Plné znění - 32025D2164

„X.&xxxx;&xxxx;&xxxx; Xxxxxxxxxxxxx xx a scheme

Xxxx Xxxxxx Xxxxx xxxx xxxxxx x&xxxx;xxxxxxx xxxx xxxxxxxxx information xxxxxxx xx xxx xxxxxxxxx xxxxx service xxxxxxxxx xxxx xxx under xxxxxxxxxxx, xxxxxxxx with xxxxxxxxxxx related xx xxx qualified trust xxxxxxxx xxxx xxxxxxx, xx xxxxxxxxxx xxxx xxx xxxxxxxx xxxxxxxxxx xxxx down xx Xxxxxxxxxx (EU) Xx&xxxx;910/2014.

Xxx xxxxxxx xxxxxxxxxxxxxx xx xxxx xxxxxxx lists xx also xx xx referred xx xx xxx list xx links (xxxxxxxx) xxxxxxx xxxx Xxxxxx Xxxxx’x&xxxx;xxxxxxx xxxx, compiled xx xxx Xxxxxxxx Xxxxxxxxxx.

X.&xxxx;&xxxx;&xxxx; Policy/rules xxx xxx xxxxxxxxxx of xxx xxxxxx xxxxxxxx

Xxxxxx Xxxxxx xxxx xxxxxxxxx xxxxxxxxx xxxxx xxxxxxx xxxxxxxxx xxxxxxxxxxx xx xxx xxxxxxxxx xx xxx xxxxxxxxxxx Xxxxxx Xxxxx as xxxx down in Xxxxxxx III of Xxxxxxxxxx (XX) No 910/2014 xx ensure xxxx xxxxx xxxxxxxxx xxxxx xxxxxxx xxxxxxxxx and xxx qualified xxxxx xxxxxxxx xxxx xxxxxxx xxxx the requirements xxxx down in xxxx Xxxxxxxxxx.

Xxx trusted xxxxx xx Xxxxxx Xxxxxx include, as x&xxxx;xxxxxxx, information specified xx Xxxxxxxx 1 xxx&xxxx;2 of Xxxxxxxxxxxx Xxxxxxxx (XX)&xxxx;2015/1505.

Xxx trusted xxxxx xxxxxxx xxxx xxxxxxx and historical xxxxxxxxxxx about the xxxxxx of xxxxxx xxxxx xxxxxxxx.

Xxxx Xxxxxx Xxxxx’x&xxxx;xxxxxxx xxxx xxxx xxxxxxx information xx xxx national xxxxxxxxxxx xxxxxx xxx, where xxxxxxxxxx, xxxxxxxx xxxxxxxx, xxxxxxxxx xxxxxxx xxxxxxxxxxxxx xxxxxx(x) xxxxx which xxx trust service xxxxxxxxx xxx xxx xxxxx xxxxxxxx xxxx xxxxxxx xxx xxxxxx.

X.&xxxx;&xxxx;&xxxx; Xxxxxxxxxxxxxx of xxx xxxxxxx list

Xxx xxxxxxx xxxx guidelines xxx applications, services xx xxxxxxxx xxxxxxx xx a trusted list xxxxxxxxx xx accordance xxxx Regulation (XX) Xx&xxxx;910/2014 xxx as xxxxxxx:

X.1&xxxx;&xxxx;&xxxx; Xxxxxxxxx status xx x&xxxx;xxxxx xxxxxxx

Xxx xxxxxxxxx xxxxxx xx a trust service xx xxxxxxxxx by xxx xxxxxxxxxxx xx:

—	xxx „Xxxxxxx xxxx identifier“ („Xxx“) xxxxx xx x&xxxx;xxxxxxx entry;

—

where xxxxxxxxxx, xxx xxxxxxxx of xxx of xxx xxxxxxxxx xxxxxx xx xxx xxx xxxxxx „xxxxxxxxxxXxxxxxxXxxxxxxxxxx extension“ in xxx xxxxxxx xxxxx: — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxxXxxxxxxxxx}“: xxxxxxx xxxxxxxxxx xxx „Xxx“ identified xxxxxxx xx xxxxx xxxxxxxx xxx electronic xxxxxxxxxx; — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxxXxxxx}“: xxxxxxx xxxxxxxxxx xxx „Xxx“ xxxxxxxxxx xxxxxxx xx xxxxx xxxxxxxx xxx xxxxxxxxxx xxxxx; xx — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxXxxXxxxXxxxxxxxxxxxxx}“: further xxxxxxxxxx xxx „Sti“ xxxxxxxxxx xxxxxxx as xxxxx xxxxxxxx xxx xxxxxxx xxxxxxxxxxxxxx; and — the status xxxxxxxxx xx xxx „Xxxxxxx xxxxxxx status“ xxxxx value xx xxxx xxx xxxx xxxxxxxxx xx the „Xxxxxxx xxxxxx xxxxxxxx xxxx xxx xxxx“.

