — the xx-xxxx-xxx-xxxxx (xxx:xxx:0.4.0.1862.6.1) XXXX xxxxxxx XX xxxx xxxxxxxxxx; — xxx xx-xxxx-xxx-xxxxx (xxx:xxx:0.4.0.1862.6.2) XXXX xxxxxxx XX xxxx xxxxxxxxxx; xx — xxx xx-xxxx-xxx-xxx (xxx:xxx:0.4.0.1862.6.3) ETSI xxxxxxx QC xxxx xxxxxxxxxx.

Xxxxxxxxxx, the id-etsi-qct-QcSSCD (xxx:xxx:0.4.0.1862.4) XxXxxxxxxxx xxx xx xxxxxxx.

X.2.1.2&xxxx;&xxxx;&xxxx;Xxxxxxxxxxx xxxxxx xxxxx Directive 1999/93/EC

Restricted xx xxx xxxxxxx of Xxxxxxxxx&xxxx;1999/93/XX xxx as x&xxxx;xxxxxx alternative xx xxx above standardised xxxx, the xxx-xxxxxx xxxxxxxxxxx xxxxxxxx:

—	xxx ETSI xxxxxxxxxxxx QcStatements xxxxxxxxx (xx xxxxxxxxx xx XXXX XX 319&xxxx;412-5) xxxx the xx-xxxx-xxx-XxXxxxxxxxxx (xxx:xxx:0.4.0.1862.1.1) QcStatement xxxxx xxxxxxx;

—	xxx xxxxxx XXX+ (xxx:xxx:0.4.0.1456.1.1) ETSI xxxxxxx xxxxxxxxxxx policy OID; xx

—	xxx xxxxxx QCP (xxx:xxx:0.4.0.1456.1.2) XXXX xxxxxxx xxxxxxxxxxx xxxxxx XXX.

X.2.2&xxxx;&xxxx;&xxxx; Xxxxxxxxxx xxxxx: Xxxxxxxx xx Qualifications Extension

Xx „Xxx“ „Qualifications Xxxxxxxxx“ information xx xxxxxxxxx xx clause 5.5.9.2 xx standard XXXX XX 119 612 xx present, xxxx xx xxxxxxxx to xxx xxxxx xxxxxxx xxxxx, xxxxx xxxxxxxxxxxx xxxx xxx xxxxxxxxxx xxxxxxx the xxx xx „Xxx“ „Qualifications Xxxxxxxxx“ information xxxx xx xxxxxxxxxx according xx xxx xxxxxxxxxx xxxxxxxxxx. Those qualifiers xxx used when xxxxxxxxx xx xxxxxxxxxx xxx a lack xx xxxxxxxxxxxx machine xxxxxxxxxxx xxxxxxxxxxx xx xxx xxxxxxxxxxxxx xxxxxxxxxxx xxxxxxx. Xxxx xxx xxx xx be xxxx xx xxxxxxxxxx xxx x&xxxx;xxxx xx machine xxxxxxxxxxx xxxxxxxxxxx in xxxxxxxxxxxx xxxxxx after 1&xxxx;Xxxx 2016 where xxxx xxxx xxxxx xxxxxx xx x&xxxx;xxx-xxxxxxxxxx xxxx Annex X, XXX xx XX xx Regulation (EU) Xx&xxxx;910/2014. However, xxxx xxx xx used xx xxxxxxx further xxxxxxx processable xxxxxxxxxxx xxxx xxx information xxxxxxxx xx xxx xxxxxxxxxxx, xxxxx xxxxxxxxx xxxx the Regulation, xxxx not xxxxx xxxx xxx xxxxx xxxxxxx xxxxxxxxxxxxxx xxxxx. Xxxxx used, xxxx xxxxxxx xxxxxxxxxx xxxxxxxxxxx xxxxxxxxx:

—

xxxxx qualified xxxxxx: — „XXXxxxxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxxxxxx}") meaning xxx xxxxxxxxxx certificates xxx xxxxxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX xx xxxxx Xxxxxxxxxx (XX) No 910/2014; xx — „XxxXxxxxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxXxxxxxxxx}") xxxxxxx the xxxxxxxxxx xxxxxxxxxxxx xxx not xx xx xxxxxxxxxx xx qualified.

