EESTI (ESTONIA) : Trusted List

Transcription

1 STI (ESTONIA) : Trusted List Tsl Id: 0001 Valid until nextupdate value: T00:00:00Z TSL signed on: T06:43:04Z PDF generated on: Wed Mar 21 07:44:07 CET 2018 STI (ESTONIA) - Trusted List ID: 0001 Page 1

2 TSL Scheme Information TSL Id TSLTag TSL Version Identifier 5 TSL Sequence Number 42 TSL Type Scheme Operator Name Estonian Technical Regulatory Authority Name [ et ] Tehnilise Järelevalve Amet PostalAddress Street Address [ en ] 23A Sõle St Locality [ en ] Tallinn Postal Code [ en ] Country ElectronicAddress URI mailto:info@tja.ee URI Scheme Name :Trusted list including information related to the qualified trust service providers which are supervised by the issuing Member State, together with information related to the qualified trust services provided by them, in accordance with the relevant provisions laid down in Regulation (EU) No 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC. Scheme Information URI URI [ en ] URI [ en ] URI [ et ] URI [ et ] STI (ESTONIA) - Trusted List ID: 0001 Page 2

3 Status Determination Approach Scheme Type Community Rules URI [ en ] URI [ en ] Scheme Territory Policy Or Legal Notice TSL Legal Notice [ en ] The applicable legal framework for the present trusted list is Regulation (EU) No 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC. TSL Legal Notice [ et ] Käesoleva usaldusnimekirja suhtes kohaldatav õigusraamistik on Euroopa Parlamendi ja nõukogu 23. juuli aasta määrus (EL) nr 910/2014 e-identimise ja e-tehingute jaoks vajalike usaldusteenuste kohta siseturul ja millega tunnistatakse kehtetuks direktiiv 1999/93/EÜ. Historical Information Period Pointer to other TSL - EUROPEAN UNION 1.EU TSL - MimeType: application/vnd.etsi.tsl+xml TSL Location EU TSL digital identities TSL Scheme Operator certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIID/DCCAuSgAwIBAgIQEAAAAAAAWgS4SGkJJUcHdzANBgkqhkiG9w0BAQUFADAzMQswCQYDVQQG EwJCRTETMBEGA1UEAxMKQ2l0aXplbiBDQTEPMA0GA1UEBRMGMjAxMzA2MB4XDTEzMDcxNzE3NDQw OFoXDTE4MDcxMzIzNTk1OVowbjELMAkGA1UEBhMCQkUxITAfBgNVBAMTGFBpZXJyZSBEYW1hcyAo U2lnbmF0dXJlKTEOMAwGA1UEBBMFRGFtYXMxFjAUBgNVBCoMDVBpZXJyZSBBbmRyw6kxFDASBgNV BAUTCzYwMDIxMjExOTE5MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCMv+7DvhzLwG3prirU DGaYRS2+jBZtN2cYXuloKSqAc5Q58FEmk0gsZRF+/4dkt8hgCvbBcpmG6FcvTfNxQbxPX88yYwpB YsWnJ3aD5P4QrN2+fZxwxfXxRRcX+t30IBpr+WYFv/GhJhoFo0LWUehC4eyvnMfP4J/MR4TGlQRr cwidaqabo4ibuzccau8whwydvr0jbbgwfoauww/dck0/3ri43jkur2rq//kp88cwbgyikwybbquh AQYjBgMDYGCCsGAQUFBzAChipodHRwOi8vY2VydHMuZWlkLmJlbGdpdW0uYmUvYmVsZ2l1bXJz Mi5jcnQwJgYIKwYBBQUHMAGGGmh0dHA6Ly9vY3NwLmVpZC5iZWxnaXVtLmJlMEQGA1UdIAQ9MDsw OQYHYDgJAQECATAuMCwGCCsGAQUFBwIBFiBodHRwOi8vcmVwb3NpdG9yeS5laWQuYmVsZ2l1bS5i ZTA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLmVpZC5iZWxnaXVtLmJlL2VpZGMyMDEzMDYu Y3JsMA4GA1UdDwEB/wQEAwIGQDARBglghkgBhvhCAQBAMCBSAwGAYIKwYBBQUHAQMEDDAKMAgG BgQAjkYBATANBgkqhkiG9w0BAQUFAAOCAQEA3KGmLX5XXqArQwIZQmQ6orKSu3a1z8ey1txs ZC4rMk1vpvC6MtsfDaU4N6ooprhcM/WAlcIGOPCNhvxV+xcY7gUBwa6myiClnK0CMSiGYHqWcJG8 ns13b9f0+5pjqsozipoksxb2a9vxkr5aedembyljh7wg7gwaudgdt0v87qtphn02/maljcnqt3ju UAotD7yfEybmK245jKo+pTYeCHGh7r1HzVWhbUDcQ/e1PpQXjVqBmr4k1ACtuu4H19t6K1P5kf7t a5jfejpfgy3hxt6yqzoy07wtveps4gjqtleidx1fhse7jq83ltcczlfysbrqy/okuzipo1rbqw== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer SERIAL NUMBER: Issuer CN: Citizen CA STI (ESTONIA) - Trusted List ID: 0001 Page 3

4 Issuer C: BE Subject SERIAL NUMBER: Subject GIVEN NAME: Pierre André Subject SURNAME: Damas Pierre Damas (Signature) BE Valid from: Wed Jul 17 19:44:08 CEST 2013 Valid to: Sat Jul 14 01:59:59 CEST 2018 Public Key: Authority Key Identifier 30:81:9F:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:81:8D:00:30:81:89:02:81:81:00:8C:BF::C3:BE:1C:CB:C0:6D:E9:AE:2A:D4:0C:66:98:45:2D:BE:8C:16:6D:37:67:18:5E:E9:68:29:2A:80:73:94:39:F0:51:26:93: 48:2C:65:11:7E:FF:87:64:B7:C8:60:0A:F6:C1:72:99:86:E8:57:2F:4D:F3:71:41:BC:4F:5F:CF:32:63:0A:41:62:C5:A7:27:76:83:E4:FE:10:AC:DD:BE:7D:9C:70:C5:F5:F1:45:17:17:FA:DD:F4:20:1A:6B:F9:66:05:BF:F1:A1:26: 1A:05:A3:42:D6:51:E8:42:E1:EC:AF:9C:C7:CF:E0:9F:CC:47:84:C6:95:04:6B:73:02:03:01:00:01 C3:0F:C3:72:4D:3F:DE:B2:38:DE:39:2E:47:64:50:FF:F2:8F:F3:C7 Authority Info Access Certificate Policies Policy OID: CPS pointer: CRL Distribution Points QCStatements - crit. = false id_etsi_qcs_qccompliance Key Usage: nonrepudiation Thumbprint algorithm: SHA-256 Thumbprint: FF:EA:7F:0E:D2:9B:EB:07:73:EA:3B:0C:47:29:BB:F8:00:A6:C3:90:B6:21:95:CB:27:0F:12:A4:A A:62:F2:84 EU TSL digital identities TSL Scheme Operator certificate fields details Version: 3 Serial Number: STI (ESTONIA) - Trusted List ID: 0001 Page 4

