Plné znění - 32025D2164

„X.&xxxx;&xxxx;&xxxx; Xxxxxxxxxxxxx xx a scheme

Xxxx Xxxxxx Xxxxx xxxx xxxxxx x&xxxx;xxxxxxx list xxxxxxxxx xxxxxxxxxxx xxxxxxx xx xxx xxxxxxxxx xxxxx service xxxxxxxxx xxxx xxx xxxxx xxxxxxxxxxx, together xxxx xxxxxxxxxxx xxxxxxx xx xxx xxxxxxxxx xxxxx xxxxxxxx xxxx xxxxxxx, xx xxxxxxxxxx with xxx xxxxxxxx xxxxxxxxxx xxxx xxxx in Xxxxxxxxxx (XX) No 910/2014.

The xxxxxxx xxxxxxxxxxxxxx of xxxx xxxxxxx xxxxx xx also to xx xxxxxxxx xx xx xxx xxxx xx xxxxx (pointers) xxxxxxx xxxx Xxxxxx Xxxxx’x&xxxx;xxxxxxx list, xxxxxxxx xx xxx Xxxxxxxx Xxxxxxxxxx.

X.&xxxx;&xxxx;&xxxx; Xxxxxx/xxxxx xxx xxx assessment of xxx xxxxxx services

Xxxxxx Xxxxxx xxxx xxxxxxxxx xxxxxxxxx xxxxx xxxxxxx xxxxxxxxx xxxxxxxxxxx xx xxx territory xx xxx xxxxxxxxxxx Xxxxxx State xx xxxx down xx Xxxxxxx XXX xx Xxxxxxxxxx (XX) Xx&xxxx;910/2014 xx xxxxxx xxxx xxxxx qualified trust xxxxxxx xxxxxxxxx xxx xxx xxxxxxxxx xxxxx xxxxxxxx xxxx xxxxxxx xxxx xxx requirements xxxx down in xxxx Xxxxxxxxxx.

Xxx xxxxxxx xxxxx xx Member Xxxxxx xxxxxxx, as x&xxxx;xxxxxxx, information xxxxxxxxx xx Xxxxxxxx 1 xxx&xxxx;2 xx Xxxxxxxxxxxx Xxxxxxxx (EU) 2015/1505.

The trusted xxxxx xxxxxxx xxxx xxxxxxx xxx historical xxxxxxxxxxx about xxx xxxxxx xx xxxxxx xxxxx xxxxxxxx.

Xxxx Xxxxxx Xxxxx’x&xxxx;xxxxxxx list xxxx xxxxxxx xxxxxxxxxxx on xxx xxxxxxxx xxxxxxxxxxx xxxxxx xxx, xxxxx xxxxxxxxxx, xxxxxxxx xxxxxxxx, xxxxxxxxx through accreditation xxxxxx(x) xxxxx which xxx trust xxxxxxx xxxxxxxxx xxx xxx xxxxx xxxxxxxx xxxx xxxxxxx xxx xxxxxx.

X.&xxxx;&xxxx;&xxxx; Xxxxxxxxxxxxxx xx xxx xxxxxxx xxxx

Xxx xxxxxxx user guidelines xxx xxxxxxxxxxxx, xxxxxxxx xx xxxxxxxx xxxxxxx xx x&xxxx;xxxxxxx xxxx xxxxxxxxx xx xxxxxxxxxx xxxx Regulation (XX) Xx&xxxx;910/2014 are as xxxxxxx:

X.1&xxxx;&xxxx;&xxxx; Qualified xxxxxx xx a trust xxxxxxx

Xxx xxxxxxxxx xxxxxx xx x&xxxx;xxxxx service xx xxxxxxxxx xx xxx combination of:

—	the „Xxxxxxx xxxx identifier“ („Xxx“) xxxxx xx x&xxxx;xxxxxxx xxxxx;

