Plné znění - 32025D2164

„A.    Xxxxxxxxxxxxx xx a scheme

Xxxx Xxxxxx Xxxxx xxxx xxxxxx a trusted xxxx xxxxxxxxx xxxxxxxxxxx xxxxxxx xx the xxxxxxxxx xxxxx xxxxxxx xxxxxxxxx xxxx are xxxxx xxxxxxxxxxx, xxxxxxxx xxxx xxxxxxxxxxx xxxxxxx xx xxx qualified xxxxx xxxxxxxx xxxx provide, xx accordance xxxx xxx relevant xxxxxxxxxx xxxx xxxx in Xxxxxxxxxx (EU) No 910/2014.

The xxxxxxx implementation of xxxx trusted lists xx xxxx xx xx xxxxxxxx xx xx xxx xxxx xx xxxxx (pointers) xxxxxxx xxxx Xxxxxx Xxxxx’x&xxxx;xxxxxxx xxxx, xxxxxxxx xx xxx European Xxxxxxxxxx.

X.&xxxx;&xxxx;&xxxx; Xxxxxx/xxxxx for xxx assessment xx xxx xxxxxx xxxxxxxx

Xxxxxx Xxxxxx xxxx xxxxxxxxx xxxxxxxxx xxxxx xxxxxxx xxxxxxxxx xxxxxxxxxxx xx the territory xx xxx xxxxxxxxxxx Xxxxxx Xxxxx xx xxxx xxxx xx Xxxxxxx XXX of Xxxxxxxxxx (XX) No 910/2014 xx xxxxxx xxxx xxxxx qualified xxxxx xxxxxxx xxxxxxxxx xxx xxx xxxxxxxxx xxxxx xxxxxxxx xxxx xxxxxxx xxxx xxx xxxxxxxxxxxx xxxx down in xxxx Regulation.

The xxxxxxx xxxxx xx Xxxxxx Xxxxxx include, as x&xxxx;xxxxxxx, xxxxxxxxxxx xxxxxxxxx xx Articles 1 xxx&xxxx;2 xx Xxxxxxxxxxxx Xxxxxxxx (EU) 2015/1505.

The xxxxxxx xxxxx xxxxxxx both xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxx xxxxx xxx xxxxxx xx listed xxxxx xxxxxxxx.

Xxxx Xxxxxx Xxxxx’x&xxxx;xxxxxxx xxxx must xxxxxxx xxxxxxxxxxx on xxx xxxxxxxx xxxxxxxxxxx xxxxxx and, where xxxxxxxxxx, xxxxxxxx approval, xxxxxxxxx xxxxxxx accreditation xxxxxx(x) under which xxx xxxxx service xxxxxxxxx xxx xxx xxxxx xxxxxxxx xxxx xxxxxxx are listed.

C.    Xxxxxxxxxxxxxx xx xxx xxxxxxx list

The xxxxxxx xxxx guidelines xxx xxxxxxxxxxxx, xxxxxxxx xx xxxxxxxx xxxxxxx xx x&xxxx;xxxxxxx xxxx xxxxxxxxx in accordance xxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014 xxx as xxxxxxx:

X.1&xxxx;&xxxx;&xxxx; Qualified xxxxxx xx a trust xxxxxxx

Xxx qualified xxxxxx xx x&xxxx;xxxxx service xx xxxxxxxxx xx xxx xxxxxxxxxxx xx:

—	xxx „Xxxxxxx xxxx xxxxxxxxxx“ („Xxx“) value xx x&xxxx;xxxxxxx xxxxx;

—

xxxxx xxxxxxxxxx, xxx xxxxxxxx of xxx of xxx xxxxxxxxx values xx xxx xxx xxxxxx „xxxxxxxxxxXxxxxxxXxxxxxxxxxx xxxxxxxxx“ in xxx xxxxxxx xxxxx: — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxxXxxxxxxxxx}“: xxxxxxx xxxxxxxxxx xxx „Xxx“ identified xxxxxxx xx being xxxxxxxx xxx electronic signatures; — http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/ForeSeals}“: xxxxxxx specifying xxx „Xxx“ xxxxxxxxxx xxxxxxx xx being provided xxx xxxxxxxxxx xxxxx; xx — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxXxxXxxxXxxxxxxxxxxxxx}“: further xxxxxxxxxx xxx „Xxx“ xxxxxxxxxx xxxxxxx xx xxxxx xxxxxxxx for xxxxxxx xxxxxxxxxxxxxx; and — the xxxxxx xxxxxxxxx to xxx „Xxxxxxx xxxxxxx xxxxxx“ xxxxx value xx xxxx the xxxx xxxxxxxxx xx xxx „Xxxxxxx xxxxxx starting xxxx and xxxx“.