5 X509 Certificate -----BEGIN CERTIFICATE----- MIID/TCCAuWgAwIBAgIQEAAAAAAAWcxEUPr16SDrtzANBgkqhkiG9w0BAQUFADAzMQswCQYDVQQG EwJCRTETMBEGA1UEAxMKQ2l0aXplbiBDQTEPMA0GA1UEBRMGMjAxMzExMB4XDTEzMDcyNDAxNDUz MVoXDTE4MDcxODIzNTk1OVowbzELMAkGA1UEBhMCQkUxIjAgBgNVBAMTGU1hYXJ0ZW4gT3R0b3kg KFNpZ25hdHVyZSkxDjAMBgNVBAQTBU90dG95MRYwFAYDVQQqEw1NYWFydGVuIEpvcmlzMRQwEgYD VQQFEws4MzEyMTQyNDEwMjCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAjbr1T8USYkuh4X+Y i+coykq7mbf8pjgyjwq28uodqrckynuqjz468tciyxsm/+/qdqefq4z5z1ydbbyb5ksxfbmkzr9d +Gt49iWVt9Ig+FhngbOexwCW108t6Q/+NAo6gwl6IKkzv2wpEJIwtc51VFzvM+WkE1mNmclphYRT L5UCAwEAAaOCAVMwggFPMB8GA1UdIwQYMBaAFLws1Y0dT3YXfAzva5To9R51FmNhMG4GCCsGAQUF BwEBBGIwYDA2BggrBgEFBQcwAoYqaHR0cDovL2NlcnRzLmVpZC5iZWxnaXVtLmJlL2JlbGdpdW1y cziuy3j0mcygccsgaqufbzabhhpodhrwoi8vb2nzcc5lawquymvsz2l1bs5iztbebgnvhsaepta7 MDkGB2A4CQEBAgEwLjAsBggrBgEFBQcCARYgaHR0cDovL3JlcG9zaXRvcnkuZWlkLmJlbGdpdW0u YmUwOQYDVR0fBDIwMDAuoCygKoYoaHR0cDovL2NybC5laWQuYmVsZ2l1bS5iZS9laWRjMjAxMzEx LmNybDAOBgNVHQ8BAf8EBAMCBkAwEQYJYIZIAYb4QgEBBAQDAgUgMBgGCCsGAQUFBwEDBAwwCjAI BgYEAI5GAQEwDQYJKoZIhvcNAQEFBQADggEBAHNRipzOD4aXB7Oo4FgfBbWgPkmUGTqkz2jK9U2t EWUbyQrhirgqhxK6YMAHBvzL+7BHouMEAuxycZG3ozAfEDRZiznFWyqS8QlnHUe0ThaAvs8v5wYO UO7lJ6vnaNLLvQj7W3L5kCnEva5h0Jh9wMytlNp89dd02l7MD4BsidXoMN21AE8su39tBmNayLF6 YrFLe3Zob4fQCuIEbx/pj3kYIVC4WM7uuDx+QpEJdNBtB41o2q2JJFqusRP7W0phkxX7sPtYkot6 RXLdgaZNoB4YIRwGozIvcegydRVqpcYrvFSoppNHQqd8ZNzswjGzqBhlWYPsxdjjsxJiUyk7T1c= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer SERIAL NUMBER: Issuer CN: Citizen CA Issuer C: BE Subject SERIAL NUMBER: Subject GIVEN NAME: Maarten Joris Subject SURNAME: Ottoy Maarten Ottoy (Signature) BE Valid from: Wed Jul 24 03:45:31 CEST 2013 Valid to: Thu Jul 19 01:59:59 CEST 2018 Public Key: Authority Key Identifier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uthority Info Access Certificate Policies Policy OID: CPS pointer: CRL Distribution Points QCStatements - crit. = false id_etsi_qcs_qccompliance Key Usage: nonrepudiation Thumbprint algorithm: SHA-256 Thumbprint: F7:BC:0D:16:4D:EC:8F:36:70:9A:BE:85:FC:57:02:2F:3B:16:84:70:0A:80:4C:36:8D:34:32:90:04:9 0:DF:CB STI (ESTONIA) - Trusted List ID: 0001 Page 5