—

the xxxxxx xx their xxxxxxxxxxxxx: — „XXXxxXXxx“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCForESig}") meaning xxx identified xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx xx qualified, xxx xxxxxxxxx certificates xxx electronic signature xxxxx Xxxxxxxxxx (EU) Xx&xxxx;910/2014; — „XXXxxXXxxx“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCForESeal}") xxxxxxx xxx identified xxxxxxxxxxxx, when claimed xx xxxxxx xx xxxxxxxxx, are xxxxxxxxx xxxxxxxxxxxx xxx electronic xxxx under Xxxxxxxxxx (XX) Xx&xxxx;910/2014; xx — „XXXxxXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXXX}") xxxxxxx xxx xxxxxxxxxx certificates, xxxx claimed or xxxxxx xx xxxxxxxxx, xxx qualified xxxxxxxxxxxx xxx xxxxxxx xxxxxxxxxxxxxx xxxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014.

—

xxxxxxx or xxx xxx private xxx xxxxxxx in a qualified xxxxxxxxx or qualified xxxx xxxxxxxx xxxxxx (XXXX) and the xxxxxx xxxxxxx: — „XXXxxxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxXXXX}") xxxxxxx the xxxxxxxxxx xxxxxxxxxxxx, when xxxxxxx xx xxxxxx xx xxxxxxxxx, have xxxxx xxxxxxx key xxxxxxxx in x&xxxx;XXXX; — „XXXxXXXX“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCNoQSCD}") xxxxxxx xxx xxxxxxxxxx certificates, xxxx xxxxxxx or xxxxxx xx xxxxxxxxx, xxxx not their xxxxxxx xxx xxxxxxxx xx a QSCD; — „QCQSCDStatusAsInCert“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxXxXxXxxx}") meaning the xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx or xxxxxx xx xxxxxxxxx, xx xxxxxxx xxxxxx xxxxxxx xxxxxxxxxxx information xxxxx xxxxxxx xx not xxxxx xxxxxxx xxx xx xxxxxxxx in x&xxxx;XXXX; xx — „XXXXXXXxxxxxxXxXxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxxXxXxxxxx}") meaning xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxx xxx xxxxxxx xx xxxxxx xx xxxxxxxxx, have their xxxxxxx xxx is xxxxxxxx xx x&xxxx;XXXX xxx xxxxx xxx xxxxxxxxxx and management xx xxxx private xxx is done xx a qualified XXX xx xxxxxx of xxx entity xxxxx xxxxxxxx xx xxxxxxxxx xx xxx certificate;

Restricted xx the xxxxxxx xx xxxxxxxxxxxx xxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX, xxx xxxxxxxxx xxxxxxxxxx xxx xxxxxxx and xxxxxxx xxxxxxxxxx xxxxxxxxxxx xxxxxxxxx:

—

xxxxxxx xx not the xxxxxxx xxx resides xx x&xxxx;xxxxxx xxxxxxxxx xxxxxxxx device (SSCD): — „QCWithSSCD“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxXXXX}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx xx xxxxxxxxx, xxxx their xxxxxxx xxx residing xx xx XXXX; — „XXXxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxXXXX}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx xx xxxxxxxxx, xx xxx xxxx their xxxxxxx xxx residing xx an XXXX; xx — „XXXXXXXxxxxxXxXxXxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxXxXxXxxx}") xxxxxxx the xxxxxxxxxx xxxxxxxxxxxx, when xxxxxxx xx xxxxxx as xxxxxxxxx, do xxxxxxx xxxxxx xxxxxxx xxxxxxxxxxx xxxxxxxxxxx xxxxx xxxxxxx xx xxx xxxxx xxxxxxx xxx xx xxxxxxxx in an XXXX.

—	xxx xxxxxxxx xx x&xxxx;Xxxxx Xxxxxx: — „XXXxxXxxxxXxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXxxxxXxxxxx}") xxxxxxx the xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx xx xxxxxxxxx, are xxxxxx to a Legal Xxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX.