Xxxxxxxxxx xxxxxxxxxxx xxxxx such x&xxxx;xxxxxxxxx xxxxxx xx xxxxxxxxx xxxxxxxx xxxx xxxxxxxxxx.

X.1.1&xxxx;&xxxx;&xxxx; Xxxxxxx xxxxxx xxxxx Xxxxxxxxxx (EU) Xx&xxxx;910/2014

Xxxxxxxxx xxx xxxxx 1&xxxx;Xxxx 2016 (XXX+2), xxx value xx xxx „Service xxxxxxx xxxxxx“ field xxxx xx the Xxxxxxxxxxx Xxxx xxxxxxxxxx xx x&xxxx;Xxxxxx State xx xxxxxxxx xxxx x&xxxx;xxxxx xxxxxxx xxxxx xx representing x&xxxx;xxxxxxxxx xxxxx service xx xxx XXXxxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxx}“.

X.1.2&xxxx;&xxxx;&xxxx; Xxxxxxx xxxxxx under Directive 1999/93/EC

Xxxxxxxx xxxxxx 1xx Xxxx 2016 (XXX+2), xxx value of xxx „Xxxxxxx current xxxxxx“ xxxxx used xx xxx Xxxxxxxxxxx Xxxx xxxxxxxxxx xx x&xxxx;Xxxxxx State xx xxxxxxxx xxxx x&xxxx;xxxxx xxxxxxx xxxxx xx xxxxxxxxxxxx a certification-service-provider xxxxxxx xxxxxxxxx certificates xx xxx xx the xxxxxxxxx URIs:

—	http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision}“;

—	http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/supervisionincessation}“; xx

—	xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxxxxx}“.

X.2&xxxx;&xxxx;&xxxx; Xxxxxxxxx xxxxxx xx x&xxxx;xxxxxxxxxxx

Xxxxxxxxx qualified xxxxx xxxxxxx xxxxxxxxx xxxxxxx xxxxxxxxx certificates xxx electronic xxxxxxxxxx, xxx electronic seals xxx/xx xxx xxxxxxx xxxxxxxxxxxxxx, x&xxxx;„XX/XX“ „Xxxxxxx xxxx identifier“ („Xxx“) xxxxx indicates xxxx xxx xxx-xxxxxx certificate xxxxxx xx or xxxxx the CA xxxxxxxxxxx xx xxx XX’x&xxxx;xxxxxx key and XX’x&xxxx;xxxx (both XX xxxx xx be xxxxxxxxxx xx xxxxx xxxxxx input) xxxxxxx xx xxx „Service xxxxxxx xxxxxxxxxx“ („Xxx“), xx or xxx x&xxxx;xxxxxxxxx certificate (XX) xx x&xxxx;xxxxxxx xxxx xxx time xxxxxxxx xxxx the xxxxx xxxxxxx xxxxx xxxxxxxxx x&xxxx;xxxxxxx qualified xxxxxx (xxx clause X.1) xxx xxxx xxx xxxxx requirements xxx xxx xxxx xxxxxxxxx xx that xxxx xxx xxxx.

X.2.1&xxxx;&xxxx;&xxxx; Default xxxxx

X.2.1.1&xxxx;&xxxx;&xxxx;Xxxxxxxxxxx xxxxxx xxxxxxxxxxxx rule

The xxx-xxxxxx xxxxxxxxxxx contains the XXXX xxxxxxxxxxxx XxXxxxxxxxxx xxxxxxxxx xx xxxxxxxxx xx xxxxxxxx XXXX XX 319&xxxx;412-5 xxxx xxx xxxxxxxxx xxxxxxxxxxxx:

—	xxx xx-xxxx-xxx-XxXxxxxxxxxx (xxx:xxx:0.4.0.1862.1.1) XxXxxxxxxxx xx present; xxx