6 EU TSL digital identities TSL Scheme Operator certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIHATCCBOmgAwIBAgIDGpmWMA0GCSqGSIb3DQEBCwUAME4xCzAJBgNVBAYTAkxVMRYwFAYDVQQK DA1MdXhUcnVzdCBTLkEuMScwJQYDVQQDDB5MdXhUcnVzdCBHbG9iYWwgUXVhbGlmaWVkIENBIDMw HhcNMTYwOTE1MDkwMDEyWhcNMTkwOTE1MDkwMDEyWjCB/TELMAkGA1UEBhMCQkUxCzAJBgNVBAcT AkJFMRwwGgYDVQQKExNFdXJvcGVhbiBDb21taXNzaW9uMRUwEwYDVQQLEwwwOTQ5LjM4My4zNDIx HDAaBgNVBAMTE01hYXJ0ZW4gSm9yaXMgT3R0b3kxDjAMBgNVBAQTBU90dG95MRYwFAYDVQQqEw1N YWFydGVuIEpvcmlzMR0wGwYDVQQFExQxMDMwNDQ0NDExMDA4MDgzNzU5MjEpMCcGCSqGSIb3DQEJ ARYabWFhcnRlbi5vdHRveUBlYy5ldXJvcGEuZXUxHDAaBgNVBAwTE1Byb2Zlc3Npb25hbCBQZXJz b24wggeima0gcsqgsib3dqebaquaa4ibdwawggekaoibaqcyun5nvdlxpwsapf7s+toy/m6uy8un 5sNt2cHIOs/OHvcfY+ghBXwz91EffNXku2RKqwgw3+dyRBI1eOq2l7r0z9dgNd40zB7a/p9M10Ss DT41MJB5iQRYE4kQ73FGA61oXD530fYNzxCA9dWXzQ40L+wdpPbrVtfgi+pRTZSXocZF2VHpuiPE VexHPHt68rX/G8pYHg7zmYOEBPLsjjQAwbrVZIKb9Ypgkwb4ziaFg6UZemMfRtl7S08UWjjhOUUj Z+216ie9V6cMSXzg+5Co9HVSXPdqooNhMrOShTI7IzDja3rXAcw6TkvPDgZEpCJZ73HCxz+DWnW7 D2JuXMelAgMBAAGjggI2MIICMjAMBgNVHRMBAf8EAjAAMGYGCCsGAQUFBwEBBFowWDAnBggrBgEF BQcwAYYbaHR0cDovL3FjYS5vY3NwLmx1eHRydXN0Lmx1MC0GCCsGAQUFBzAChiFodHRwOi8vY2Eu bhv4dhj1c3qubhuvtfrhuunbmy5jcnqwggeebgnvhsaeggevmiibetccaqmgccubkwebcgmbmih2 MIHHBggrBgEFBQcCAjCBuhqBt0x1eFRydXN0IFF1YWxpZmllZCBDZXJ0aWZpY2F0ZSBvbiBTU0NE IGNvbXBsaWFudCB3aXRoIEVUU0kgVFMgMTAxIDQ1NiBRQ1ArIGNlcnRpZmljYXRlIHBvbGljeS4g S2V5IEdlbmVyYXRpb24gYnkgQ1NQLiBTb2xlIEF1dGhvcmlzZWQgVXNhZ2U6IFN1cHBvcnQgb2Yg UXVhbGlmaWVkIEVsZWN0cm9uaWMgU2lnbmF0dXJlLjAqBggrBgEFBQcCARYeaHR0cHM6Ly9yZXBv c2l0b3j5lmx1ehrydxn0lmx1maggbgqaizabataibggrbgefbqcbawqwmbqwcaygbacorgebmagg BgQAjkYBBDALBgNVHQ8EBAMCBkAwHwYDVR0jBBgwFoAUY4/CiwOxq47YU0eWHZmoffasqHUwMwYD VR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5sdXh0cnVzdC5sdS9MVEdRQ0EzLmNybDARBgNVHQ4E CgQIR8OxCQGxgiswDQYJKoZIhvcNAQELBQADggIBACWb5+Xt6sOaxE8bpakXFo2BoWYphyq5XAXR M6e7QDS57CaHW8Ly6ep0I23EZ3KcI3mpqg2UDaEZhGhvnE/SVEyh4go6E8Hljv9iyrdGccc+RgTM 87rbkoUi6sZ+BcLlG7WNo2c5BqRyElch5o1/9AEnft3inLK4R47BHtbRkf/FkptiQWjSVzJ6LEHI i8ef215qg5x/yauqdxifmpcq580rgujgn/dl2h9rxbudpuco0i7zbpejtfah1zsxxyjy9v4x2q+c VbcMpa5fSys9c/YQA6XAkA5oKrkSsjCGBULDi2APC3FMehp6BcI/5k202iwebq3xgDWFvuD+swgZ 8P0YxS4dZMcjtseYvzGCArFEcoI7buZb30A/Z7K3qx3D895NHupfz20dskujjCV7PVgxx0PCXJPB quupfv+aygdclr7xqmmu8wo0hgkz/mxthy2f2polf0ukgy6f5mzbihryu5igybgrayqepaecr8lm BKzr2DRpLzDojU5k9apmVnoQJ2cSfTrQ87ZXOaG+6h/Md6cVaUI0J8iOpFLinKRGRBEkwE+pxFE2 tooyak9ilkurrydfd8wetateseyi4o4cfpd//bthgwvsl0cfrkj8v5lir13140d+nqtx0vsx/phq 5ySOKq9ZPUo42r8ihX/ZP0Z+Vrg5ATqpSCcqn01Z -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: LuxTrust Global Qualified CA 3 Issuer O: LuxTrust S.A. Issuer C: LU Subject T: Professional Person maarten.ottoy@ec.europa.eu Subject SERIAL NUMBER: Subject GIVEN NAME: Maarten Joris Subject SURNAME: Ottoy Maarten Joris Ottoy European Commission Subject L: BE BE Valid from: Thu Sep 15 11:00:12 CEST 2016 Valid to: Sun Sep 15 11:00:12 CEST 2019 STI (ESTONIA) - Trusted List ID: 0001 Page 6