—

xxxxx xxxxxxxxxx, xxx xxxxxxxx xx xxx xx xxx xxxxxxxxx xxxxxx in xxx xxx xxxxxx „xxxxxxxxxxXxxxxxxXxxxxxxxxxx xxxxxxxxx“ in xxx service entry: — http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/ForeSignatures}“: xxxxxxx xxxxxxxxxx the „Xxx“ xxxxxxxxxx xxxxxxx xx xxxxx xxxxxxxx xxx electronic xxxxxxxxxx; — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxxXxxxx}“: xxxxxxx xxxxxxxxxx the „Xxx“ xxxxxxxxxx service xx xxxxx provided xxx xxxxxxxxxx xxxxx; xx — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxXxxXxxxXxxxxxxxxxxxxx}“: xxxxxxx specifying xxx „Sti“ identified xxxxxxx as xxxxx xxxxxxxx xxx website xxxxxxxxxxxxxx; xxx — xxx xxxxxx xxxxxxxxx to xxx „Xxxxxxx xxxxxxx status“ xxxxx xxxxx xx xxxx the date xxxxxxxxx in xxx „Xxxxxxx xxxxxx xxxxxxxx xxxx and xxxx“.

Xxxxxxxxxx xxxxxxxxxxx about xxxx x&xxxx;xxxxxxxxx xxxxxx xx xxxxxxxxx xxxxxxxx when xxxxxxxxxx.

X.1.1&xxxx;&xxxx;&xxxx; Xxxxxxx xxxxxx xxxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014

Including xxx xxxxx 1&xxxx;Xxxx 2016 (XXX+2), xxx xxxxx xx xxx „Xxxxxxx xxxxxxx xxxxxx“ xxxxx xxxx xx the Xxxxxxxxxxx Xxxx xxxxxxxxxx xx x&xxxx;Xxxxxx Xxxxx xx xxxxxxxx that x&xxxx;xxxxx service entry xx xxxxxxxxxxxx x&xxxx;xxxxxxxxx xxxxx service xx xxx XXXxxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxx}“.

X.1.2&xxxx;&xxxx;&xxxx; Xxxxxxx xxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX

Xxxxxxxx xxxxxx 1xx Xxxx 2016 (XXX+2), xxx xxxxx of xxx „Xxxxxxx xxxxxxx xxxxxx“ field used xx xxx Xxxxxxxxxxx Xxxx designated xx x&xxxx;Xxxxxx State to xxxxxxxx xxxx x&xxxx;xxxxx xxxxxxx entry xx xxxxxxxxxxxx x&xxxx;xxxxxxxxxxxxx-xxxxxxx-xxxxxxxx issuing xxxxxxxxx xxxxxxxxxxxx xx xxx xx xxx xxxxxxxxx XXXx:

—	xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxxxxxxxxxxx}“;

—	xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxx}“; xx

—	xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxxxxx}“.

X.2&xxxx;&xxxx;&xxxx; Xxxxxxxxx xxxxxx xx x&xxxx;xxxxxxxxxxx

Regarding qualified xxxxx xxxxxxx xxxxxxxxx xxxxxxx qualified xxxxxxxxxxxx xxx electronic xxxxxxxxxx, xxx xxxxxxxxxx xxxxx xxx/xx xxx website xxxxxxxxxxxxxx, a „CA/QC“ „Xxxxxxx xxxx identifier“ („Xxx“) xxxxx indicates xxxx xxx end-entity xxxxxxxxxxx xxxxxx xx or xxxxx xxx XX xxxxxxxxxxx xx xxx XX’x&xxxx;xxxxxx xxx xxx XX’x&xxxx;xxxx (xxxx XX xxxx xx be xxxxxxxxxx xx xxxxx xxxxxx xxxxx) xxxxxxx xx xxx „Xxxxxxx xxxxxxx xxxxxxxxxx“ („Sdi“), xx or xxx x&xxxx;xxxxxxxxx certificate (XX) xx x&xxxx;xxxxxxx xxxx xxx time provided xxxx xxx xxxxx xxxxxxx entry xxxxxxxxx x&xxxx;xxxxxxx xxxxxxxxx xxxxxx (xxx xxxxxx C.1) xxx that xxx xxxxx xxxxxxxxxxxx xxx xxx xxxx xxxxxxxxx xx xxxx xxxx xxx xxxx.

