Plné znění - 32025D2164

„X.&xxxx;&xxxx;&xxxx; Xxxxxxxxxxxxx xx x&xxxx;xxxxxx

Each Xxxxxx Xxxxx xxxx xxxxxx a trusted xxxx xxxxxxxxx xxxxxxxxxxx xxxxxxx xx xxx xxxxxxxxx xxxxx xxxxxxx providers xxxx are under xxxxxxxxxxx, xxxxxxxx xxxx xxxxxxxxxxx related to xxx xxxxxxxxx xxxxx xxxxxxxx xxxx xxxxxxx, xx xxxxxxxxxx xxxx xxx xxxxxxxx xxxxxxxxxx xxxx xxxx xx Xxxxxxxxxx (EU) Xx&xxxx;910/2014.

Xxx xxxxxxx implementation xx xxxx xxxxxxx xxxxx xx also xx xx referred xx xx the list xx xxxxx (xxxxxxxx) xxxxxxx each Xxxxxx Xxxxx’x&xxxx;xxxxxxx xxxx, compiled xx xxx Xxxxxxxx Xxxxxxxxxx.

X.&xxxx;&xxxx;&xxxx; Xxxxxx/xxxxx for xxx xxxxxxxxxx xx xxx xxxxxx xxxxxxxx

Xxxxxx States xxxx xxxxxxxxx qualified trust xxxxxxx providers established xx xxx xxxxxxxxx xx xxx designating Xxxxxx Xxxxx xx xxxx xxxx in Xxxxxxx XXX xx Xxxxxxxxxx (XX) Xx&xxxx;910/2014 xx xxxxxx xxxx xxxxx xxxxxxxxx xxxxx xxxxxxx xxxxxxxxx xxx xxx xxxxxxxxx xxxxx xxxxxxxx xxxx xxxxxxx xxxx the xxxxxxxxxxxx xxxx xxxx xx xxxx Xxxxxxxxxx.

Xxx xxxxxxx xxxxx xx Member Xxxxxx include, as x&xxxx;xxxxxxx, xxxxxxxxxxx specified xx Articles 1 xxx&xxxx;2 xx Xxxxxxxxxxxx Xxxxxxxx (XX)&xxxx;2015/1505.

Xxx xxxxxxx xxxxx xxxxxxx both xxxxxxx and xxxxxxxxxx xxxxxxxxxxx xxxxx xxx xxxxxx of xxxxxx xxxxx xxxxxxxx.

Xxxx Xxxxxx Xxxxx’x&xxxx;xxxxxxx xxxx xxxx xxxxxxx xxxxxxxxxxx xx xxx xxxxxxxx xxxxxxxxxxx xxxxxx and, xxxxx xxxxxxxxxx, xxxxxxxx xxxxxxxx, xxxxxxxxx xxxxxxx accreditation xxxxxx(x) xxxxx xxxxx xxx xxxxx service xxxxxxxxx and xxx xxxxx services they xxxxxxx xxx listed.

C.    Xxxxxxxxxxxxxx of the xxxxxxx xxxx

Xxx xxxxxxx xxxx xxxxxxxxxx xxx xxxxxxxxxxxx, services xx products xxxxxxx xx x&xxxx;xxxxxxx list xxxxxxxxx xx accordance xxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014 xxx xx xxxxxxx:

X.1&xxxx;&xxxx;&xxxx; Xxxxxxxxx status xx x&xxxx;xxxxx xxxxxxx

Xxx xxxxxxxxx status xx x&xxxx;xxxxx xxxxxxx xx xxxxxxxxx xx xxx xxxxxxxxxxx xx:

—	xxx „Xxxxxxx xxxx identifier“ („Xxx“) value in x&xxxx;xxxxxxx xxxxx;

—

xxxxx xxxxxxxxxx, xxx presence xx xxx xx the xxxxxxxxx xxxxxx in xxx the xxxxxx „xxxxxxxxxxXxxxxxxXxxxxxxxxxx xxxxxxxxx“ in xxx xxxxxxx xxxxx: — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxxXxxxxxxxxx}“: xxxxxxx specifying the „Xxx“ xxxxxxxxxx xxxxxxx xx xxxxx xxxxxxxx xxx electronic xxxxxxxxxx; — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxxXxxxx}“: xxxxxxx xxxxxxxxxx the „Xxx“ xxxxxxxxxx xxxxxxx xx xxxxx xxxxxxxx xxx xxxxxxxxxx xxxxx; xx — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxXxxXxxxXxxxxxxxxxxxxx}“: xxxxxxx xxxxxxxxxx xxx „Xxx“ identified xxxxxxx as xxxxx xxxxxxxx for website xxxxxxxxxxxxxx; xxx — xxx status xxxxxxxxx xx the „Xxxxxxx current xxxxxx“ xxxxx xxxxx xx xxxx the xxxx xxxxxxxxx xx the „Xxxxxxx status xxxxxxxx xxxx xxx xxxx“.

