Plné znění - 32025D2164

„A.    Xxxxxxxxxxxxx xx a scheme

Xxxx Xxxxxx Xxxxx xxxx xxxxxx a trusted list xxxxxxxxx xxxxxxxxxxx related xx the xxxxxxxxx xxxxx service xxxxxxxxx xxxx xxx xxxxx xxxxxxxxxxx, together xxxx xxxxxxxxxxx related xx xxx xxxxxxxxx xxxxx xxxxxxxx they xxxxxxx, xx xxxxxxxxxx xxxx xxx xxxxxxxx xxxxxxxxxx xxxx xxxx in Xxxxxxxxxx (XX) Xx&xxxx;910/2014.

Xxx xxxxxxx implementation xx xxxx xxxxxxx lists xx xxxx xx xx referred xx xx the list xx xxxxx (xxxxxxxx) xxxxxxx xxxx Xxxxxx Xxxxx’x&xxxx;xxxxxxx list, xxxxxxxx xx xxx European Xxxxxxxxxx.

X.&xxxx;&xxxx;&xxxx; Xxxxxx/xxxxx xxx xxx xxxxxxxxxx xx xxx xxxxxx services

Xxxxxx States must xxxxxxxxx qualified trust xxxxxxx xxxxxxxxx xxxxxxxxxxx xx the territory xx the xxxxxxxxxxx Xxxxxx State xx xxxx xxxx xx Xxxxxxx XXX xx Xxxxxxxxxx (EU) Xx&xxxx;910/2014 xx xxxxxx that xxxxx qualified trust xxxxxxx xxxxxxxxx and xxx qualified trust xxxxxxxx they xxxxxxx xxxx xxx xxxxxxxxxxxx xxxx down xx xxxx Regulation.

The trusted xxxxx xx Member Xxxxxx xxxxxxx, as x&xxxx;xxxxxxx, xxxxxxxxxxx xxxxxxxxx xx Articles 1 xxx&xxxx;2 xx Xxxxxxxxxxxx Xxxxxxxx (EU) 2015/1505.

The xxxxxxx xxxxx xxxxxxx both xxxxxxx xxx historical xxxxxxxxxxx xxxxx xxx xxxxxx xx xxxxxx xxxxx services.

Each Xxxxxx Xxxxx’x&xxxx;xxxxxxx xxxx xxxx xxxxxxx xxxxxxxxxxx xx xxx xxxxxxxx xxxxxxxxxxx xxxxxx xxx, xxxxx xxxxxxxxxx, xxxxxxxx approval, xxxxxxxxx xxxxxxx xxxxxxxxxxxxx xxxxxx(x) under which xxx xxxxx xxxxxxx xxxxxxxxx and xxx xxxxx xxxxxxxx xxxx xxxxxxx xxx xxxxxx.

X.&xxxx;&xxxx;&xxxx; Xxxxxxxxxxxxxx xx the xxxxxxx xxxx

Xxx xxxxxxx xxxx xxxxxxxxxx xxx xxxxxxxxxxxx, xxxxxxxx xx products relying xx a trusted xxxx xxxxxxxxx in xxxxxxxxxx xxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014 xxx xx xxxxxxx:

X.1&xxxx;&xxxx;&xxxx; Xxxxxxxxx xxxxxx xx a trust service

Xxx xxxxxxxxx xxxxxx xx x&xxxx;xxxxx xxxxxxx xx xxxxxxxxx by xxx xxxxxxxxxxx xx:

—	xxx „Xxxxxxx xxxx xxxxxxxxxx“ („Xxx“) xxxxx xx x&xxxx;xxxxxxx xxxxx;

—

xxxxx xxxxxxxxxx, xxx xxxxxxxx xx xxx of xxx xxxxxxxxx xxxxxx xx xxx the xxxxxx „xxxxxxxxxxXxxxxxxXxxxxxxxxxx xxxxxxxxx“ xx xxx xxxxxxx xxxxx: — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxxXxxxxxxxxx}“: xxxxxxx xxxxxxxxxx the „Xxx“ xxxxxxxxxx xxxxxxx xx xxxxx xxxxxxxx xxx xxxxxxxxxx signatures; — http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/ForeSeals}“: xxxxxxx specifying xxx „Xxx“ identified service xx xxxxx xxxxxxxx xxx xxxxxxxxxx seals; xx — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxXxxXxxxXxxxxxxxxxxxxx}“: xxxxxxx xxxxxxxxxx xxx „Xxx“ identified xxxxxxx xx being xxxxxxxx xxx website xxxxxxxxxxxxxx; and — the xxxxxx xxxxxxxxx xx the „Xxxxxxx current status“ xxxxx xxxxx xx xxxx xxx date xxxxxxxxx in xxx „Xxxxxxx xxxxxx starting xxxx and time“.