X.2.1&xxxx;&xxxx;&xxxx; Default xxxxx

X.2.1.1&xxxx;&xxxx;&xxxx;Xxxxxxxxxxx status xxxxxxxxxxxx xxxx

Xxx xxx-xxxxxx xxxxxxxxxxx contains xxx XXXX xxxxxxxxxxxx XxXxxxxxxxxx xxxxxxxxx as xxxxxxxxx xx xxxxxxxx ETSI XX 319&xxxx;412-5 xxxx xxx following xxxxxxxxxxxx:

—	xxx xx-xxxx-xxx-XxXxxxxxxxxx (xxx:xxx:0.4.0.1862.1.1) QcStatement xx present; and

—

where xxxxxxx, xxx xx-xxxx-xxx-XxXxxx (xxx:xxx:0.4.0.1862.1.6) QcStatement xxxxxxxx xxxxxxx xxx xx xxx xxxxxxxxx values: — the xx-xxxx-xxx-xxxxx (urn:oid:0.4.0.1862.6.1) ETSI xxxxxxx XX xxxx xxxxxxxxxx; — xxx xx-xxxx-xxx-xxxxx (xxx:xxx:0.4.0.1862.6.2) XXXX xxxxxxx XX xxxx identifier; xx — xxx xx-xxxx-xxx-xxx (urn:oid:0.4.0.1862.6.3) ETSI xxxxxxx QC xxxx xxxxxxxxxx.

Xxxxxxxxxx, xxx xx-xxxx-xxx-XxXXXX (xxx:xxx:0.4.0.1862.4) QcStatement xxx xx present.

C.2.1.2   Certificate status xxxxx Xxxxxxxxx&xxxx;1999/93/XX

Xxxxxxxxxx to xxx xxxxxxx xx Xxxxxxxxx&xxxx;1999/93/XX and xx x&xxxx;xxxxxx xxxxxxxxxxx xx xxx above xxxxxxxxxxxx xxxx, xxx xxx-xxxxxx xxxxxxxxxxx xxxxxxxx:

—	xxx XXXX xxxxxxxxxxxx QcStatements xxxxxxxxx (xx specified xx XXXX EN 319&xxxx;412-5) xxxx xxx xx-xxxx-xxx-XxXxxxxxxxxx (xxx:xxx:0.4.0.1862.1.1) XxXxxxxxxxx being xxxxxxx;

—	xxx xxxxxx QCP+ (xxx:xxx:0.4.0.1456.1.1) XXXX xxxxxxx xxxxxxxxxxx policy XXX; xx

—	xxx xxxxxx QCP (xxx:xxx:0.4.0.1456.1.2) XXXX xxxxxxx xxxxxxxxxxx xxxxxx XXX.

X.2.2&xxxx;&xxxx;&xxxx; Xxxxxxxxxx rules: Presence xx Qualifications Xxxxxxxxx

Xx „Sie“ „Qualifications Xxxxxxxxx“ xxxxxxxxxxx as xxxxxxxxx in xxxxxx 5.5.9.2 xx xxxxxxxx XXXX TS 119&xxxx;612 xx present, xxxx xx addition to xxx xxxxx xxxxxxx xxxxx, those xxxxxxxxxxxx xxxx are xxxxxxxxxx xxxxxxx the use xx „Xxx“ „Xxxxxxxxxxxxxx Xxxxxxxxx“ xxxxxxxxxxx xxxx xx xxxxxxxxxx according xx the xxxxxxxxxx xxxxxxxxxx. Xxxxx xxxxxxxxxx xxx xxxx xxxx xxxxxxxxx to xxxxxxxxxx xxx x&xxxx;xxxx of xxxxxxxxxxxx xxxxxxx processable xxxxxxxxxxx xx xxx xxxxxxxxxxxxx certificate xxxxxxx. Xxxx xxx xxx xx xx xxxx xx xxxxxxxxxx xxx x&xxxx;xxxx xx machine xxxxxxxxxxx xxxxxxxxxxx xx xxxxxxxxxxxx issued xxxxx 1&xxxx;Xxxx 2016 where xxxx xxxx xxxxx xxxxxx xx x&xxxx;xxx-xxxxxxxxxx xxxx Xxxxx X, XXX xx IV xx Xxxxxxxxxx (XX) Xx&xxxx;910/2014. However, xxxx xxx xx used xx xxxxxxx further xxxxxxx processable xxxxxxxxxxx xxxx the xxxxxxxxxxx xxxxxxxx xx xxx xxxxxxxxxxx, while compliant xxxx xxx Regulation, xxxx xxx align xxxx xxx xxxxx xxxxxxx interpretation xxxxx. Xxxxx used, xxxx xxxxxxx xxxxxxxxxx xxxxxxxxxxx xxxxxxxxx:

—

xxxxx qualified xxxxxx: — „XXXxxxxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxxxxxx}") xxxxxxx xxx identified xxxxxxxxxxxx xxx xxxxxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX or xxxxx Xxxxxxxxxx (XX) No 910/2014; xx — „XxxXxxxxxxxx“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/NotQualified}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx xxx xxx xx xx xxxxxxxxxx xx xxxxxxxxx.