7 Public Key: Basic Constraints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sCA: false Authority Info Access Certificate Policies Policy OID: CPS text: [LuxTrust Qualified Certificate on SSCD compliant with ETSI TS QCP+ certificate policy. Key Generation by CSP. Sole Authorised Usage: Support of Qualified Electronic Signature.] CPS pointer: Policy OID: QCStatements - crit. = false id_etsi_qcs_qccompliance id_etsi_qcs_qcsscd Authority Key Identifier 63:8F:C2:8B:03:B1:AB:8E:D8:53:47:96:1D:99:A8:7D:F6:AC:A8:75 CRL Distribution Points Subject Key Identifier 47:C3:B1:09:01:B1:82:2B Key Usage: nonrepudiation Thumbprint algorithm: SHA-256 Thumbprint: 9C:1A:3B:64:6E:AF:13:23:98:EF:31:9E:41:C8:E7:ED:72:5B:64:D5:77:25:80:AE:12:5D:59:C0:F6: 84:56:30 EU TSL digital identities TSL Scheme Operator certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIHDjCCBPagAwIBAgIDHiEoMA0GCSqGSIb3DQEBCwUAME4xCzAJBgNVBAYTAkxVMRYwFAYDVQQK DA1MdXhUcnVzdCBTLkEuMScwJQYDVQQDDB5MdXhUcnVzdCBHbG9iYWwgUXVhbGlmaWVkIENBIDMw HhcNMTcwNTExMTAyNzI1WhcNMjAwNTExMTAyNzI1WjCCAQkxCzAJBgNVBAYTAk5MMQswCQYDVQQH EwJCRTEcMBoGA1UEChMTRXVyb3BlYW4gQ29tbWlzc2lvbjEVMBMGA1UECxMMMDk0OS4zODMuMzQy MSEwHwYDVQQDExhNaWNoYWVsIFRoZW9kb29yIGRlIEJvZXIxEDAOBgNVBAQTB2RlIEJvZXIxGTAX BgNVBCoT1pY2hhZWwgVGhlb2Rvb3IxHTAbBgNVBAUTFDEwMzAzOTY5NDUwMDg1MDQ2NDI0MSsw KQYJKoZIhvcNAQkBFhxtaWNoYWVsLmRlLWJvZXJAZWMuZXVyb3BhLmV1MRwwGgYDVQQMExNQcm9m ZXNzaW9uYWwgUGVyc29uMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2G70g/Tsyt8 nyi1pxyhgim6a6dawb2atzmsmxks1flxjkpnmd/e1go/g1+ifsqa6iblfxmfhabja9fbfallombr E3Ao0SdHpT4UbrhVyWx5iV/DjInxPMCzx3Przus3CVy7YhKHO9Jt/qPruWeLCf3YFMV8N02lig90 4Vbc6pxjx5yqKij7skHSiMyAzdgw/VIQZjJF8PiA10eguvwgS/BU6ip5M03DoGOZPBvIt3q/Av4Y Htd7LaOFTYl/zRcn2f12FqO4JMiNR5LxfByRbMmUJQe8sjtC0/ho7cG3BWuusLUe/LtQIGCT/uXX df9qkuoipdq3opfhjihelajppwidaqabo4icnjccajiwdaydvr0taqh/baiwadbmbggrbgefbqcb AQRaMFgwJwYIKwYBBQUHMAGGG2h0dHA6Ly9xY2Eub2NzcC5sdXh0cnVzdC5sdTAtBggrBgEFBQcw AoYhaHR0cDovL2NhLmx1eHRydXN0Lmx1L0xUR1FDQTMuY3J0MIIBHgYDVR0gBIIBFTCCAREwggED BggrgSsBAQoDATCB9jCBxwYIKwYBBQUHAgIwgboagbdMdXhUcnVzdCBRdWFsaWZpZWQgQ2VydGlm awnhdgugb24gu1ndrcbjb21wbglhbnqgd2l0acbfvfnjifrtidewmsa0ntyguunqkybjzxj0awzp Y2F0ZSBwb2xpY3kuIEtleSBHZW5lcmF0aW9uIGJ5IENTUC4gU29sZSBBdXRob3Jpc2VkIFVzYWdl OiBTdXBwb3J0IG9mIFF1YWxpZmllZCBFbGVjdHJvbmljIFNpZ25hdHVyZS4wKgYIKwYBBQUHAgEW Hmh0dHBzOi8vcmVwb3NpdG9yeS5sdXh0cnVzdC5sdTAIBgYEAIswAQEwIgYIKwYBBQUHAQMEFjAU MAgGBgQAjkYBATAIBgYEAI5GAQQwCwYDVR0PBAQDAgZAMB8GA1UdIwQYMBaAFGOPwosDsauO2FNH lh2zqh32rkh1mdmga1udhwqsmcowkkamocsgimh0dha6ly9jcmwubhv4dhj1c3qubhuvtfrhuunb My5jcmwwEQYDVR0OBAoECED2Gny4nY/ZMA0GCSqGSIb3DQEBCwUAA4ICAQBvdAp4qOITVgjyiZkd UMoQC5HPDvptyJrF+j4aZmCIYbg8UEy5RqurLv5icKUWjp0nYO8Qq4drrMGHbOMlWiVZ6yUiy8oX v62gv/hisggrwdkekfzcj3k9wut50tam3sromy0bzbyqatsdoohb2bwhnmoofwo+suz+5qt1lv+f MLKHxeO9rM4ezXPO8Vsfh6d5zddGl29WrxbBZj7bp3cfSBHJa1t6NIIr5+sU9Xu+GvTSXuSSht3k mvu9ofctxetq8qq+mxpwphntynu8iaqgqqbnwtmb6pqgtiawojak9mprhvvlh9+sdijnvgo46bcn ykupu4mdgi0zq5rsocjup5epuwramdm5ymufmmkxqw8xhqu0kstgybcikoelmhvtcqbbtfe5vh7y OS6hYpzTop9fLTJ+uQJI14DTOu+iVSmw5Oh8AYTPKh5wzKkEWTiq5Z0KiwmmOIxo8T9Ytlhsae/7 ao1nc3wxfkaqwafqx5upis4bq0rrw39n1t6povjxkktpew6tpmyryjr2dylssnibr9ebhubrb/v/ o9pvqx6darlpvuhdwwdjuat1bw3ej+/jijgyqtwkql9fndcmuuqzoba9fxjub1e8m3+ti1h5e9f/ JH3kdkPsrV9DMS13+MYIeQJgAK3ofJcuKCKYQ5uUEZaU2CKiR6TzvzzGqQ== -----END CERTIFICATE----- STI (ESTONIA) - Trusted List ID: 0001 Page 7

8 Signature algorithm: SHA256withRSA Issuer CN: LuxTrust Global Qualified CA 3 Issuer O: LuxTrust S.A. Issuer C: LU Subject T: Professional Person michael.de-boer@ec.europa.eu Subject SERIAL NUMBER: Subject GIVEN NAME: Michael Theodoor Subject SURNAME: de Boer Michael Theodoor de Boer European Commission Subject L: BE NL Valid from: Thu May 11 12:27:25 CEST 2017 Valid to: Mon May 11 12:27:25 CEST 2020 Public Key: Basic Constraints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sCA: false Authority Info Access Certificate Policies Policy OID: CPS text: [LuxTrust Qualified Certificate on SSCD compliant with ETSI TS QCP+ certificate policy. Key Generation by CSP. Sole Authorised Usage: Support of Qualified Electronic Signature.] CPS pointer: Policy OID: QCStatements - crit. = false id_etsi_qcs_qccompliance id_etsi_qcs_qcsscd STI (ESTONIA) - Trusted List ID: 0001 Page 8