Historical xxxxxxxxxxx xxxxx xxxx x&xxxx;xxxxxxxxx status xx xxxxxxxxx xxxxxxxx when xxxxxxxxxx.

X.1.1&xxxx;&xxxx;&xxxx; Service xxxxxx xxxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014

Xxxxxxxxx xxx xxxxx 1 July 2016 (XXX+2), xxx xxxxx xx xxx „Service xxxxxxx status“ xxxxx xxxx xx the Xxxxxxxxxxx Xxxx xxxxxxxxxx xx x&xxxx;Xxxxxx State xx xxxxxxxx that x&xxxx;xxxxx xxxxxxx xxxxx xx xxxxxxxxxxxx x&xxxx;xxxxxxxxx xxxxx xxxxxxx xx xxx XXXxxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxx}“.

X.1.2&xxxx;&xxxx;&xxxx; Service xxxxxx under Xxxxxxxxx&xxxx;1999/93/XX

Xxxxxxxx before 1st Xxxx 2016 (XXX+2), xxx xxxxx xx xxx „Xxxxxxx xxxxxxx xxxxxx“ xxxxx used xx xxx Xxxxxxxxxxx Xxxx designated xx x&xxxx;Xxxxxx State xx xxxxxxxx xxxx x&xxxx;xxxxx xxxxxxx entry is xxxxxxxxxxxx x&xxxx;xxxxxxxxxxxxx-xxxxxxx-xxxxxxxx issuing xxxxxxxxx certificates is xxx xx xxx xxxxxxxxx XXXx:

—	xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxxxxxxxxxxx}“;

—	xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxx}“; xx

—	xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxxxxx}“.

X.2&xxxx;&xxxx;&xxxx; Xxxxxxxxx xxxxxx xx x&xxxx;xxxxxxxxxxx

Regarding xxxxxxxxx xxxxx xxxxxxx xxxxxxxxx xxxxxxx xxxxxxxxx xxxxxxxxxxxx xxx electronic xxxxxxxxxx, xxx electronic seals xxx/xx xxx website xxxxxxxxxxxxxx, a „CA/QC“ „Service xxxx identifier“ („Xxx“) xxxxx xxxxxxxxx xxxx xxx end-entity certificate xxxxxx xx xx xxxxx xxx XX xxxxxxxxxxx xx xxx XX’x&xxxx;xxxxxx xxx xxx XX’x&xxxx;xxxx (xxxx XX xxxx xx be xxxxxxxxxx as xxxxx xxxxxx xxxxx) xxxxxxx xx the „Xxxxxxx xxxxxxx xxxxxxxxxx“ („Xxx“), xx or xxx x&xxxx;xxxxxxxxx xxxxxxxxxxx (QC) xx x&xxxx;xxxxxxx xxxx xxx xxxx xxxxxxxx xxxx xxx xxxxx xxxxxxx xxxxx xxxxxxxxx x&xxxx;xxxxxxx xxxxxxxxx xxxxxx (xxx xxxxxx C.1) xxx xxxx the xxxxx xxxxxxxxxxxx xxx xxx with xxxxxxxxx xx that xxxx xxx xxxx.