Xxxxxxxxxx xxxxxxxxxxx about xxxx x&xxxx;xxxxxxxxx xxxxxx xx xxxxxxxxx provided xxxx xxxxxxxxxx.

X.1.1&xxxx;&xxxx;&xxxx; Service status xxxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014

Xxxxxxxxx and xxxxx 1&xxxx;Xxxx 2016 (XXX+2), the xxxxx xx xxx „Xxxxxxx xxxxxxx xxxxxx“ xxxxx xxxx xx xxx Xxxxxxxxxxx Xxxx xxxxxxxxxx xx x&xxxx;Xxxxxx Xxxxx xx indicate xxxx x&xxxx;xxxxx xxxxxxx xxxxx xx representing a qualified xxxxx xxxxxxx xx xxx XXXxxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxx}“.

X.1.2&xxxx;&xxxx;&xxxx; Xxxxxxx xxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX

Xxxxxxxx xxxxxx 1xx Xxxx 2016 (XXX+2), xxx xxxxx xx xxx „Xxxxxxx xxxxxxx xxxxxx“ field xxxx xx the Xxxxxxxxxxx Xxxx xxxxxxxxxx xx x&xxxx;Xxxxxx Xxxxx to xxxxxxxx xxxx x&xxxx;xxxxx xxxxxxx entry xx xxxxxxxxxxxx x&xxxx;xxxxxxxxxxxxx-xxxxxxx-xxxxxxxx xxxxxxx xxxxxxxxx certificates xx xxx xx xxx xxxxxxxxx URIs:

—	http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision}“;

—	http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/supervisionincessation}“; xx

—	xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxxxxx}“.

X.2&xxxx;&xxxx;&xxxx; Xxxxxxxxx status xx x&xxxx;xxxxxxxxxxx

Xxxxxxxxx xxxxxxxxx xxxxx service xxxxxxxxx xxxxxxx xxxxxxxxx xxxxxxxxxxxx xxx xxxxxxxxxx xxxxxxxxxx, xxx xxxxxxxxxx xxxxx xxx/xx xxx website xxxxxxxxxxxxxx, x&xxxx;„XX/XX“ „Service xxxx xxxxxxxxxx“ („Xxx“) xxxxx indicates xxxx xxx end-entity xxxxxxxxxxx xxxxxx xx xx xxxxx xxx CA xxxxxxxxxxx xx xxx XX’x&xxxx;xxxxxx key xxx XX’x&xxxx;xxxx (xxxx XX xxxx to be xxxxxxxxxx xx trust xxxxxx xxxxx) xxxxxxx xx xxx „Xxxxxxx xxxxxxx identifier“ („Sdi“), xx xx xxx x&xxxx;xxxxxxxxx xxxxxxxxxxx (XX) xx x&xxxx;xxxxxxx xxxx xxx time xxxxxxxx xxxx the xxxxx xxxxxxx entry indicates x&xxxx;xxxxxxx qualified xxxxxx (xxx xxxxxx C.1) xxx that xxx xxxxx xxxxxxxxxxxx xxx xxx with xxxxxxxxx xx xxxx xxxx xxx xxxx.

X.2.1&xxxx;&xxxx;&xxxx; Default xxxxx

X.2.1.1&xxxx;&xxxx;&xxxx;Xxxxxxxxxxx status xxxxxxxxxxxx xxxx

Xxx xxx-xxxxxx xxxxxxxxxxx xxxxxxxx xxx XXXX xxxxxxxxxxxx QcStatements xxxxxxxxx xx xxxxxxxxx xx xxxxxxxx XXXX XX 319&xxxx;412-5 xxxx xxx xxxxxxxxx xxxxxxxxxxxx:

—	xxx xx-xxxx-xxx-XxXxxxxxxxxx (xxx:xxx:0.4.0.1862.1.1) QcStatement xx xxxxxxx; xxx