9 Authority Key Identifier 63:8F:C2:8B:03:B1:AB:8E:D8:53:47:96:1D:99:A8:7D:F6:AC:A8:75 CRL Distribution Points Subject Key Identifier 40:F6:1A:7C:B8:9D:8F:D9 Key Usage: nonrepudiation Thumbprint algorithm: SHA-256 Thumbprint: 59:A1:BF:29:0B:81:8B:17:7A:D6:1A:C4:B3:E6:DC:DD:D4:6D:A6:D5:BE:95:79:F8:56:4A:DE:A6: F2:CF:07:3E EU TSL digital identities TSL Scheme Operator certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIGZzCCBE+gAwIBAgIQEAAAAAAAH6yPXvnVxqcEcDANBgkqhkiG9w0BAQUFADAzMQswCQYDVQQG EwJCRTETMBEGA1UEAxMKQ2l0aXplbiBDQTEPMA0GA1UEBRMGMjAxNTA4MB4XDTE1MDUwMTE4NTQ1 NFoXDTI1MDQyNTIzNTk1OVowczELMAkGA1UEBhMCQkUxJzAlBgNVBAMTHkplYW4tTWFyYyBWZXJi ZXJndCAoU2lnbmF0dXJlKTERMA8GA1UEBBMIVmVyYmVyZ3QxEjAQBgNVBCoTCUplYW4tTWFyYzEU MBIGA1UEBRMLNjcwMjIzMzAzNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwbnf9 98lxC5nc7YZUhnMIQ+n3VAjrFU2IOIzmHHSJ6aMASYOMYOlLx7XDrjbmh/MyhlpGYmNsF0iLwEYW XNwF4ChmfHqvoI/P29aqNkcojV2cFpZj+ocgnyf+f2cwn3z/kGh9kI6x4eS5IroFpABvzxWi0WD3 W7wSJKyeRoMaGOtw07iA43S4fjDzjkKTYGor6PIOv6UtCfrZqPjTg+822kFhERz/3KiqSn2Hx324 IIN/mZCSDd5ixKl0tdCsX+bPbXJI4tOyE0RDUl5/+iMAQWjli45opKj8eTMx2kmSycw9Du4zkFzg np81xgdqehzp53wsg8uz5qr8euju3xnbagmbaagjggi1miicmtafbgnvhsmegdawgbrqb1hlzcdd ZQnuqBsSlAPwQKAI8jBwBggrBgEFBQcBAQRkMGIwNgYIKwYBBQUHMAKGKmh0dHA6Ly9jZXJ0cy5l awquymvsz2l1bs5izs9izwxnaxvtcnmzlmnyddaobggrbgefbqcwayycahr0cdovl29jc3auzwlk LmJlbGdpdW0uYmUvMjCCARgGA1UdIASCAQ8wggELMIIBBwYHYDgKAQECATCB+zAsBggrBgEFBQcC ARYgaHR0cDovL3JlcG9zaXRvcnkuZWlkLmJlbGdpdW0uYmUwgcoGCCsGAQUFBwICMIG9GoG6R2Vi cnvpaybvbmrlcndvcnblbibhyw4gywfuc3byywtlbglqa2hlawrzymvwzxjraw5nzw4sihppzsbd UFMgLSBVc2FnZSBzb3VtaXMgw6AgZGVzIGxpbWl0YXRpb25zIGRlIHJlc3BvbnNhYmlsaXTDqSwg dm9pcibdufmglsbwzxj3zw5kdw5nihvudgvybgllz3qgsgfmdhvuz3nizxnjahldpg5rdw5nzw4s IGdlbcOkc3MgQ1BTMDkGA1UdHwQyMDAwLqAsoCqGKGh0dHA6Ly9jcmwuZWlkLmJlbGdpdW0uYmUv ZWlkYzIwMTUwOC5jcmwwDgYDVR0PAQH/BAQDAgZAMBEGCWCGSAGG+EIBAQQEAwIFIDAiBggrBgEF BQcBAwQWMBQwCAYGBACORgEBMAgGBgQAjkYBBDANBgkqhkiG9w0BAQUFAAOCAgEAJ9OdfZ1C/G+m WS/MaTIK80oGEjapyYgZnXxJ5sFuUGv4oKev2Tq9FwzeKTpo+ufb6chMSWDguX+HkkwBlCj8Dt3N D4FFDzAsgoGnorKuWkO54Pa8KpXEb7OjsWvMnJhz2iG/rEnm7b2QjN/jxbS7ZzCJhW6mXuQ1K9FU no6vzbv59n3kdoiuxzlpmvyhlqejpg3psmmxuwcqthdqgrpgbyipptzujds86dzu0erds2xjaa zl7evnhvsvcbfwaikb9yuecb7nfjd9yu+wshstcjvzb1aw9qgqxb5rrwp2kdke6vmksqh9dwpxpz 0cFABK9IJxAJB0vhV0JKD9FtcCJ4GA8oxX5Ul57oHGeFBVazT+OKaaNwNM/1zpowv6QwYowX4Y9N ZJ/CYRkMNeNwCuB88mvDvIZY/a/IZTzVwqX2KuGZeFTJInN8esUu1uROd3jRkguSs93R/6Ch8xOS 6uyeNY7IyrlW9IbSJ6Sza9viZRN8FhQARNa0sLPwXeX2zHUQ1xLSU2+E0E7ruBtMT0o5jTbViDmr msb0ppmbsrnbllsjf8pcgkkrzrgudwfhognqu4djs3uipwsppvaoinz26dipgedlnelmyi9kt3t+ yxg57loq8e9ip6hzbeitxkgb+c5o484w32e97mtnp6dvmll7vsoyegfjho/3/lu= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer SERIAL NUMBER: Issuer CN: Citizen CA Issuer C: BE Subject SERIAL NUMBER: Subject GIVEN NAME: Jean-Marc Subject SURNAME: Verbergt Jean-Marc Verbergt (Signature) BE Valid from: Fri May 01 20:54:54 CEST 2015 STI (ESTONIA) - Trusted List ID: 0001 Page 9

