Plné znění - 32025D2164

„X.&xxxx;&xxxx;&xxxx; Xxxxxxxxxxxxx xx x&xxxx;xxxxxx

Xxxx Xxxxxx Xxxxx must xxxxxx x&xxxx;xxxxxxx list xxxxxxxxx xxxxxxxxxxx xxxxxxx xx xxx xxxxxxxxx xxxxx service providers xxxx xxx under xxxxxxxxxxx, xxxxxxxx xxxx xxxxxxxxxxx related to xxx qualified xxxxx xxxxxxxx they xxxxxxx, xx xxxxxxxxxx with xxx xxxxxxxx provisions xxxx down xx Xxxxxxxxxx (EU) Xx&xxxx;910/2014.

Xxx xxxxxxx implementation xx xxxx trusted lists xx also to xx referred xx xx the xxxx xx links (xxxxxxxx) xxxxxxx xxxx Member Xxxxx’x&xxxx;xxxxxxx xxxx, compiled xx xxx Xxxxxxxx Xxxxxxxxxx.

X.&xxxx;&xxxx;&xxxx; Xxxxxx/xxxxx xxx xxx assessment xx xxx xxxxxx xxxxxxxx

Xxxxxx Xxxxxx must xxxxxxxxx xxxxxxxxx trust xxxxxxx xxxxxxxxx xxxxxxxxxxx xx the xxxxxxxxx xx xxx xxxxxxxxxxx Xxxxxx Xxxxx xx xxxx down xx Xxxxxxx XXX of Xxxxxxxxxx (XX) No 910/2014 xx xxxxxx that xxxxx xxxxxxxxx trust xxxxxxx xxxxxxxxx xxx xxx xxxxxxxxx trust xxxxxxxx xxxx xxxxxxx xxxx the xxxxxxxxxxxx xxxx xxxx xx xxxx Xxxxxxxxxx.

Xxx xxxxxxx xxxxx of Xxxxxx Xxxxxx include, as x&xxxx;xxxxxxx, xxxxxxxxxxx xxxxxxxxx xx Xxxxxxxx 1 xxx&xxxx;2 of Implementing Xxxxxxxx (XX)&xxxx;2015/1505.

Xxx trusted xxxxx include xxxx xxxxxxx and historical xxxxxxxxxxx xxxxx xxx xxxxxx of xxxxxx xxxxx services.

Each Xxxxxx Xxxxx’x&xxxx;xxxxxxx list must xxxxxxx information xx xxx xxxxxxxx supervisory xxxxxx and, xxxxx xxxxxxxxxx, national xxxxxxxx, xxxxxxxxx xxxxxxx xxxxxxxxxxxxx xxxxxx(x) xxxxx xxxxx xxx xxxxx xxxxxxx xxxxxxxxx xxx xxx xxxxx xxxxxxxx xxxx xxxxxxx are listed.

C.    Xxxxxxxxxxxxxx xx the xxxxxxx list

Xxx xxxxxxx user xxxxxxxxxx xxx xxxxxxxxxxxx, services xx xxxxxxxx relying xx x&xxxx;xxxxxxx xxxx xxxxxxxxx xx accordance xxxx Regulation (XX) Xx&xxxx;910/2014 xxx xx xxxxxxx:

X.1&xxxx;&xxxx;&xxxx; Xxxxxxxxx xxxxxx xx a trust service

Xxx xxxxxxxxx status xx a trust xxxxxxx xx xxxxxxxxx by xxx xxxxxxxxxxx xx:

—	xxx „Xxxxxxx xxxx xxxxxxxxxx“ („Xxx“) value in x&xxxx;xxxxxxx xxxxx;

—

xxxxx applicable, xxx xxxxxxxx xx xxx xx xxx xxxxxxxxx xxxxxx xx xxx the xxxxxx „xxxxxxxxxxXxxxxxxXxxxxxxxxxx xxxxxxxxx“ xx xxx service xxxxx: — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxxXxxxxxxxxx}“: xxxxxxx xxxxxxxxxx the „Xxx“ xxxxxxxxxx xxxxxxx xx being xxxxxxxx xxx electronic signatures; — http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/ForeSeals}“: xxxxxxx specifying xxx „Xxx“ identified xxxxxxx xx xxxxx provided xxx xxxxxxxxxx xxxxx; xx — xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxXxxXxxxXxxxxxxxxxxxxx}“: xxxxxxx specifying xxx „Sti“ identified xxxxxxx xx being xxxxxxxx for xxxxxxx xxxxxxxxxxxxxx; xxx — xxx xxxxxx xxxxxxxxx xx xxx „Xxxxxxx xxxxxxx xxxxxx“ xxxxx xxxxx as xxxx the date xxxxxxxxx in xxx „Xxxxxxx xxxxxx xxxxxxxx xxxx xxx xxxx“.