X.2.1&xxxx;&xxxx;&xxxx; Default xxxxx

C.2.1.1   Certificate xxxxxx xxxxxxxxxxxx rule

The xxx-xxxxxx xxxxxxxxxxx xxxxxxxx xxx XXXX standardised QcStatements xxxxxxxxx as xxxxxxxxx xx xxxxxxxx ETSI XX 319 412-5 xxxx xxx following requirements:

—	the xx-xxxx-xxx-XxXxxxxxxxxx (xxx:xxx:0.4.0.1862.1.1) QcStatement xx present; and

—

where xxxxxxx, xxx id-etsi-qcs-QcType (xxx:xxx:0.4.0.1862.1.6) QcStatement xxxxxxxx xxxxxxx one xx xxx xxxxxxxxx values: — the xx-xxxx-xxx-xxxxx (xxx:xxx:0.4.0.1862.6.1) XXXX xxxxxxx QC xxxx xxxxxxxxxx; — xxx xx-xxxx-xxx-xxxxx (xxx:xxx:0.4.0.1862.6.2) XXXX defined XX xxxx xxxxxxxxxx; or — the xx-xxxx-xxx-xxx (xxx:xxx:0.4.0.1862.6.3) XXXX xxxxxxx XX type xxxxxxxxxx.

Xxxxxxxxxx, xxx id-etsi-qct-QcSSCD (xxx:xxx:0.4.0.1862.4) QcStatement may xx xxxxxxx.

X.2.1.2&xxxx;&xxxx;&xxxx;Xxxxxxxxxxx xxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX

Xxxxxxxxxx xx xxx xxxxxxx of Xxxxxxxxx&xxxx;1999/93/XX xxx as x&xxxx;xxxxxx xxxxxxxxxxx to xxx above xxxxxxxxxxxx xxxx, xxx xxx-xxxxxx xxxxxxxxxxx xxxxxxxx:

—	xxx ETSI xxxxxxxxxxxx XxXxxxxxxxxx xxxxxxxxx (xx xxxxxxxxx in XXXX XX 319&xxxx;412-5) xxxx the id-etsi-qcs-QcCompliance (xxx:xxx:0.4.0.1862.1.1) XxXxxxxxxxx being xxxxxxx;

—	xxx legacy XXX+ (xxx:xxx:0.4.0.1456.1.1) XXXX xxxxxxx xxxxxxxxxxx xxxxxx XXX; xx

—	xxx legacy XXX (xxx:xxx:0.4.0.1456.1.2) ETSI defined xxxxxxxxxxx policy XXX.

X.2.2&xxxx;&xxxx;&xxxx; Xxxxxxxxxx rules: Presence xx Xxxxxxxxxxxxxx Extension

Xx „Xxx“ „Qualifications Xxxxxxxxx“ information as xxxxxxxxx xx clause 5.5.9.2 of xxxxxxxx XXXX XX 119&xxxx;612 xx xxxxxxx, then xx xxxxxxxx to xxx xxxxx xxxxxxx xxxxx, xxxxx xxxxxxxxxxxx xxxx are identified xxxxxxx xxx use xx „Sie“ „Qualifications Xxxxxxxxx“ xxxxxxxxxxx xxxx xx xxxxxxxxxx according xx the xxxxxxxxxx xxxxxxxxxx. Xxxxx xxxxxxxxxx xxx xxxx xxxx xxxxxxxxx xx xxxxxxxxxx xxx a lack xx xxxxxxxxxxxx xxxxxxx processable xxxxxxxxxxx in xxx xxxxxxxxxxxxx xxxxxxxxxxx content. Xxxx xxx not xx xx xxxx xx compensate xxx x&xxxx;xxxx xx machine xxxxxxxxxxx xxxxxxxxxxx xx xxxxxxxxxxxx xxxxxx after 1&xxxx;Xxxx 2016 where xxxx lack would xxxxxx in a non-compliance xxxx Xxxxx X, XXX xx XX xx Xxxxxxxxxx (XX) Xx&xxxx;910/2014. However, xxxx xxx xx xxxx xx provide further xxxxxxx processable xxxxxxxxxxx xxxx the information xxxxxxxx xx xxx xxxxxxxxxxx, xxxxx xxxxxxxxx xxxx the Xxxxxxxxxx, xxxx xxx xxxxx xxxx the xxxxx xxxxxxx interpretation xxxxx. Xxxxx used, they xxxxxxx xxxxxxxxxx xxxxxxxxxxx xxxxxxxxx:

—

xxxxx xxxxxxxxx xxxxxx: — „XXXxxxxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxxxxxx}") meaning xxx identified xxxxxxxxxxxx xxx xxxxxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX or xxxxx Xxxxxxxxxx (EU) Xx&xxxx;910/2014; xx — „XxxXxxxxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxXxxxxxxxx}") xxxxxxx xxx identified xxxxxxxxxxxx xxx xxx xx xx considered xx qualified.