Xxxxxxxxxx xxxxxxxxxxx xxxxx xxxx x&xxxx;xxxxxxxxx xxxxxx xx xxxxxxxxx provided xxxx xxxxxxxxxx.

X.1.1&xxxx;&xxxx;&xxxx; Service status xxxxx Xxxxxxxxxx (EU) Xx&xxxx;910/2014

Xxxxxxxxx xxx xxxxx 1&xxxx;Xxxx 2016 (XXX+2), xxx xxxxx xx the „Xxxxxxx xxxxxxx xxxxxx“ field xxxx xx xxx Xxxxxxxxxxx Xxxx xxxxxxxxxx xx x&xxxx;Xxxxxx Xxxxx xx xxxxxxxx xxxx x&xxxx;xxxxx service entry xx xxxxxxxxxxxx x&xxxx;xxxxxxxxx xxxxx xxxxxxx xx xxx XXXxxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxx}“.

X.1.2&xxxx;&xxxx;&xxxx; Xxxxxxx xxxxxx under Xxxxxxxxx&xxxx;1999/93/XX

Xxxxxxxx xxxxxx 1st Xxxx 2016 (XXX+2), xxx value of xxx „Xxxxxxx xxxxxxx xxxxxx“ field used xx the Supervisory Xxxx designated xx x&xxxx;Xxxxxx State to xxxxxxxx xxxx x&xxxx;xxxxx xxxxxxx xxxxx xx xxxxxxxxxxxx x&xxxx;xxxxxxxxxxxxx-xxxxxxx-xxxxxxxx xxxxxxx xxxxxxxxx xxxxxxxxxxxx xx xxx of xxx xxxxxxxxx XXXx:

—	xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxxxxxxxxxxx}“;

—	xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxx}“; or

—	http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited}“.

C.2    Xxxxxxxxx xxxxxx xx x&xxxx;xxxxxxxxxxx

Regarding xxxxxxxxx xxxxx xxxxxxx xxxxxxxxx xxxxxxx xxxxxxxxx certificates xxx electronic xxxxxxxxxx, xxx xxxxxxxxxx seals xxx/xx xxx xxxxxxx xxxxxxxxxxxxxx, a „CA/QC“ „Service xxxx xxxxxxxxxx“ („Xxx“) xxxxx xxxxxxxxx xxxx xxx xxx-xxxxxx xxxxxxxxxxx xxxxxx by xx xxxxx xxx XX xxxxxxxxxxx xx xxx XX’x&xxxx;xxxxxx key xxx XX’x&xxxx;xxxx (both XX xxxx to xx xxxxxxxxxx xx xxxxx xxxxxx xxxxx) xxxxxxx xx xxx „Xxxxxxx xxxxxxx xxxxxxxxxx“ („Xxx“), xx xx xxx x&xxxx;xxxxxxxxx certificate (XX) xx x&xxxx;xxxxxxx date xxx time provided xxxx the trust xxxxxxx xxxxx xxxxxxxxx x&xxxx;xxxxxxx qualified xxxxxx (xxx xxxxxx X.1) xxx xxxx the xxxxx xxxxxxxxxxxx are xxx xxxx xxxxxxxxx xx xxxx date xxx xxxx.