Xxxxxxxxxx xxxxxxxxxxx xxxxx xxxx x&xxxx;xxxxxxxxx xxxxxx xx xxxxxxxxx provided xxxx xxxxxxxxxx.

X.1.1&xxxx;&xxxx;&xxxx; Xxxxxxx xxxxxx xxxxx Xxxxxxxxxx (EU) Xx&xxxx;910/2014

Including and xxxxx 1 July 2016 (XXX+2), xxx value xx xxx „Xxxxxxx xxxxxxx xxxxxx“ xxxxx xxxx xx the Xxxxxxxxxxx Body xxxxxxxxxx xx x&xxxx;Xxxxxx Xxxxx xx xxxxxxxx xxxx x&xxxx;xxxxx xxxxxxx xxxxx xx xxxxxxxxxxxx x&xxxx;xxxxxxxxx xxxxx service xx xxx URIhttp://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/granted}“.

C.1.2    Service xxxxxx under Directive 1999/93/EC

Xxxxxxxx xxxxxx 1xx Xxxx 2016 (XXX+2), xxx xxxxx xx xxx „Xxxxxxx xxxxxxx xxxxxx“ xxxxx xxxx xx xxx Xxxxxxxxxxx Xxxx xxxxxxxxxx xx x&xxxx;Xxxxxx Xxxxx xx xxxxxxxx that a trust xxxxxxx xxxxx is xxxxxxxxxxxx x&xxxx;xxxxxxxxxxxxx-xxxxxxx-xxxxxxxx issuing xxxxxxxxx xxxxxxxxxxxx xx xxx of the xxxxxxxxx URIs:

—	http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision}“;

—	http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/supervisionincessation}“; xx

—	xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/Xxxxxxxxx/xxxxxxxxxx}“.

X.2&xxxx;&xxxx;&xxxx; Xxxxxxxxx status xx x&xxxx;xxxxxxxxxxx

Xxxxxxxxx qualified xxxxx xxxxxxx providers xxxxxxx xxxxxxxxx xxxxxxxxxxxx xxx xxxxxxxxxx xxxxxxxxxx, xxx xxxxxxxxxx xxxxx xxx/xx for website xxxxxxxxxxxxxx, a „CA/QC“ „Service xxxx identifier“ („Xxx“) xxxxx xxxxxxxxx xxxx xxx end-entity xxxxxxxxxxx xxxxxx xx xx xxxxx xxx XX xxxxxxxxxxx xx the XX’x&xxxx;xxxxxx xxx xxx XX’x&xxxx;xxxx (xxxx XX xxxx xx xx xxxxxxxxxx as xxxxx xxxxxx xxxxx) present xx xxx „Service xxxxxxx xxxxxxxxxx“ („Xxx“), xx xx xxx x&xxxx;xxxxxxxxx xxxxxxxxxxx (XX) xx a certain date xxx time xxxxxxxx xxxx the xxxxx xxxxxxx xxxxx indicates x&xxxx;xxxxxxx qualified xxxxxx (xxx clause C.1) xxx xxxx xxx xxxxx requirements xxx xxx xxxx reference xx xxxx xxxx xxx xxxx.

X.2.1&xxxx;&xxxx;&xxxx; Default xxxxx

C.2.1.1   Certificate status xxxxxxxxxxxx rule

The xxx-xxxxxx xxxxxxxxxxx xxxxxxxx xxx XXXX standardised QcStatements xxxxxxxxx as xxxxxxxxx xx xxxxxxxx XXXX XX 319&xxxx;412-5 with xxx following xxxxxxxxxxxx:

—	xxx xx-xxxx-xxx-XxXxxxxxxxxx (xxx:xxx:0.4.0.1862.1.1) XxXxxxxxxxx xx present; xxx

—

xxxxx xxxxxxx, xxx xx-xxxx-xxx-XxXxxx (xxx:xxx:0.4.0.1862.1.6) XxXxxxxxxxx xxxxxxxx xxxxxxx xxx xx xxx xxxxxxxxx xxxxxx: — xxx xx-xxxx-xxx-xxxxx (xxx:xxx:0.4.0.1862.6.1) ETSI xxxxxxx QC xxxx xxxxxxxxxx; — xxx id-etsi-qct-eseal (urn:oid:0.4.0.1862.6.2) XXXX xxxxxxx XX xxxx identifier; or — the xx-xxxx-xxx-xxx (xxx:xxx:0.4.0.1862.6.3) XXXX xxxxxxx QC xxxx xxxxxxxxxx.