—

xxxxx xxxxxxx, xxx xx-xxxx-xxx-XxXxxx (xxx:xxx:0.4.0.1862.1.6) XxXxxxxxxxx contains xxxxxxx xxx xx xxx following xxxxxx: — xxx xx-xxxx-xxx-xxxxx (xxx:xxx:0.4.0.1862.6.1) XXXX xxxxxxx XX xxxx xxxxxxxxxx; — xxx xx-xxxx-xxx-xxxxx (urn:oid:0.4.0.1862.6.2) XXXX xxxxxxx XX xxxx xxxxxxxxxx; xx — xxx xx-xxxx-xxx-xxx (xxx:xxx:0.4.0.1862.6.3) ETSI xxxxxxx XX xxxx xxxxxxxxxx.

Xxxxxxxxxx, xxx xx-xxxx-xxx-XxXXXX (xxx:xxx:0.4.0.1862.4) XxXxxxxxxxx xxx xx present.

C.2.1.2   Certificate xxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX

Xxxxxxxxxx xx xxx xxxxxxx xx Xxxxxxxxx&xxxx;1999/93/XX xxx xx x&xxxx;xxxxxx xxxxxxxxxxx xx xxx xxxxx xxxxxxxxxxxx xxxx, xxx xxx-xxxxxx xxxxxxxxxxx contains:

—	the ETSI xxxxxxxxxxxx XxXxxxxxxxxx extension (xx xxxxxxxxx xx XXXX EN 319&xxxx;412-5) xxxx xxx id-etsi-qcs-QcCompliance (xxx:xxx:0.4.0.1862.1.1) QcStatement being xxxxxxx;

—	xxx xxxxxx XXX+ (xxx:xxx:0.4.0.1456.1.1) ETSI defined xxxxxxxxxxx xxxxxx XXX; xx

—	xxx xxxxxx XXX (xxx:xxx:0.4.0.1456.1.2) ETSI xxxxxxx xxxxxxxxxxx policy XXX.

X.2.2&xxxx;&xxxx;&xxxx; Xxxxxxxxxx rules: Presence xx Xxxxxxxxxxxxxx Xxxxxxxxx

Xx „Sie“ „Qualifications Xxxxxxxxx“ information as xxxxxxxxx in xxxxxx 5.5.9.2 xx xxxxxxxx XXXX XX 119&xxxx;612 xx present, then xx xxxxxxxx to xxx xxxxx xxxxxxx xxxxx, those xxxxxxxxxxxx xxxx are xxxxxxxxxx xxxxxxx xxx xxx xx „Xxx“ „Xxxxxxxxxxxxxx Xxxxxxxxx“ xxxxxxxxxxx xxxx xx xxxxxxxxxx xxxxxxxxx xx the xxxxxxxxxx xxxxxxxxxx. Xxxxx xxxxxxxxxx xxx xxxx when xxxxxxxxx xx compensate xxx x&xxxx;xxxx of xxxxxxxxxxxx machine xxxxxxxxxxx xxxxxxxxxxx xx the xxxxxxxxxxxxx certificate xxxxxxx. Xxxx are xxx xx xx xxxx xx xxxxxxxxxx xxx x&xxxx;xxxx xx xxxxxxx xxxxxxxxxxx xxxxxxxxxxx xx xxxxxxxxxxxx xxxxxx after 1&xxxx;Xxxx 2016 where xxxx lack would xxxxxx in x&xxxx;xxx-xxxxxxxxxx xxxx Xxxxx X, XXX or IV xx Xxxxxxxxxx (EU) Xx&xxxx;910/2014. Xxxxxxx, xxxx xxx be xxxx xx xxxxxxx xxxxxxx xxxxxxx processable xxxxxxxxxxx xxxx the information xxxxxxxx in xxx xxxxxxxxxxx, xxxxx xxxxxxxxx xxxx xxx Xxxxxxxxxx, xxxx not xxxxx xxxx xxx xxxxx xxxxxxx xxxxxxxxxxxxxx rules. Xxxxx xxxx, xxxx xxxxxxx additional information xxxxxxxxx:

—

xxxxx xxxxxxxxx xxxxxx: — „XXXxxxxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxxxxxx}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx xxx xxxxxxxxx under Xxxxxxxxx&xxxx;1999/93/XX xx under Xxxxxxxxxx (XX) Xx&xxxx;910/2014; xx — „XxxXxxxxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxXxxxxxxxx}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx are xxx xx xx xxxxxxxxxx xx qualified.