—

xxxxx xxxxxxx, the id-etsi-qcs-QcType (xxx:xxx:0.4.0.1862.1.6) XxXxxxxxxxx contains xxxxxxx xxx of xxx xxxxxxxxx xxxxxx: — xxx xx-xxxx-xxx-xxxxx (urn:oid:0.4.0.1862.6.1) XXXX xxxxxxx QC xxxx xxxxxxxxxx; — xxx xx-xxxx-xxx-xxxxx (xxx:xxx:0.4.0.1862.6.2) XXXX xxxxxxx XX xxxx xxxxxxxxxx; or — the xx-xxxx-xxx-xxx (xxx:xxx:0.4.0.1862.6.3) XXXX xxxxxxx XX xxxx xxxxxxxxxx.

Xxxxxxxxxx, xxx xx-xxxx-xxx-XxXXXX (xxx:xxx:0.4.0.1862.4) QcStatement may xx present.

C.2.1.2   Certificate xxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX

Xxxxxxxxxx to xxx xxxxxxx of Xxxxxxxxx&xxxx;1999/93/XX xxx xx x&xxxx;xxxxxx xxxxxxxxxxx xx xxx xxxxx standardised xxxx, xxx end-entity xxxxxxxxxxx xxxxxxxx:

—	xxx XXXX xxxxxxxxxxxx XxXxxxxxxxxx extension (xx specified xx XXXX EN 319&xxxx;412-5) xxxx the xx-xxxx-xxx-XxXxxxxxxxxx (xxx:xxx:0.4.0.1862.1.1) XxXxxxxxxxx xxxxx xxxxxxx;

—	xxx xxxxxx QCP+ (xxx:xxx:0.4.0.1456.1.1) XXXX xxxxxxx xxxxxxxxxxx xxxxxx XXX; xx

—	xxx xxxxxx XXX (xxx:xxx:0.4.0.1456.1.2) ETSI defined xxxxxxxxxxx xxxxxx XXX.

X.2.2&xxxx;&xxxx;&xxxx; Xxxxxxxxxx xxxxx: Xxxxxxxx xx Xxxxxxxxxxxxxx Extension

Xx „Sie“ „Qualifications Xxxxxxxxx“ xxxxxxxxxxx xx xxxxxxxxx xx xxxxxx 5.5.9.2 of standard XXXX XX 119&xxxx;612 xx present, then xx xxxxxxxx to xxx xxxxx xxxxxxx xxxxx, xxxxx certificates xxxx xxx xxxxxxxxxx xxxxxxx the use xx „Sie“ „Xxxxxxxxxxxxxx Xxxxxxxxx“ xxxxxxxxxxx must xx considered according xx xxx associated xxxxxxxxxx. Those xxxxxxxxxx xxx xxxx xxxx xxxxxxxxx xx xxxxxxxxxx xxx x&xxxx;xxxx xx xxxxxxxxxxxx machine processable xxxxxxxxxxx xx the xxxxxxxxxxxxx xxxxxxxxxxx content. Xxxx are xxx xx be xxxx xx xxxxxxxxxx xxx x&xxxx;xxxx of xxxxxxx xxxxxxxxxxx information in xxxxxxxxxxxx xxxxxx after 1&xxxx;Xxxx 2016 xxxxx xxxx xxxx xxxxx xxxxxx xx a non-compliance xxxx Annex X, XXX xx XX xx Xxxxxxxxxx (EU) Xx&xxxx;910/2014. However, xxxx xxx xx xxxx xx xxxxxxx xxxxxxx xxxxxxx processable xxxxxxxxxxx xxxx xxx information xxxxxxxx in xxx xxxxxxxxxxx, xxxxx xxxxxxxxx xxxx xxx Xxxxxxxxxx, xxxx xxx align xxxx xxx xxxxx xxxxxxx interpretation rules. Xxxxx xxxx, xxxx xxxxxxx xxxxxxxxxx information xxxxxxxxx:

—

xxxxx xxxxxxxxx xxxxxx: — „XXXxxxxxxxx“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCStatement}") meaning xxx identified certificates xxx xxxxxxxxx under Xxxxxxxxx&xxxx;1999/93/XX xx xxxxx Xxxxxxxxxx (XX) No 910/2014; xx — „XxxXxxxxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxXxxxxxxxx}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx are not xx be xxxxxxxxxx xx xxxxxxxxx.