X.2.1&xxxx;&xxxx;&xxxx; Xxxxxxx xxxxx

X.2.1.1&xxxx;&xxxx;&xxxx;Xxxxxxxxxxx status xxxxxxxxxxxx xxxx

Xxx end-entity xxxxxxxxxxx xxxxxxxx xxx XXXX xxxxxxxxxxxx QcStatements xxxxxxxxx as xxxxxxxxx xx standard ETSI XX 319 412-5 with xxx xxxxxxxxx requirements:

—	the xx-xxxx-xxx-XxXxxxxxxxxx (urn:oid:0.4.0.1862.1.1) XxXxxxxxxxx xx present; xxx

—

xxxxx xxxxxxx, xxx id-etsi-qcs-QcType (xxx:xxx:0.4.0.1862.1.6) XxXxxxxxxxx xxxxxxxx xxxxxxx xxx xx xxx xxxxxxxxx values: — the xx-xxxx-xxx-xxxxx (urn:oid:0.4.0.1862.6.1) ETSI xxxxxxx XX xxxx xxxxxxxxxx; — xxx xx-xxxx-xxx-xxxxx (xxx:xxx:0.4.0.1862.6.2) XXXX xxxxxxx QC xxxx identifier; xx — xxx xx-xxxx-xxx-xxx (xxx:xxx:0.4.0.1862.6.3) XXXX xxxxxxx QC xxxx xxxxxxxxxx.

Xxxxxxxxxx, xxx xx-xxxx-xxx-XxXXXX (xxx:xxx:0.4.0.1862.4) XxXxxxxxxxx may xx present.

C.2.1.2   Certificate xxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX

Xxxxxxxxxx to xxx context xx Xxxxxxxxx&xxxx;1999/93/XX xxx xx x&xxxx;xxxxxx alternative xx xxx xxxxx xxxxxxxxxxxx xxxx, xxx xxx-xxxxxx xxxxxxxxxxx xxxxxxxx:

—	xxx XXXX xxxxxxxxxxxx XxXxxxxxxxxx xxxxxxxxx (xx specified xx XXXX EN 319&xxxx;412-5) xxxx the xx-xxxx-xxx-XxXxxxxxxxxx (xxx:xxx:0.4.0.1862.1.1) XxXxxxxxxxx xxxxx xxxxxxx;

—	xxx xxxxxx QCP+ (xxx:xxx:0.4.0.1456.1.1) ETSI defined xxxxxxxxxxx xxxxxx OID; xx

—	xxx legacy XXX (xxx:xxx:0.4.0.1456.1.2) ETSI defined xxxxxxxxxxx xxxxxx XXX.

X.2.2&xxxx;&xxxx;&xxxx; Xxxxxxxxxx xxxxx: Xxxxxxxx xx Xxxxxxxxxxxxxx Extension

Xx „Xxx“ „Qualifications Xxxxxxxxx“ information xx xxxxxxxxx xx xxxxxx 5.5.9.2 xx xxxxxxxx XXXX XX 119&xxxx;612 xx xxxxxxx, then xx xxxxxxxx to xxx xxxxx xxxxxxx xxxxx, those certificates xxxx xxx xxxxxxxxxx xxxxxxx the xxx xx „Xxx“ „Xxxxxxxxxxxxxx Xxxxxxxxx“ xxxxxxxxxxx xxxx xx xxxxxxxxxx xxxxxxxxx xx the associated xxxxxxxxxx. Xxxxx qualifiers xxx used xxxx xxxxxxxxx xx compensate xxx a lack xx xxxxxxxxxxxx machine xxxxxxxxxxx xxxxxxxxxxx xx xxx xxxxxxxxxxxxx certificate content. Xxxx xxx xxx xx be xxxx xx xxxxxxxxxx xxx x&xxxx;xxxx xx machine xxxxxxxxxxx information xx xxxxxxxxxxxx xxxxxx after 1&xxxx;Xxxx 2016 where xxxx xxxx xxxxx xxxxxx in a non-compliance xxxx Annex I, XXX xx XX xx Xxxxxxxxxx (XX) Xx&xxxx;910/2014. Xxxxxxx, they xxx xx xxxx xx provide xxxxxxx xxxxxxx xxxxxxxxxxx xxxxxxxxxxx xxxx the xxxxxxxxxxx xxxxxxxx xx the xxxxxxxxxxx, while xxxxxxxxx xxxx xxx Xxxxxxxxxx, xxxx not align xxxx the xxxxx xxxxxxx xxxxxxxxxxxxxx xxxxx. Xxxxx xxxx, they xxxxxxx additional xxxxxxxxxxx xxxxxxxxx:

—

xxxxx qualified xxxxxx: — „XXXxxxxxxxx“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCStatement}") meaning xxx identified xxxxxxxxxxxx xxx xxxxxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX xx xxxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014; xx — „XxxXxxxxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxXxxxxxxxx}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx are xxx xx be xxxxxxxxxx xx xxxxxxxxx.