—

the xxxxxx xx xxxxx qualification: — „QCForESig“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXXxx}") xxxxxxx xxx identified xxxxxxxxxxxx, xxxx claimed xx xxxxxx xx xxxxxxxxx, xxx qualified certificates xxx electronic xxxxxxxxx xxxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014; — „XXXxxXXxxx“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCForESeal}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, when claimed xx stated xx xxxxxxxxx, are xxxxxxxxx xxxxxxxxxxxx for electronic xxxx under Xxxxxxxxxx (XX) Xx&xxxx;910/2014; xx — „XXXxxXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXXX}") meaning xxx identified xxxxxxxxxxxx, xxxx xxxxxxx or xxxxxx xx xxxxxxxxx, xxx xxxxxxxxx xxxxxxxxxxxx xxx xxxxxxx xxxxxxxxxxxxxx xxxxx Regulation (XX) Xx&xxxx;910/2014.

—

xxxxxxx xx xxx xxx private key xxxxxxx xx x&xxxx;xxxxxxxxx xxxxxxxxx xx qualified xxxx xxxxxxxx xxxxxx (XXXX) xxx xxx xxxxxx xxxxxxx: — „XXXxxxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxXXXX}") meaning the xxxxxxxxxx certificates, xxxx xxxxxxx xx xxxxxx xx xxxxxxxxx, have xxxxx private xxx xxxxxxxx xx a QSCD; — „QCNoQSCD“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCNoQSCD}") xxxxxxx xxx identified xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx xx xxxxxxxxx, xxxx xxx their xxxxxxx xxx residing xx a QSCD; — „QCQSCDStatusAsInCert“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxXxXxXxxx}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx or xxxxxx xx xxxxxxxxx, xx xxxxxxx xxxxxx xxxxxxx xxxxxxxxxxx xxxxxxxxxxx xxxxx xxxxxxx xx not xxxxx private xxx xx residing in x&xxxx;XXXX; xx — „XXXXXXXxxxxxxXxXxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxxXxXxxxxx}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxx xxx xxxxxxx xx stated as xxxxxxxxx, xxxx xxxxx xxxxxxx key xx xxxxxxxx xx x&xxxx;XXXX xxx xxxxx xxx xxxxxxxxxx and management xx xxxx xxxxxxx xxx xx xxxx xx x&xxxx;xxxxxxxxx XXX xx behalf xx xxx xxxxxx xxxxx xxxxxxxx xx xxxxxxxxx xx xxx xxxxxxxxxxx;

Xxxxxxxxxx xx xxx xxxxxxx xx xxxxxxxxxxxx issued xxxxx Directive 1999/93/EC, xxx xxxxxxxxx xxxxxxxxxx xxx xxxxxxx xxx xxxxxxx xxxxxxxxxx xxxxxxxxxxx xxxxxxxxx:

—

xxxxxxx xx not xxx xxxxxxx xxx xxxxxxx xx x&xxxx;xxxxxx xxxxxxxxx xxxxxxxx xxxxxx (XXXX): — „XXXxxxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxXXXX}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx claimed xx xxxxxx xx qualified, xxxx xxxxx xxxxxxx xxx xxxxxxxx xx xx SSCD; — „QCNoSSCD“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxXXXX}") meaning the xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx or xxxxxx xx qualified, xx xxx xxxx xxxxx xxxxxxx xxx residing xx xx XXXX; xx — „XXXXXXXxxxxxXxXxXxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxXxXxXxxx}") xxxxxxx xxx identified xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx xx xxxxxxxxx, xx contain xxxxxx machine xxxxxxxxxxx xxxxxxxxxxx about xxxxxxx xx xxx their xxxxxxx key xx xxxxxxxx xx an XXXX.

—	xxx issuance xx x&xxxx;Xxxxx Xxxxxx: — „XXXxxXxxxxXxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXxxxxXxxxxx}") xxxxxxx the xxxxxxxxxx xxxxxxxxxxxx, when xxxxxxx or xxxxxx xx xxxxxxxxx, xxx xxxxxx to x&xxxx;Xxxxx Xxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX.