Xxxxxxxxxx, xxx id-etsi-qct-QcSSCD (xxx:xxx:0.4.0.1862.4) QcStatement may xx present.

C.2.1.2   Certificate xxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX

Xxxxxxxxxx xx xxx context of Xxxxxxxxx&xxxx;1999/93/XX xxx as x&xxxx;xxxxxx alternative xx xxx xxxxx standardised xxxx, the xxx-xxxxxx xxxxxxxxxxx xxxxxxxx:

—	xxx XXXX xxxxxxxxxxxx XxXxxxxxxxxx xxxxxxxxx (xx xxxxxxxxx in XXXX EN 319 412-5) xxxx xxx xx-xxxx-xxx-XxXxxxxxxxxx (xxx:xxx:0.4.0.1862.1.1) QcStatement xxxxx xxxxxxx;

—	xxx legacy QCP+ (xxx:xxx:0.4.0.1456.1.1) XXXX xxxxxxx xxxxxxxxxxx policy XXX; xx

—	xxx xxxxxx XXX (xxx:xxx:0.4.0.1456.1.2) ETSI xxxxxxx xxxxxxxxxxx xxxxxx OID.

C.2.2    Xxxxxxxxxx xxxxx: Xxxxxxxx xx Xxxxxxxxxxxxxx Extension

Xx „Sie“ „Xxxxxxxxxxxxxx Xxxxxxxxx“ xxxxxxxxxxx as xxxxxxxxx in xxxxxx 5.5.9.2 xx xxxxxxxx XXXX XX 119&xxxx;612 xx xxxxxxx, xxxx xx addition to xxx above xxxxxxx xxxxx, xxxxx xxxxxxxxxxxx xxxx xxx identified xxxxxxx xxx use xx „Sie“ „Xxxxxxxxxxxxxx Xxxxxxxxx“ xxxxxxxxxxx xxxx xx considered xxxxxxxxx xx xxx associated xxxxxxxxxx. Xxxxx xxxxxxxxxx xxx xxxx when xxxxxxxxx xx compensate xxx x&xxxx;xxxx xx xxxxxxxxxxxx xxxxxxx processable xxxxxxxxxxx xx xxx xxxxxxxxxxxxx xxxxxxxxxxx xxxxxxx. Xxxx xxx not xx xx xxxx xx compensate for x&xxxx;xxxx xx xxxxxxx xxxxxxxxxxx information in xxxxxxxxxxxx xxxxxx xxxxx 1&xxxx;Xxxx 2016 where xxxx xxxx xxxxx xxxxxx xx a non-compliance xxxx Xxxxx X, XXX xx XX xx Xxxxxxxxxx (XX) Xx&xxxx;910/2014. Xxxxxxx, xxxx xxx xx used xx provide xxxxxxx xxxxxxx processable xxxxxxxxxxx xxxx the xxxxxxxxxxx xxxxxxxx xx xxx xxxxxxxxxxx, xxxxx xxxxxxxxx xxxx xxx Xxxxxxxxxx, xxxx xxx xxxxx xxxx xxx xxxxx xxxxxxx interpretation xxxxx. Xxxxx xxxx, xxxx xxxxxxx xxxxxxxxxx xxxxxxxxxxx xxxxxxxxx:

—

xxxxx xxxxxxxxx xxxxxx: — „XXXxxxxxxxx“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCStatement}") xxxxxxx xxx identified xxxxxxxxxxxx xxx xxxxxxxxx under Xxxxxxxxx&xxxx;1999/93/XX xx under Xxxxxxxxxx (XX) Xx&xxxx;910/2014; xx — „XxxXxxxxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XxxXxxxxxxxx}") xxxxxxx the xxxxxxxxxx xxxxxxxxxxxx xxx xxx xx be xxxxxxxxxx xx qualified.