—

the xxxxxx xx xxxxx xxxxxxxxxxxxx: — „XXXxxXXxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXXxx}") meaning xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx as xxxxxxxxx, xxx qualified certificates xxx xxxxxxxxxx xxxxxxxxx xxxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014; — „XXXxxXXxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXXxxx}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx claimed xx xxxxxx as xxxxxxxxx, are xxxxxxxxx xxxxxxxxxxxx xxx xxxxxxxxxx xxxx under Xxxxxxxxxx (XX) No 910/2014; xx — „XXXxxXXX“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCForWSA}") xxxxxxx xxx identified certificates, xxxx xxxxxxx xx xxxxxx as xxxxxxxxx, xxx xxxxxxxxx xxxxxxxxxxxx xxx xxxxxxx authentication xxxxx Xxxxxxxxxx (EU) Xx&xxxx;910/2014.

—

xxxxxxx or not xxx xxxxxxx key xxxxxxx in x&xxxx;xxxxxxxxx xxxxxxxxx xx xxxxxxxxx xxxx creation xxxxxx (XXXX) xxx the xxxxxx xxxxxxx: — „XXXxxxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxXXXX}") xxxxxxx the xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx or xxxxxx xx xxxxxxxxx, xxxx xxxxx private xxx xxxxxxxx xx x&xxxx;XXXX; — „XXXxXXXX“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCNoQSCD}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx claimed or xxxxxx as xxxxxxxxx, xxxx xxx xxxxx xxxxxxx key residing xx x&xxxx;XXXX; — „XXXXXXXxxxxxXxXxXxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxXxXxXxxx}") meaning the xxxxxxxxxx certificates, xxxx xxxxxxx xx stated xx qualified, do xxxxxxx xxxxxx machine xxxxxxxxxxx xxxxxxxxxxx about xxxxxxx xx not xxxxx xxxxxxx xxx xx xxxxxxxx xx x&xxxx;XXXX; xx — „XXXXXXXxxxxxxXxXxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxxXxXxxxxx}") xxxxxxx xxx xxxxxxxxxx certificates, xxxx xxxx are claimed xx xxxxxx as xxxxxxxxx, have xxxxx xxxxxxx key is xxxxxxxx in x&xxxx;XXXX xxx which xxx xxxxxxxxxx xxx xxxxxxxxxx xx that xxxxxxx xxx is xxxx xx x&xxxx;xxxxxxxxx XXX xx xxxxxx of xxx entity xxxxx xxxxxxxx is certified xx the certificate;

Restricted xx the xxxxxxx xx xxxxxxxxxxxx xxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX, the xxxxxxxxx qualifiers are xxxxxxx xxx xxxxxxx xxxxxxxxxx information regarding:

—

whether xx not xxx xxxxxxx xxx resides xx a secure xxxxxxxxx xxxxxxxx device (XXXX): — „XXXxxxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxXXXX}") meaning xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx as qualified, xxxx xxxxx xxxxxxx xxx xxxxxxxx xx xx SSCD; — „QCNoSSCD“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxXXXX}") xxxxxxx the xxxxxxxxxx xxxxxxxxxxxx, when xxxxxxx or xxxxxx xx xxxxxxxxx, do xxx xxxx xxxxx xxxxxxx key xxxxxxxx xx xx XXXX; xx — „XXXXXXXxxxxxXxXxXxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxXxXxXxxx}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, when xxxxxxx xx xxxxxx xx xxxxxxxxx, do contain xxxxxx machine processable xxxxxxxxxxx xxxxx xxxxxxx xx xxx xxxxx xxxxxxx xxx xx xxxxxxxx xx xx XXXX.

—	xxx xxxxxxxx xx x&xxxx;Xxxxx Person: — „QCForLegalPerson“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXxxxxXxxxxx}") meaning xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx xx qualified, xxx xxxxxx to x&xxxx;Xxxxx Xxxxxx under Xxxxxxxxx&xxxx;1999/93/XX.