—

xxx xxxxxx xx their xxxxxxxxxxxxx: — „XXXxxXXxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXXxx}") xxxxxxx xxx xxxxxxxxxx certificates, xxxx xxxxxxx or xxxxxx as xxxxxxxxx, xxx xxxxxxxxx certificates xxx electronic xxxxxxxxx xxxxx Xxxxxxxxxx (EU) Xx&xxxx;910/2014; — „XXXxxXXxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXXxxx}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx xx stated xx xxxxxxxxx, xxx xxxxxxxxx xxxxxxxxxxxx for electronic xxxx xxxxx Regulation (XX) No 910/2014; xx — „XXXxxXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXXX}") xxxxxxx xxx xxxxxxxxxx certificates, xxxx claimed xx xxxxxx xx qualified, xxx qualified xxxxxxxxxxxx xxx website xxxxxxxxxxxxxx xxxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014.

—

xxxxxxx or xxx xxx xxxxxxx xxx xxxxxxx xx a qualified xxxxxxxxx or xxxxxxxxx xxxx xxxxxxxx xxxxxx (XXXX) xxx xxx xxxxxx xxxxxxx: — „XXXxxxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxXXXX}") meaning xxx xxxxxxxxxx certificates, xxxx xxxxxxx xx stated xx qualified, have xxxxx xxxxxxx key xxxxxxxx xx x&xxxx;XXXX; — „XXXxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxXXXX}") xxxxxxx xxx identified certificates, xxxx xxxxxxx xx xxxxxx xx xxxxxxxxx, xxxx not xxxxx xxxxxxx key xxxxxxxx xx x&xxxx;XXXX; — „XXXXXXXxxxxxXxXxXxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxXxXxXxxx}") meaning the xxxxxxxxxx certificates, xxxx xxxxxxx or xxxxxx xx qualified, do xxxxxxx xxxxxx machine xxxxxxxxxxx xxxxxxxxxxx xxxxx xxxxxxx xx xxx xxxxx xxxxxxx xxx xx xxxxxxxx xx x&xxxx;XXXX; xx — „XXXXXXXxxxxxxXxXxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxxXxXxxxxx}") meaning xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxx xxx xxxxxxx xx xxxxxx xx xxxxxxxxx, xxxx their xxxxxxx xxx is xxxxxxxx xx x&xxxx;XXXX xxx xxxxx xxx xxxxxxxxxx and xxxxxxxxxx xx that xxxxxxx xxx is xxxx xx a qualified XXX xx behalf of xxx xxxxxx xxxxx xxxxxxxx xx certified xx xxx xxxxxxxxxxx;

Xxxxxxxxxx xx xxx context xx xxxxxxxxxxxx xxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX, the xxxxxxxxx qualifiers xxx xxxxxxx xxx xxxxxxx xxxxxxxxxx xxxxxxxxxxx xxxxxxxxx:

—

xxxxxxx xx xxx xxx xxxxxxx xxx resides xx x&xxxx;xxxxxx xxxxxxxxx xxxxxxxx device (SSCD): — „QCWithSSCD“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxXXXX}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx or xxxxxx xx qualified, xxxx xxxxx xxxxxxx xxx xxxxxxxx in xx SSCD; — „QCNoSSCD“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxXXXX}") xxxxxxx xxx xxxxxxxxxx certificates, when xxxxxxx xx xxxxxx xx xxxxxxxxx, do xxx have xxxxx xxxxxxx xxx residing xx an XXXX; xx — „XXXXXXXxxxxxXxXxXxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxXxXxXxxx}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx claimed xx xxxxxx xx xxxxxxxxx, xx xxxxxxx xxxxxx machine processable xxxxxxxxxxx xxxxx whether xx xxx xxxxx xxxxxxx key is xxxxxxxx xx xx XXXX.

—	xxx issuance xx x&xxxx;Xxxxx Person: — „QCForLegalPerson“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXxxxxXxxxxx}") meaning xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx xx xxxxxxxxx, are xxxxxx xx x&xxxx;Xxxxx Xxxxxx xxxxx Directive 1999/93/EC.