—

xxx xxxxxx xx their xxxxxxxxxxxxx: — „XXXxxXXxx“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCForESig}") meaning xxx xxxxxxxxxx certificates, xxxx xxxxxxx xx xxxxxx xx xxxxxxxxx, xxx xxxxxxxxx xxxxxxxxxxxx xxx xxxxxxxxxx xxxxxxxxx xxxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014; — „XXXxxXXxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXXxxx}") xxxxxxx xxx identified xxxxxxxxxxxx, xxxx claimed xx xxxxxx xx xxxxxxxxx, xxx qualified xxxxxxxxxxxx xxx xxxxxxxxxx xxxx xxxxx Xxxxxxxxxx (XX) No 910/2014; xx — „XXXxxXXX“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCForWSA}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx claimed xx xxxxxx xx xxxxxxxxx, xxx xxxxxxxxx certificates xxx website xxxxxxxxxxxxxx xxxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014.

—

xxxxxxx xx not xxx private xxx xxxxxxx in x&xxxx;xxxxxxxxx xxxxxxxxx xx xxxxxxxxx xxxx creation xxxxxx (XXXX) xxx xxx xxxxxx xxxxxxx: — „XXXxxxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxXXXX}") meaning xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx xx stated xx qualified, xxxx xxxxx private xxx xxxxxxxx xx x&xxxx;XXXX; — „XXXxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxXXXX}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx or xxxxxx xx qualified, xxxx xxx their xxxxxxx key xxxxxxxx xx x&xxxx;XXXX; — „XXXXXXXxxxxxXxXxXxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxXxXxXxxx}") xxxxxxx xxx xxxxxxxxxx certificates, when xxxxxxx xx stated xx xxxxxxxxx, do xxxxxxx xxxxxx xxxxxxx xxxxxxxxxxx xxxxxxxxxxx about xxxxxxx xx xxx xxxxx xxxxxxx xxx xx xxxxxxxx in x&xxxx;XXXX; xx — „XXXXXXXxxxxxxXxXxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxxXxXxxxxx}") meaning the xxxxxxxxxx xxxxxxxxxxxx, when xxxx are xxxxxxx xx xxxxxx xx xxxxxxxxx, xxxx xxxxx xxxxxxx key xx xxxxxxxx in x&xxxx;XXXX xxx which xxx xxxxxxxxxx xxx management xx xxxx xxxxxxx xxx xx done xx x&xxxx;xxxxxxxxx XXX xx behalf xx xxx xxxxxx whose xxxxxxxx xx xxxxxxxxx xx xxx xxxxxxxxxxx;

Xxxxxxxxxx xx xxx context xx xxxxxxxxxxxx xxxxxx xxxxx Directive 1999/93/EC, xxx xxxxxxxxx xxxxxxxxxx xxx xxxxxxx xxx xxxxxxx xxxxxxxxxx xxxxxxxxxxx xxxxxxxxx:

—

xxxxxxx xx xxx xxx xxxxxxx xxx xxxxxxx xx x&xxxx;xxxxxx signature xxxxxxxx device (SSCD): — „QCWithSSCD“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxXXXX}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx xx xxxxxxxxx, xxxx xxxxx xxxxxxx xxx xxxxxxxx in xx XXXX; — „XXXxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxXXXX}") xxxxxxx xxx xxxxxxxxxx certificates, when xxxxxxx or xxxxxx xx xxxxxxxxx, do xxx xxxx xxxxx xxxxxxx key residing xx an XXXX; xx — „XXXXXXXxxxxxXxXxXxxx“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCSSCDStatusAsInCert}") xxxxxxx xxx identified xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx xx xxxxxxxxx, do contain xxxxxx xxxxxxx processable xxxxxxxxxxx xxxxx xxxxxxx xx not xxxxx xxxxxxx xxx xx xxxxxxxx xx xx XXXX.

—	xxx xxxxxxxx xx x&xxxx;Xxxxx Xxxxxx: — „XXXxxXxxxxXxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXxxxxXxxxxx}") meaning the xxxxxxxxxx certificates, xxxx xxxxxxx xx xxxxxx xx qualified, xxx xxxxxx xx a Legal Xxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX.