Xxxx:

Xxx xxxxxxxxxxx xxxxxxxx in xxx trusted xxxx xx to be xxxxxxxxxx xx xxxxxxxx xxxxxxx xxxx xxx xxxxxxxxxxx xx xxx xx be considered xx qualified xx xxx end-entity xxxxxxxxxxx xxxx xxx xxxxxx xxx xx xxx xxxxxxx xxxxx xxxxxxx xxxxx, xxx: — xx xx „Xxx“ „Qualifications Xxxxxxxxx“ xxxxxxxxxxx xx present xxx xxx xxxxx xxxxxx&xxxx;XX/XX corresponding xxxxxxx xxxxx to qualify xxx certificate with x&xxxx;„XXXxxxxxxxx“ xxxxxxxxx, or — a „Sie“ „Xxxxxxxxxxxxxx Extension“ xxxxxxxxxxx xx xxxxxxx xxx xxx xxxxx anchor CA/QC xxxxxxxxxxxxx xxxxxxx entry xx qualify xxx xxxxxxxxxxx with x&xxxx;„XxxXxxxxxxxx“ xxxxxxxxx.

X.3&xxxx;&xxxx;&xxxx; Xxxxx xxxxxxx

„Xxxxxxx digital identifiers“ xxx xx be xxxx xx Xxxxx Xxxxxxx in xxx xxxxxxx xx xxxxxxxxxx xxxxxxxxxx xxxxxxxxxx xx xxxxx for which xxxxxx’x&xxxx;xx seal creator’s certificate xx to xx xxxxxxxxx xxxxxxx xxxxxxxxxxx xx xxx xxxxxxx xxxx, hence xxxx xxx xxxxxx xxx xxx xxx associated xxxxxxx xxxx xxx xxxxxx xx Xxxxx Xxxxxx xxxxxxxxxxx. Xxxx xxxx xxxx xxx xxxxxxxxxxx xxxxxxxxxx xxx xxxxxx xxx xxxxxxxxxxx xxx service, they xxx xx be xxxxxxxxxx xx Xxxxx Xxxxxx xxxxxxxxxxxx xxxxxxxxx xxxxxxxxx xxxxxxxxxxx xxxx xxxxxx to xxx xxxxxxxxxxx xxxxxxxx required xx Xxxxx Xxxxxx xxxxxxxxxxx.

X.4&xxxx;&xxxx;&xxxx; Xxxxxxx rule xxx xxx xxxxxxxxxxxxxx xx xxxxx xxxxxxx xxxxxxx

Xxx xxxxxxx xxxx xxx interpretation xx xxx „Xxx“ xxxx xxxxx, xxxxxxxx xxxxxxx xxxxxxxxx xxxxxxx x&xxxx;„Xxx“ „additionalServiceInformation“, xxx xxxxxxxxxxxxx xx xxxxxxxxx xxxxx xxxxxxxx is xxxx, xxx that „Xxx“ identified service xxxx, and xxxxxxxx xx xxxxxxxxxxx xxxx x&xxxx;„Xxx“ „xxxxxxxxxxXxxxxxxXxxxxxxxxxx“ XXX, xxx xxxxxx xxxxxxx xxxxx xxxxxxxxx to xxx „Xxxxxxx name“ xxxxx value and xxxxxxxx identified xx xxx „Xxxxxxx xxxxxxx xxxxxxxx“ xxxxx xxxxx xxx xxx xxxxxxx xxxxxxxx xxxxxx according xx the „Xxxxxxx xxxxxxx status“ xxxxx xxxxx xx from xxx date xxxxxxxxx xx the „Current xxxxxx xxxxxxxx date xxx time“.

Specific xxxxxxxxxxxxxx xxxxx for any xxxxxxxxxx information xxxx xxxxxx to a listed xxxxxxx (x.x. „Xxxxxxx xxxxxxxxxxx extensions“ xxxxx) xxx xx found, xxxx xxxxxxxxxx, in xxx Xxxxxx Xxxxx xxxxxxxx XXX xx xxxx of the xxxxxxx „Xxxxxx xxxx/xxxxxxxxx/xxxxx“ xxxxx.

Xxxxxx xxxxx xx xxx implementing xxxx xxxxxxx pursuant xx Xxxxxxx&xxxx;22(5) of Xxxxxxxxxx (XX) Xx&xxxx;910/2014 xxx xxxxxxx xxxxxxx on xxx xxxxxxxxxxxxxx xx xxx xxxxxx xx xxx Xxxxxx Xxxxxx‘ xxxxxxx xxxxx.“;