Note:

The xxxxxxxxxxx xxxxxxxx in xxx xxxxxxx list xx xx be xxxxxxxxxx xx accurate xxxxxxx xxxx xxx xxxxxxxxxxx xx not xx be xxxxxxxxxx xx xxxxxxxxx xx xxx xxx-xxxxxx xxxxxxxxxxx xxxx xxx xxxxxx xxx xx the xxxxxxx xxxxx defined xxxxx, xxx: — xx xx „Xxx“ „Qualifications Extension“ xxxxxxxxxxx xx xxxxxxx xxx the xxxxx xxxxxx&xxxx;XX/XX corresponding xxxxxxx xxxxx xx qualify xxx certificate with x&xxxx;„XXXxxxxxxxx“ xxxxxxxxx, xx — x&xxxx;„Xxx“ „Xxxxxxxxxxxxxx Xxxxxxxxx“ xxxxxxxxxxx xx xxxxxxx xxx xxx trust anchor CA/QC xxxxxxxxxxxxx service xxxxx xx qualify the xxxxxxxxxxx with a „NotQualified“ xxxxxxxxx.

X.3&xxxx;&xxxx;&xxxx; Trust xxxxxxx

„Xxxxxxx xxxxxxx identifiers“ xxx xx be xxxx as Xxxxx Xxxxxxx xx xxx xxxxxxx of validating xxxxxxxxxx signatures or xxxxx xxx which xxxxxx’x&xxxx;xx seal xxxxxxx’x&xxxx;xxxxxxxxxxx xx to xx xxxxxxxxx against xxxxxxxxxxx xx xxx xxxxxxx xxxx, xxxxx only xxx public key xxx xxx xxxxxxxxxx xxxxxxx name are xxxxxx xx Trust Xxxxxx information. Xxxx xxxx than xxx xxxxxxxxxxx represents the xxxxxx xxx identifying xxx service, xxxx xxx to xx xxxxxxxxxx as Trust Xxxxxx certificates xxxxxxxxx xxxxxxxxx xxxxxxxxxxx with xxxxxx xx xxx xxxxxxxxxxx strictly xxxxxxxx xx Xxxxx Anchor xxxxxxxxxxx.

X.4&xxxx;&xxxx;&xxxx; General xxxx xxx xxx xxxxxxxxxxxxxx xx xxxxx service xxxxxxx

Xxx xxxxxxx xxxx xxx xxxxxxxxxxxxxx xx xxx „Xxx“ xxxx xxxxx, possibly xxxxxxx xxxxxxxxx xxxxxxx x&xxxx;„Xxx“ „xxxxxxxxxxXxxxxxxXxxxxxxxxxx“, xxx xxxxxxxxxxxxx xx qualified xxxxx xxxxxxxx xx xxxx, xxx that „Xxx“ xxxxxxxxxx service xxxx, and xxxxxxxx xx combination with x&xxxx;„Xxx“ „xxxxxxxxxxXxxxxxxXxxxxxxxxxx“ XXX, xxx xxxxxx xxxxxxx xxxxx according to xxx „Xxxxxxx name“ xxxxx xxxxx xxx xxxxxxxx xxxxxxxxxx xx xxx „Xxxxxxx digital xxxxxxxx“ field value xxx the xxxxxxx xxxxxxxx status xxxxxxxxx xx the „Service xxxxxxx xxxxxx“ field xxxxx xx from xxx xxxx xxxxxxxxx xx xxx „Current xxxxxx xxxxxxxx xxxx xxx xxxx“.

Xxxxxxxx interpretation xxxxx xxx any xxxxxxxxxx xxxxxxxxxxx with xxxxxx xx x&xxxx;xxxxxx xxxxxxx (x.x. „Xxxxxxx xxxxxxxxxxx xxxxxxxxxx“ field) xxx xx xxxxx, xxxx xxxxxxxxxx, xx xxx Xxxxxx Xxxxx xxxxxxxx XXX xx xxxx of the xxxxxxx „Scheme xxxx/xxxxxxxxx/xxxxx“ xxxxx.

Xxxxxx refer xx xxx xxxxxxxxxxxx acts xxxxxxx xxxxxxxx xx Xxxxxxx&xxxx;22(5) xx Xxxxxxxxxx (XX) No 910/2014 xxx xxxxxxx xxxxxxx xx xxx xxxxxxxxxxxxxx xx xxx xxxxxx of xxx Xxxxxx Xxxxxx‘ xxxxxxx xxxxx.“;