Xxxx:

Xxx xxxxxxxxxxx provided xx xxx xxxxxxx xxxx xx xx xx xxxxxxxxxx as xxxxxxxx xxxxxxx that the xxxxxxxxxxx xx not xx be xxxxxxxxxx xx xxxxxxxxx if xxx end-entity certificate xxxx xxx xxxxxx xxx of xxx xxxxxxx rules xxxxxxx xxxxx, xxx: — xx no „Xxx“ „Xxxxxxxxxxxxxx Xxxxxxxxx“ xxxxxxxxxxx is xxxxxxx xxx xxx xxxxx xxxxxx&xxxx;XX/XX xxxxxxxxxxxxx xxxxxxx xxxxx to xxxxxxx xxx certificate xxxx x&xxxx;„XXXxxxxxxxx“ xxxxxxxxx, xx — x&xxxx;„Xxx“ „Xxxxxxxxxxxxxx Xxxxxxxxx“ xxxxxxxxxxx xx present xxx xxx xxxxx anchor CA/QC xxxxxxxxxxxxx xxxxxxx xxxxx xx xxxxxxx xxx xxxxxxxxxxx xxxx a „NotQualified“ xxxxxxxxx.

X.3&xxxx;&xxxx;&xxxx; Trust xxxxxxx

„Xxxxxxx xxxxxxx xxxxxxxxxxx“ xxx to be xxxx xx Xxxxx Xxxxxxx xx the xxxxxxx of xxxxxxxxxx xxxxxxxxxx signatures or xxxxx for which xxxxxx’x&xxxx;xx xxxx xxxxxxx’x&xxxx;xxxxxxxxxxx xx xx xx xxxxxxxxx xxxxxxx xxxxxxxxxxx xx the xxxxxxx xxxx, hence xxxx xxx xxxxxx key xxx xxx xxxxxxxxxx xxxxxxx name are xxxxxx xx Trust Xxxxxx xxxxxxxxxxx. Xxxx xxxx than xxx xxxxxxxxxxx xxxxxxxxxx xxx xxxxxx xxx identifying xxx xxxxxxx, they xxx xx xx xxxxxxxxxx xx Trust Xxxxxx xxxxxxxxxxxx xxxxxxxxx xxxxxxxxx xxxxxxxxxxx with xxxxxx xx xxx xxxxxxxxxxx xxxxxxxx xxxxxxxx xx Xxxxx Xxxxxx xxxxxxxxxxx.

X.4&xxxx;&xxxx;&xxxx; General rule xxx the interpretation xx xxxxx xxxxxxx xxxxxxx

Xxx xxxxxxx xxxx xxx interpretation xx xxx „Xxx“ xxxx entry, xxxxxxxx xxxxxxx specified xxxxxxx x&xxxx;„Xxx“ „additionalServiceInformation“, xxx xxxxxxxxxxxxx xx qualified xxxxx xxxxxxxx xx xxxx, for xxxx „Xxx“ identified service xxxx, xxx xxxxxxxx xx combination xxxx x&xxxx;„Xxx“ „additionalServiceInformation“ URI, xxx xxxxxx xxxxxxx xxxxx xxxxxxxxx xx xxx „Service xxxx“ xxxxx value and xxxxxxxx xxxxxxxxxx xx xxx „Xxxxxxx digital xxxxxxxx“ xxxxx xxxxx xxx xxx xxxxxxx xxxxxxxx status according xx xxx „Service xxxxxxx status“ xxxxx xxxxx as xxxx xxx date xxxxxxxxx xx xxx „Xxxxxxx xxxxxx xxxxxxxx xxxx xxx time“.

Specific interpretation xxxxx for xxx xxxxxxxxxx xxxxxxxxxxx xxxx xxxxxx xx x&xxxx;xxxxxx xxxxxxx (x.x. „Xxxxxxx xxxxxxxxxxx xxxxxxxxxx“ xxxxx) xxx xx found, xxxx xxxxxxxxxx, in xxx Xxxxxx Xxxxx xxxxxxxx URI xx xxxx of xxx xxxxxxx „Scheme xxxx/xxxxxxxxx/xxxxx“ xxxxx.

Xxxxxx xxxxx xx xxx implementing acts xxxxxxx xxxxxxxx xx Xxxxxxx&xxxx;22(5) xx Regulation (XX) No 910/2014 xxx xxxxxxx details on xxx xxxxxxxxxxxxxx of xxx xxxxxx of xxx Member States‘ xxxxxxx xxxxx.“;