—

the nature xx xxxxx xxxxxxxxxxxxx: — „XXXxxXXxx“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCForESig}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx claimed or xxxxxx as xxxxxxxxx, xxx xxxxxxxxx certificates xxx xxxxxxxxxx signature xxxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014; — „XXXxxXXxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXXxxx}") xxxxxxx xxx identified xxxxxxxxxxxx, xxxx xxxxxxx xx stated xx xxxxxxxxx, xxx xxxxxxxxx xxxxxxxxxxxx xxx xxxxxxxxxx xxxx under Regulation (XX) No 910/2014; or — „QCForWSA“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCForWSA}") meaning xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx or xxxxxx as xxxxxxxxx, xxx qualified xxxxxxxxxxxx xxx xxxxxxx xxxxxxxxxxxxxx xxxxx Xxxxxxxxxx (XX) Xx&xxxx;910/2014.

—

xxxxxxx xx xxx xxx private xxx xxxxxxx in x&xxxx;xxxxxxxxx xxxxxxxxx or xxxxxxxxx xxxx xxxxxxxx xxxxxx (XXXX) xxx xxx xxxxxx xxxxxxx: — „XXXxxxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxxXXXX}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx xx xxxxxxxxx, have xxxxx xxxxxxx key xxxxxxxx in x&xxxx;XXXX; — „XXXxXXXX“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCNoQSCD}") xxxxxxx xxx identified xxxxxxxxxxxx, xxxx claimed xx xxxxxx as xxxxxxxxx, xxxx not xxxxx xxxxxxx key residing xx x&xxxx;XXXX; — „XXXXXXXxxxxxXxXxXxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxXxXxXxxx}") xxxxxxx the xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx xx xxxxxxxxx, xx xxxxxxx xxxxxx machine xxxxxxxxxxx xxxxxxxxxxx about xxxxxxx xx not xxxxx private xxx xx xxxxxxxx xx x&xxxx;XXXX; xx — „XXXXXXXxxxxxxXxXxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXXXXXxxxxxxXxXxxxxx}") xxxxxxx the xxxxxxxxxx certificates, xxxx xxxx are xxxxxxx xx xxxxxx xx xxxxxxxxx, xxxx their xxxxxxx xxx xx xxxxxxxx in a QSCD xxx xxxxx the xxxxxxxxxx xxx xxxxxxxxxx xx xxxx xxxxxxx xxx xx done xx x&xxxx;xxxxxxxxx XXX xx behalf xx xxx xxxxxx xxxxx xxxxxxxx xx xxxxxxxxx xx xxx certificate;

Restricted xx the context xx xxxxxxxxxxxx xxxxxx xxxxx Xxxxxxxxx&xxxx;1999/93/XX, the xxxxxxxxx xxxxxxxxxx xxx xxxxxxx xxx xxxxxxx xxxxxxxxxx information regarding:

—

whether xx not the xxxxxxx xxx xxxxxxx xx x&xxxx;xxxxxx signature xxxxxxxx device (XXXX): — „XXXxxxXXXX“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCWithSSCD}") meaning xxx identified xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx xx qualified, xxxx xxxxx private xxx residing in xx XXXX; — „XXXxXXXX“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxXXXX}") meaning xxx xxxxxxxxxx certificates, xxxx xxxxxxx xx xxxxxx xx xxxxxxxxx, xx xxx xxxx xxxxx xxxxxxx xxx xxxxxxxx xx xx SSCD; xx — „XXXXXXXxxxxxXxXxXxxx“ (" http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCSSCDStatusAsInCert}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx xx xxxxxx xx xxxxxxxxx, xx xxxxxxx xxxxxx machine xxxxxxxxxxx xxxxxxxxxxx xxxxx whether xx not their xxxxxxx xxx xx xxxxxxxx xx xx XXXX.

—	xxx xxxxxxxx to x&xxxx;Xxxxx Xxxxxx: — „XXXxxXxxxxXxxxxx“ (" xxxx://xxx.xxxx.xxx/XxxxXxx/XxxxxxxXxxx/XxxXxxxXxx/XXXxxXxxxxXxxxxx}") xxxxxxx xxx xxxxxxxxxx xxxxxxxxxxxx, xxxx xxxxxxx or stated xx qualified, xxx xxxxxx xx a Legal Xxxxxx under Xxxxxxxxx&xxxx;1999/93/XX.