—

xxx nature xx xxxxx xxxxxxxxxxxxx: — „XXXxxXXxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXXxx}") xxxxxxx xxx xxxxxxxxxx certificates, xxxx xxxxxxx xx xxxxxx xx qualified, xxx xxxxxxxxx xxxxxxxxxxxx xxx xxxxxxxxxx signature xxxxx Regulation (XX) Xx&xxxx;910/2014; — „XXXxxXXxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXXxxx}") xxxxxxx xxx identified xxxxxxxxxxxx, xxxx xxxxxxx xx stated xx xxxxxxxxx, xxx xxxxxxxxx xxxxxxxxxxxx xxx electronic xxxx under Regulation (XX) Xx&xxxx;910/2014; xx — „XXXxxXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXXX}") meaning xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx or xxxxxx xx xxxxxxxxx, xxx xxxxxxxxx xxxxxxxxxxxx xxx xxxxxxx authentication xxxxx Regulation (XX) Xx&xxxx;910/2014.

—

xxxxxxx xx not xxx xxxxxxx key xxxxxxx xx x&xxxx;xxxxxxxxx xxxxxxxxx or qualified xxxx xxxxxxxx xxxxxx (XXXX) xxx xxx xxxxxx xxxxxxx: — „XXXxxxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxXXXX}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, when xxxxxxx xx stated xx xxxxxxxxx, have xxxxx xxxxxxx xxx xxxxxxxx in x&xxxx;XXXX; — „XXXxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxXXXX}") xxxxxxx xxx xxxxxxxxxx certificates, xxxx claimed or xxxxxx xx xxxxxxxxx, xxxx xxx their xxxxxxx key xxxxxxxx xx x&xxxx;XXXX; — „XXXXXXXxxxxxXxXxXxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxXxXxXxxx}") xxxxxxx the xxxxxxxxxx xxxxxxxxxxxx, when xxxxxxx or stated xx xxxxxxxxx, xx xxxxxxx proper xxxxxxx xxxxxxxxxxx information xxxxx xxxxxxx or not xxxxx private key xx xxxxxxxx in x&xxxx;XXXX; xx — „XXXXXXXxxxxxxXxXxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxxXxXxxxxx}") meaning xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxx are xxxxxxx xx stated as xxxxxxxxx, xxxx their xxxxxxx key is xxxxxxxx xx x&xxxx;XXXX xxx xxxxx xxx xxxxxxxxxx and management xx that xxxxxxx xxx xx xxxx xx a qualified XXX xx xxxxxx xx xxx xxxxxx xxxxx xxxxxxxx xx certified xx xxx certificate;

Restricted xx xxx xxxxxxx xx certificates xxxxxx xxxxx Directive 1999/93/EC, xxx xxxxxxxxx xxxxxxxxxx are xxxxxxx xxx xxxxxxx xxxxxxxxxx xxxxxxxxxxx xxxxxxxxx:

—

xxxxxxx xx not xxx xxxxxxx key xxxxxxx xx x&xxxx;xxxxxx signature xxxxxxxx xxxxxx (XXXX): — „XXXxxxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxXXXX}") xxxxxxx xxx identified certificates, xxxx xxxxxxx xx xxxxxx as qualified, xxxx xxxxx xxxxxxx xxx xxxxxxxx xx xx XXXX; — „XXXxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxXXXX}") xxxxxxx the xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx xx xxxxxxxxx, do xxx xxxx xxxxx xxxxxxx key xxxxxxxx xx xx XXXX; xx — „XXXXXXXxxxxxXxXxXxxx“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCSSCDStatusAsInCert}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, when xxxxxxx xx stated as xxxxxxxxx, xx xxxxxxx xxxxxx xxxxxxx processable xxxxxxxxxxx xxxxx xxxxxxx xx not their xxxxxxx xxx is xxxxxxxx in xx XXXX.

—	xxx issuance xx x&xxxx;Xxxxx Xxxxxx: — „XXXxxXxxxxXxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXxxxxXxxxxx}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx or xxxxxx xx xxxxxxxxx, xxx xxxxxx to x&xxxx;Xxxxx Xxxxxx xxxxx Directive 1999/93/EC.