10 Valid to: Sat Apr 26 01:59:59 CEST 2025 Public Key: Authority Key Identifier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uthority Info Access Certificate Policies Policy OID: CPS pointer: CPS text: [Gebruik onderworpen aan aansprakelijkheidsbeperkingen, zie CPS - Usage soumis à des limitations de responsabilitã, voir CPS - Verwendung unterliegt Haftungsbeschrà nkungen, gemã ss CPS] CRL Distribution Points QCStatements - crit. = false id_etsi_qcs_qccompliance id_etsi_qcs_qcsscd Key Usage: nonrepudiation Thumbprint algorithm: SHA-256 Thumbprint: 54:00:AB:71:2C:41:AA:F0:C4:0B:50:5E:26:4D:54:94:D8:AF:41:80:F8:F6:29:55:D1:62:23:B3:29:0 F:97:C3 TSL Type Scheme Territory EU Mime Type application/vnd.etsi.tsl+xml Scheme Operator Name European Commission Scheme Type Community Rules URI [ en ] List Issue Date Time T06:40:00Z Next Update date Time T00:00:00Z Distribution Points URI STI (ESTONIA) - Trusted List ID: 0001 Page 10

11 1 - TSP: SK ID Solutions AS TSP Name SK ID Solutions AS TSP Trade Name VAT SK ID Solutions AS ESTEID SK PostalAddress Street Address [ en ] Pärnu mnt 141 Locality [ en ] Tallinn Postal Code [ en ] Country ElectronicAddress URI mailto:info@sk.ee URI TSP Information URI URI [ en ] URI [ et ] Service (withdrawn): ESTEID-SK Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. STI (ESTONIA) - Trusted List ID: 0001 Page 11

12 ESTEID-SK Certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIEPERcgjANBgkqhkiG9w0BAQUFADBdMRgwFgYJKoZIhvcNAQkBFglwa2lA c2suzwuxczajbgnvbaytakvfmsiwiaydvqqkexlbuybtzxj0awzpdhnlzxjpbwlza2vza3vzmraw DgYDVQQDEwdKdXVyLVNLMB4XDTAyMDExNTE2NDQ1MFoXDTEyMDExMzE2NDQ1MFowfDEYMBYGCSqG SIb3DQEJARYJcGtpQHNrLmVlMQswCQYDVQQGEwJFRTEiMCAGA1UEChMZQVMgU2VydGlmaXRzZWVy aw1pc2tlc2t1czepma0ga1uecxmgrvnurulemqowcaydvqqwexmriweaydvqqdewlfu1rfsuqt U0swggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLeZO5NVo3zbwA8eFVCrrbeZQKvPDB 7LUDPvzCqw7U2sC+IwEOdjjpJRF4lxFs+f8yC1bP+rqtWzrKhhJ2owfSAlIZMbly/OFjfLqOcyyi 7qdfA/66u+69u/DY9tW5fqW93D73v5WNcNoIemCTydh9IFkQvMihWKH7LblBzCHa4W6qUcBZ7QsB gypqs9n9fgjt5d2wcdeq0pf1zy72g3cqfrpur/apg28tv9r+c7oqncapbij7xioa77fm3o07m/9a arq/m1ohep9cxyih9nmd3kyme8yxw5v02mtmmacxom83z5o4oxsdtalg5gdfznpjjanpno7j8fug ri3vv8z3agmbaagjgggpmiibptambgnvhrmebtadaqh/ma4ga1uddweb/wqeawib5jccaryga1ud IASCAQ0wggEJMIIBBQYKKwYBBAHOHwEBATCB9jCB0AYIKwYBBQUHAgIwgcMegcAAUwBlAGUAIABz AGUAcgB0AGkAZgBpAGsAYQBhAHQAIABvAG4AIAB2AOQAbABqAGEAcwB0AGEAdAB1AGQAIABBAFMA LQBpAHMAIABTAGUAcgB0AGkAZgBpAHQAcwBlAGUAcgBpAG0AaQBzAGsAZQBzAGsAdQBzACAAYQBs AGEAbQAtAFMASwAgAHMAZQByAHQAaQBmAGkAawBhAGEAdABpAGQAZQAgAGsAaQBuAG4AaQB0AGEA bqbpahmazqbrahmwiqyikwybbquhagewfwh0dha6ly93d3cuc2suzwuvy3bzlzarbgnvhr8ejdai MCCgHqAchhpodHRwOi8vd3d3LnNrLmVlL2p1dXIvY3JsLzAfBgNVHSMEGDAWgBQEqnpHo+SJrxrP CkCnGD9v7+l9vjAdBgNVHQ4EFgQUeBe1BfmzWM1ZjN5nXkQGTHWGaV0wDQYJKoZIhvcNAQEFBQAD ggebafismhaq4ffkrxmzw38rhyh5ia5jgxjtwfppag9pbtqnzhzy8j97xfpi15hae9ah3u1wc+bs U2SndVSUGaZ0gKafMxDOy2DUw3B84ymbNRiAFSWty+aKrMCjtdlPktbSQmxNSJAX9vVtM4Y2ory+ dtaq7g11gkhj+l8bdupoja+l8hvs2l4k5whwdhcsqlplmihpikgbvarfrnzaq6dqumy+ks3e2pl+ PM4GdDW5lRHR/6KUy0BHP2gX/BO4mYQ3BH2BHImUclNras0HISnV/pt6hIkgd1PsFt3rtEolAWP4 DWBmc4zAYQJ5t0cEwFM329zCXSGIQIm3a1cMugF5Q/k= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Juur-SK Issuer O: Issuer C: Issuer E: ESTEID-SK Subject SURNAME: 1 ESTEID Valid from: Tue Jan 15 17:44:50 CET 2002 Valid to: Fri Jan 13 17:44:50 CET 2012 Public Key: Basic Constraints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sCA: true STI (ESTONIA) - Trusted List ID: 0001 Page 12

13 Certificate Policies Policy OID: CPS text: [See sertifikaat on väljastatud AS-is Sertifitseerimiskeskus alam-sk sertifikaatide kinnitamiseks] CPS pointer: CRL Distribution Points Authority Key Identifier 04:AA:7A:47:A3:E4:89:AF:1A:CF:0A:40:A7:18:3F:6F:EF:E9:7D:BE Subject Key Identifier 78:17:B5:05:F9:B3:58:CD:59:8C:DE:67:5E:44:06:4C:75:86:69:5D Key Usage: digitalsignature - nonrepudiation - keyencipherment - keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: 0B:7A:9D:B6:0D:95:B0:6A:8F:4C:FC:0A:9C:1D:7D:92:EC:8D:45:55:1C:56:B6:79:58:79:29:C9:9 B:20:C5:73 ESTEID-SK Subject SURNAME: 1 ESTEID Service status description [en] undefined T22:00:00Z TSP Service Definition URI URI [ en ] URI [ et ] Extension (critical): Qualifiers [QCWithQSCD] Qualifier type description [en] undefined. Qualifier STI (ESTONIA) - Trusted List ID: 0001 Page 13