Xxxx:

Xxx xxxxxxxxxxx provided xx xxx xxxxxxx list xx xx xx xxxxxxxxxx xx xxxxxxxx xxxxxxx xxxx the xxxxxxxxxxx xx xxx xx be considered xx qualified xx xxx xxx-xxxxxx xxxxxxxxxxx xxxx not xxxxxx xxx of xxx xxxxxxx xxxxx xxxxxxx xxxxx, xxx: — xx xx „Xxx“ „Xxxxxxxxxxxxxx Extension“ xxxxxxxxxxx is present xxx the xxxxx xxxxxx&xxxx;XX/XX corresponding xxxxxxx xxxxx xx xxxxxxx xxx xxxxxxxxxxx xxxx x&xxxx;„XXXxxxxxxxx“ xxxxxxxxx, xx — x&xxxx;„Xxx“ „Xxxxxxxxxxxxxx Xxxxxxxxx“ xxxxxxxxxxx xx present for xxx xxxxx anchor CA/QC xxxxxxxxxxxxx xxxxxxx xxxxx xx qualify xxx xxxxxxxxxxx with a „NotQualified“ xxxxxxxxx.

X.3&xxxx;&xxxx;&xxxx; Xxxxx xxxxxxx

„Xxxxxxx xxxxxxx xxxxxxxxxxx“ xxx xx be xxxx xx Xxxxx Xxxxxxx in xxx xxxxxxx xx xxxxxxxxxx xxxxxxxxxx xxxxxxxxxx xx xxxxx for xxxxx xxxxxx’x&xxxx;xx xxxx xxxxxxx’x&xxxx;xxxxxxxxxxx xx xx be xxxxxxxxx xxxxxxx xxxxxxxxxxx xx xxx xxxxxxx xxxx, hence xxxx xxx public key xxx xxx associated xxxxxxx xxxx xxx xxxxxx xx Xxxxx Xxxxxx xxxxxxxxxxx. Xxxx xxxx xxxx one xxxxxxxxxxx represents the xxxxxx xxx xxxxxxxxxxx xxx service, xxxx xxx xx xx xxxxxxxxxx xx Xxxxx Xxxxxx certificates xxxxxxxxx xxxxxxxxx information xxxx xxxxxx to the xxxxxxxxxxx xxxxxxxx xxxxxxxx xx Xxxxx Xxxxxx xxxxxxxxxxx.

X.4&xxxx;&xxxx;&xxxx; Xxxxxxx xxxx xxx the interpretation xx xxxxx xxxxxxx xxxxxxx

Xxx general xxxx for interpretation xx xxx „Sti“ xxxx entry, xxxxxxxx xxxxxxx specified xxxxxxx x&xxxx;„Xxx“ „xxxxxxxxxxXxxxxxxXxxxxxxxxxx“, not xxxxxxxxxxxxx to qualified xxxxx xxxxxxxx xx xxxx, xxx that „Xxx“ identified xxxxxxx xxxx, and possibly xx xxxxxxxxxxx with x&xxxx;„Xxx“ „xxxxxxxxxxXxxxxxxXxxxxxxxxxx“ URI, xxx listed service xxxxx xxxxxxxxx xx xxx „Service xxxx“ xxxxx xxxxx and xxxxxxxx identified xx xxx „Xxxxxxx digital xxxxxxxx“ xxxxx xxxxx xxx the xxxxxxx xxxxxxxx xxxxxx xxxxxxxxx xx the „Xxxxxxx xxxxxxx xxxxxx“ field xxxxx xx xxxx xxx xxxx xxxxxxxxx xx xxx „Xxxxxxx xxxxxx xxxxxxxx xxxx xxx time“.

Specific xxxxxxxxxxxxxx xxxxx xxx any xxxxxxxxxx xxxxxxxxxxx with xxxxxx to x&xxxx;xxxxxx xxxxxxx (x.x. „Service xxxxxxxxxxx xxxxxxxxxx“ xxxxx) xxx xx xxxxx, xxxx applicable, in xxx Xxxxxx Xxxxx xxxxxxxx URI xx xxxx of xxx xxxxxxx „Scheme xxxx/xxxxxxxxx/xxxxx“ xxxxx.

Xxxxxx xxxxx xx xxx implementing xxxx xxxxxxx xxxxxxxx to Xxxxxxx&xxxx;22(5) of Xxxxxxxxxx (XX) No 910/2014 xxx xxxxxxx xxxxxxx xx xxx specifications xx xxx fields xx xxx Member Xxxxxx‘ xxxxxxx xxxxx.“;