Xxxx:

Xxx xxxxxxxxxxx xxxxxxxx xx xxx trusted list xx to xx xxxxxxxxxx xx xxxxxxxx xxxxxxx xxxx the xxxxxxxxxxx is xxx xx xx considered xx xxxxxxxxx if xxx xxx-xxxxxx certificate xxxx not xxxxxx xxx xx xxx xxxxxxx rules defined xxxxx, and: — if xx „Xxx“ „Qualifications Xxxxxxxxx“ xxxxxxxxxxx xx xxxxxxx xxx xxx trust xxxxxx&xxxx;XX/XX xxxxxxxxxxxxx xxxxxxx xxxxx xx xxxxxxx xxx xxxxxxxxxxx xxxx x&xxxx;„XXXxxxxxxxx“ qualifier, xx — x&xxxx;„Xxx“ „Xxxxxxxxxxxxxx Xxxxxxxxx“ information xx present for xxx xxxxx xxxxxx&xxxx;XX/XX xxxxxxxxxxxxx service xxxxx xx qualify xxx xxxxxxxxxxx xxxx a „NotQualified“ xxxxxxxxx.

X.3&xxxx;&xxxx;&xxxx; Xxxxx xxxxxxx

„Xxxxxxx digital xxxxxxxxxxx“ xxx to xx xxxx xx Xxxxx Xxxxxxx xx the xxxxxxx xx validating xxxxxxxxxx xxxxxxxxxx xx xxxxx for xxxxx xxxxxx’x&xxxx;xx xxxx creator’s certificate xx xx xx xxxxxxxxx xxxxxxx information xx the xxxxxxx xxxx, xxxxx xxxx xxx xxxxxx key xxx the xxxxxxxxxx xxxxxxx xxxx xxx xxxxxx xx Trust Xxxxxx xxxxxxxxxxx. When xxxx than xxx xxxxxxxxxxx xxxxxxxxxx the xxxxxx xxx identifying xxx xxxxxxx, they xxx to xx xxxxxxxxxx as Xxxxx Xxxxxx xxxxxxxxxxxx xxxxxxxxx xxxxxxxxx xxxxxxxxxxx with xxxxxx xx xxx xxxxxxxxxxx strictly required xx Xxxxx Xxxxxx xxxxxxxxxxx.

X.4&xxxx;&xxxx;&xxxx; General xxxx xxx xxx xxxxxxxxxxxxxx xx trust service xxxxxxx

The xxxxxxx xxxx xxx xxxxxxxxxxxxxx xx xxx „Xxx“ xxxx xxxxx, xxxxxxxx xxxxxxx xxxxxxxxx xxxxxxx x&xxxx;„Xxx“ „xxxxxxxxxxXxxxxxxXxxxxxxxxxx“, xxx xxxxxxxxxxxxx xx qualified xxxxx services xx xxxx, for xxxx „Xxx“ xxxxxxxxxx xxxxxxx xxxx, and xxxxxxxx xx combination xxxx x&xxxx;„Xxx“ „xxxxxxxxxxXxxxxxxXxxxxxxxxxx“ XXX, xxx xxxxxx xxxxxxx xxxxx xxxxxxxxx xx xxx „Xxxxxxx xxxx“ xxxxx xxxxx xxx xxxxxxxx identified xx xxx „Xxxxxxx xxxxxxx xxxxxxxx“ xxxxx xxxxx xxx xxx xxxxxxx xxxxxxxx status according xx the „Xxxxxxx xxxxxxx status“ xxxxx xxxxx xx xxxx xxx xxxx indicated xx xxx „Xxxxxxx xxxxxx xxxxxxxx xxxx xxx time“.

Specific interpretation xxxxx xxx xxx xxxxxxxxxx xxxxxxxxxxx with xxxxxx xx x&xxxx;xxxxxx xxxxxxx (x.x. „Xxxxxxx xxxxxxxxxxx xxxxxxxxxx“ xxxxx) xxx xx found, xxxx xxxxxxxxxx, in xxx Xxxxxx Xxxxx xxxxxxxx XXX xx xxxx xx xxx xxxxxxx „Xxxxxx type/community/rules“ xxxxx.

Xxxxxx refer xx xxx implementing xxxx xxxxxxx xxxxxxxx to Xxxxxxx&xxxx;22(5) of Xxxxxxxxxx (XX) Xx&xxxx;910/2014 xxx xxxxxxx xxxxxxx xx xxx specifications xx xxx fields xx xxx Member Xxxxxx‘ xxxxxxx lists.“;