14 Criteria list assert=atleastone Key Usage [ digitalsignature ] true Key Usage [ nonrepudiation ] true Extension (critical): Qualifiers [QCStatement, QCForESig] Qualifier type description [en] it is ensured by the CSP and controlled (supervision model) or audited (accreditation model) by the Member State (respectively its Supervisory Body or Accreditation Body) that all certificates issued under the service (CA/QC) identified in 'Service digital identity' and further identified by the above (filters) information used to further identify under the 'Sdi' identified trust service that precise set of certificates for which this additional information is required with regard to the issuance of such certificates is issued as a Qualified Certificate. Qualifier Qualifier Criteria list assert=all Key Usage [ nonrepudiation ] true Extension (critical): additionalserviceinformation AdditionalServiceInformation URI [ en ] History instance n.1 - Status: granted ESTEID-SK ESTEID-SK Subject SURNAME: 1 ESTEID STI (ESTONIA) - Trusted List ID: 0001 Page 14

15 X509SKI X509 SK I ebe1bfmzwm1zjn5nxkqgthwgav0= T22:00:00Z Extension (critical): Qualifiers [QCWithQSCD] Qualifier type description [en] undefined. Qualifier Criteria list assert=atleastone Key Usage [ digitalsignature ] true Key Usage [ nonrepudiation ] true Extension (critical): Qualifiers [QCStatement, QCForESig] Qualifier type description [en] it is ensured by the CSP and controlled (supervision model) or audited (accreditation model) by the Member State (respectively its Supervisory Body or Accreditation Body) that all certificates issued under the service (CA/QC) identified in 'Service digital identity' and further identified by the above (filters) information used to further identify under the 'Sdi' identified trust service that precise set of certificates for which this additional information is required with regard to the issuance of such certificates is issued as a Qualified Certificate. Qualifier Qualifier Criteria list assert=all Key Usage [ nonrepudiation ] true Extension (critical): additionalserviceinformation AdditionalServiceInformation URI [ en ] History instance n.2 - Status: undersupervision STI (ESTONIA) - Trusted List ID: 0001 Page 15

16 ESTEID-SK: Qualified certificates for Estonian ID-card ESTEID-SK Subject SURNAME: 1 ESTEID X509SKI X509 SK I ebe1bfmzwm1zjn5nxkqgthwgav0= T17:44:50Z Extension (critical): Qualifiers [QCWithSSCD] Qualifier type description [en] it is ensured by the trust service provider and controlled (supervision model) or audited (accreditation model) by the referenced Member State (respectively its Supervisory Body or Accreditation Body) that all Qualified Certificates issued under the service identified in "Service digital identity" and further identified by the filters information used to further identify under the "Sdi" identified trust service that precise set of Qualified Certificates for which this additional information is required with regards to the presence or absence of Secure Signature Creation Device (SSCD) support ARE supported by an SSCD (i.e. that that the private key associated with the public key in the certificate is stored in a Secure Signature Creation Device conformant with the applicable European legislation); Qualifier Criteria list assert=atleastone Key Usage [ digitalsignature ] true Key Usage [ nonrepudiation ] true Extension (critical): Qualifiers [QCStatement] Qualifier type description [en] it is ensured by the CSP and controlled (supervision model) or audited (accreditation model) by the Member State (respectively its Supervisory Body or Accreditation Body) that all certificates issued under the service (CA/QC) identified in 'Service digital identity' and further identified by the above (filters) information used to further identify under the 'Sdi' identified trust service that precise set of certificates for which this additional information is required with regard to the issuance of such certificates is issued as a Qualified Certificate. Qualifier Criteria list assert=all STI (ESTONIA) - Trusted List ID: 0001 Page 16

17 Key Usage [ nonrepudiation ] true Service (withdrawn): ESTEID-SK Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. ESTEID-SK 2007 Certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIID0zCCArugAwIBAgIERZugDTANBgkqhkiG9w0BAQUFADBdMRgwFgYJKoZIhvcNAQkBFglwa2lA c2suzwuxczajbgnvbaytakvfmsiwiaydvqqkexlbuybtzxj0awzpdhnlzxjpbwlza2vza3vzmraw DgYDVQQDEwdKdXVyLVNLMB4XDTA3MDEwMzEyMjIzN1oXDTE2MDgyNjE0MjMwMVowWzELMAkGA1UE BhMCRUUxIjAgBgNVBAoTGUFTIFNlcnRpZml0c2VlcmltaXNrZXNrdXMxDzANBgNVBAsTBkVTVEVJ RDEXMBUGA1UEAxMORVNURUlELVNLIDIwMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtWp2jLCsA7K9AxoPDOL0geM1GoR0Q6wSUICCJYyFkUMboEMxpSzFB6tlb0ySlHEU6Fs+tjA4Q rsqwaw0unk4bxv1lkoor6duc+20+aqd5jb6a0atrltz1xg5ivdeep3djpykkk2mpxuz7dzx7xuer /kduwi9cdikfwic7y9otby9jav6lxm08kwez/qtw5pu8/btvzce0ygvbxu4tds2fpuj/+jtzm2oc Wa3QjFQv2Sir6LBvgNY3du/m+WLABq0dgN18R4nhFtmaVepqAeUuEi8eRBl6yLTSmMwYCY46LsK5 CdjTCZSZv934FtNuyY6Ph9nCXJAgNAY+GfNJfdMXAgMBAAGjgZwwgZkwEgYDVR0TAQH/BAgwBgEB /wibadaobgnvhq8baf8ebamcaf4wmwydvr0fbcwwkjaoocagjiyiahr0cdovl3d3dy5zay5lzs9j cmxzl2p1dxivy3jslmnybdafbgnvhsmegdawgbqeqnpho+sjrxrpckcngd9v7+l9vjadbgnvhq4e FgQUSAbevoyHV5WAeGP6nCMrK6A6GHUwDQYJKoZIhvcNAQEFBQADggEBACO6SJrjN5WZuiLSMy/t SmT/w3dd/KPErSAdUIJYkC7hOIauW7jZ3VNgNUMHSIkUoP8AviEMjGA4lkT61YScpJAdmgl8Y80H FdZV5CsThhddoIdZ3cZjSI4NZmTVkSduTjoySALxKL3ZEIPrepQDvNEeV1WSpI5+u/vMekUWJSPc 8BK9O2av1e9ResKyPJidqrIksHFjNS+Yt8Ouw7F10MHaPPzMiwoa0DYTVsIKJncPTQmvdJG8M0DD ToiiNPQuUy5d1CA75Wtjs+yILGZXpOfbdoQhE7G4pbZaF1s69jKp+zc0ZT4g2OoKfI2TiIX9qeGJ MxkOENcd1DDqYVfePmo= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Juur-SK Issuer O: Issuer C: Issuer E: ESTEID-SK 2007 ESTEID Valid from: Wed Jan 03 13:22:37 CET 2007 Valid to: Fri Aug 26 16:23:01 CEST 2016 STI (ESTONIA) - Trusted List ID: 0001 Page 17