Note:

The xxxxxxxxxxx xxxxxxxx in xxx trusted list xx xx xx xxxxxxxxxx xx xxxxxxxx xxxxxxx xxxx the xxxxxxxxxxx xx xxx xx be xxxxxxxxxx xx xxxxxxxxx xx xxx end-entity certificate xxxx xxx xxxxxx xxx xx xxx xxxxxxx rules xxxxxxx xxxxx, xxx: — xx xx „Xxx“ „Xxxxxxxxxxxxxx Xxxxxxxxx“ xxxxxxxxxxx xx xxxxxxx xxx xxx xxxxx xxxxxx&xxxx;XX/XX xxxxxxxxxxxxx service xxxxx xx xxxxxxx xxx xxxxxxxxxxx with x&xxxx;„XXXxxxxxxxx“ xxxxxxxxx, xx — x&xxxx;„Xxx“ „Xxxxxxxxxxxxxx Extension“ information xx xxxxxxx xxx xxx trust xxxxxx&xxxx;XX/XX xxxxxxxxxxxxx service entry xx xxxxxxx xxx xxxxxxxxxxx with x&xxxx;„XxxXxxxxxxxx“ xxxxxxxxx.

X.3&xxxx;&xxxx;&xxxx; Trust xxxxxxx

„Xxxxxxx xxxxxxx identifiers“ xxx xx xx xxxx as Xxxxx Xxxxxxx xx xxx xxxxxxx xx xxxxxxxxxx xxxxxxxxxx signatures or xxxxx for which xxxxxx’x&xxxx;xx seal xxxxxxx’x&xxxx;xxxxxxxxxxx xx xx xx xxxxxxxxx xxxxxxx information xx xxx trusted xxxx, xxxxx xxxx xxx xxxxxx xxx xxx xxx associated xxxxxxx xxxx xxx xxxxxx xx Xxxxx Xxxxxx information. When xxxx xxxx xxx xxxxxxxxxxx represents the xxxxxx xxx xxxxxxxxxxx xxx xxxxxxx, xxxx xxx xx be xxxxxxxxxx xx Xxxxx Xxxxxx xxxxxxxxxxxx xxxxxxxxx xxxxxxxxx information xxxx xxxxxx xx the xxxxxxxxxxx xxxxxxxx xxxxxxxx xx Xxxxx Anchor xxxxxxxxxxx.

X.4&xxxx;&xxxx;&xxxx; General rule xxx xxx xxxxxxxxxxxxxx xx xxxxx service xxxxxxx

The xxxxxxx xxxx xxx interpretation xx xxx „Xxx“ xxxx xxxxx, possibly xxxxxxx xxxxxxxxx through x&xxxx;„Xxx“ „additionalServiceInformation“, xxx xxxxxxxxxxxxx xx qualified xxxxx xxxxxxxx xx xxxx, xxx that „Xxx“ xxxxxxxxxx xxxxxxx xxxx, xxx possibly xx combination xxxx x&xxxx;„Xxx“ „additionalServiceInformation“ XXX, xxx xxxxxx xxxxxxx xxxxx according xx xxx „Xxxxxxx xxxx“ xxxxx xxxxx and xxxxxxxx identified by xxx „Xxxxxxx xxxxxxx xxxxxxxx“ xxxxx xxxxx xxx the xxxxxxx xxxxxxxx status xxxxxxxxx xx xxx „Xxxxxxx xxxxxxx status“ xxxxx xxxxx xx xxxx xxx date xxxxxxxxx xx xxx „Xxxxxxx xxxxxx xxxxxxxx xxxx xxx time“.

Specific interpretation xxxxx xxx xxx xxxxxxxxxx xxxxxxxxxxx xxxx xxxxxx xx a listed xxxxxxx (e.g. „Service xxxxxxxxxxx xxxxxxxxxx“ field) xxx xx xxxxx, xxxx applicable, xx xxx Xxxxxx State xxxxxxxx XXX xx xxxx xx the xxxxxxx „Scheme xxxx/xxxxxxxxx/xxxxx“ xxxxx.

Xxxxxx xxxxx xx xxx xxxxxxxxxxxx xxxx xxxxxxx pursuant xx Xxxxxxx&xxxx;22(5) xx Xxxxxxxxxx (XX) Xx&xxxx;910/2014 for xxxxxxx xxxxxxx xx xxx xxxxxxxxxxxxxx of xxx xxxxxx xx xxx Member States‘ xxxxxxx lists.“;