Xxxx:

Xxx xxxxxxxxxxx provided xx xxx xxxxxxx xxxx xx xx xx xxxxxxxxxx xx xxxxxxxx xxxxxxx that xxx xxxxxxxxxxx xx xxx xx be xxxxxxxxxx xx qualified xx xxx end-entity xxxxxxxxxxx xxxx not follow xxx xx the xxxxxxx rules xxxxxxx xxxxx, and: — if no „Xxx“ „Xxxxxxxxxxxxxx Xxxxxxxxx“ xxxxxxxxxxx xx xxxxxxx xxx the xxxxx xxxxxx&xxxx;XX/XX xxxxxxxxxxxxx xxxxxxx xxxxx xx xxxxxxx xxx xxxxxxxxxxx xxxx x&xxxx;„XXXxxxxxxxx“ qualifier, or — a „Sie“ „Xxxxxxxxxxxxxx Xxxxxxxxx“ xxxxxxxxxxx xx xxxxxxx xxx xxx xxxxx xxxxxx&xxxx;XX/XX xxxxxxxxxxxxx xxxxxxx xxxxx xx qualify the xxxxxxxxxxx xxxx a „NotQualified“ xxxxxxxxx.

X.3&xxxx;&xxxx;&xxxx; Xxxxx xxxxxxx

„Xxxxxxx xxxxxxx xxxxxxxxxxx“ xxx xx xx xxxx as Xxxxx Xxxxxxx xx xxx xxxxxxx xx xxxxxxxxxx xxxxxxxxxx xxxxxxxxxx or xxxxx for xxxxx xxxxxx’x&xxxx;xx xxxx creator’s certificate xx xx xx xxxxxxxxx against xxxxxxxxxxx xx xxx xxxxxxx xxxx, hence only xxx xxxxxx key xxx the xxxxxxxxxx xxxxxxx name xxx xxxxxx xx Trust Xxxxxx information. When xxxx xxxx one xxxxxxxxxxx xxxxxxxxxx xxx xxxxxx key identifying xxx service, xxxx xxx to be xxxxxxxxxx xx Xxxxx Xxxxxx certificates xxxxxxxxx xxxxxxxxx xxxxxxxxxxx xxxx xxxxxx xx xxx xxxxxxxxxxx xxxxxxxx xxxxxxxx xx Xxxxx Xxxxxx xxxxxxxxxxx.

X.4&xxxx;&xxxx;&xxxx; Xxxxxxx xxxx xxx xxx xxxxxxxxxxxxxx xx trust service xxxxxxx

Xxx general xxxx xxx interpretation xx any „Sti“ xxxx entry, xxxxxxxx xxxxxxx xxxxxxxxx through x&xxxx;„Xxx“ „xxxxxxxxxxXxxxxxxXxxxxxxxxxx“, xxx xxxxxxxxxxxxx xx qualified xxxxx xxxxxxxx xx xxxx, xxx that „Xxx“ identified service xxxx, and possibly xx xxxxxxxxxxx with x&xxxx;„Xxx“ „additionalServiceInformation“ XXX, xxx xxxxxx xxxxxxx xxxxx according xx xxx „Service name“ xxxxx xxxxx xxx xxxxxxxx identified xx xxx „Xxxxxxx xxxxxxx xxxxxxxx“ xxxxx xxxxx xxx the xxxxxxx xxxxxxxx xxxxxx according xx xxx „Xxxxxxx xxxxxxx xxxxxx“ xxxxx xxxxx xx xxxx xxx xxxx xxxxxxxxx xx xxx „Xxxxxxx xxxxxx xxxxxxxx xxxx xxx xxxx“.

Xxxxxxxx xxxxxxxxxxxxxx xxxxx xxx any xxxxxxxxxx information xxxx xxxxxx xx a listed xxxxxxx (x.x. „Xxxxxxx xxxxxxxxxxx extensions“ xxxxx) xxx be found, xxxx applicable, xx xxx Xxxxxx Xxxxx xxxxxxxx XXX xx xxxx xx xxx xxxxxxx „Xxxxxx type/community/rules“ xxxxx.

Xxxxxx refer xx xxx xxxxxxxxxxxx acts xxxxxxx pursuant to Xxxxxxx&xxxx;22(5) xx Regulation (XX) Xx&xxxx;910/2014 xxx xxxxxxx details xx xxx xxxxxxxxxxxxxx xx xxx xxxxxx xx xxx Xxxxxx States‘ xxxxxxx lists.“;