18 Public Key: Basic Constraints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sCA: true - Path length: 0 CRL Distribution Points Authority Key Identifier 04:AA:7A:47:A3:E4:89:AF:1A:CF:0A:40:A7:18:3F:6F:EF:E9:7D:BE Subject Key Identifier 48:06:DE:BE:8C:87:57:95:80:78:63:FA:9C:23:2B:2B:A0:3A:18:75 Key Usage: digitalsignature - nonrepudiation - keyencipherment - dataencipherment - keyagreement - keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: B1:14:C6:A2:F2:10:F8:B4:39:76:28:9C:AF:FD:70:F6:48:4F:BC:C6:1F:18:93:E5:D1:26:76:F4:C2:E 5:80:5B ESTEID-SK 2007 ESTEID Service status description [en] undefined T22:00:00Z TSP Service Definition URI URI [ et ] URI [ en ] Extension (critical): Qualifiers [QCWithQSCD] Qualifier type description [en] undefined. Qualifier Criteria list assert=atleastone Key Usage [ digitalsignature ] true Key Usage [ nonrepudiation ] true STI (ESTONIA) - Trusted List ID: 0001 Page 18

19 Extension (critical): Qualifiers [QCStatement, QCForESig] Qualifier type description [en] it is ensured by the CSP and controlled (supervision model) or audited (accreditation model) by the Member State (respectively its Supervisory Body or Accreditation Body) that all certificates issued under the service (CA/QC) identified in 'Service digital identity' and further identified by the above (filters) information used to further identify under the 'Sdi' identified trust service that precise set of certificates for which this additional information is required with regard to the issuance of such certificates is issued as a Qualified Certificate. Qualifier Qualifier Criteria list assert=all Key Usage [ nonrepudiation ] true Extension (critical): additionalserviceinformation AdditionalServiceInformation URI [ en ] History instance n.1 - Status: granted ESTEID-SK 2007 ESTEID-SK 2007 ESTEID X509SKI X509 SK I SAbevoyHV5WAeGP6nCMrK6A6GHU= T22:00:00Z STI (ESTONIA) - Trusted List ID: 0001 Page 19

20 Extension (critical): Qualifiers [QCWithQSCD] Qualifier type description [en] undefined. Qualifier Criteria list assert=atleastone Key Usage [ digitalsignature ] true Key Usage [ nonrepudiation ] true Extension (critical): Qualifiers [QCStatement, QCForESig] Qualifier type description [en] it is ensured by the CSP and controlled (supervision model) or audited (accreditation model) by the Member State (respectively its Supervisory Body or Accreditation Body) that all certificates issued under the service (CA/QC) identified in 'Service digital identity' and further identified by the above (filters) information used to further identify under the 'Sdi' identified trust service that precise set of certificates for which this additional information is required with regard to the issuance of such certificates is issued as a Qualified Certificate. Qualifier Qualifier Criteria list assert=all Key Usage [ nonrepudiation ] true Extension (critical): additionalserviceinformation AdditionalServiceInformation URI [ en ] History instance n.2 - Status: undersupervision ESTEID-SK 2007: Qualified certificates for Estonian ID-card, the residence permit card, the digital identity card, the digital identity card in form of the Mobile-ID ESTEID-SK 2007 ESTEID STI (ESTONIA) - Trusted List ID: 0001 Page 20

21 X509SKI X509 SK I SAbevoyHV5WAeGP6nCMrK6A6GHU= T13:22:37Z Extension (critical): Qualifiers [QCWithSSCD] Qualifier type description [en] it is ensured by the trust service provider and controlled (supervision model) or audited (accreditation model) by the referenced Member State (respectively its Supervisory Body or Accreditation Body) that all Qualified Certificates issued under the service identified in "Service digital identity" and further identified by the filters information used to further identify under the "Sdi" identified trust service that precise set of Qualified Certificates for which this additional information is required with regards to the presence or absence of Secure Signature Creation Device (SSCD) support ARE supported by an SSCD (i.e. that that the private key associated with the public key in the certificate is stored in a Secure Signature Creation Device conformant with the applicable European legislation); Qualifier Criteria list assert=atleastone Key Usage [ digitalsignature ] true Key Usage [ nonrepudiation ] true Extension (critical): Qualifiers [QCStatement] Qualifier type description [en] it is ensured by the CSP and controlled (supervision model) or audited (accreditation model) by the Member State (respectively its Supervisory Body or Accreditation Body) that all certificates issued under the service (CA/QC) identified in 'Service digital identity' and further identified by the above (filters) information used to further identify under the 'Sdi' identified trust service that precise set of certificates for which this additional information is required with regard to the issuance of such certificates is issued as a Qualified Certificate. Qualifier Criteria list assert=all Key Usage [ nonrepudiation ] true Service (granted): ESTEID-SK 2011 qualified certificates for electronic signatures Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. ESTEID-SK 2011 qualified certificates for electronic signatures STI (ESTONIA) - Trusted List ID: 0001 Page 21

22 Certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIQKVKTqv2MxtRNgzCjwmRRDTANBgkqhkiG9w0BAQUFADB1MQswCQYDVQQG EwJFRTEiMCAGA1UECgwZQVMgU2VydGlmaXRzZWVyaW1pc2tlc2t1czEoMCYGA1UEAwwfRUUgQ2Vy dglmawnhdglvbibdzw50cmugum9vdcbdqteymbygcsqgsib3dqejaryjcgtpqhnrlmvlmb4xdtex MDMxODEwMTQ1OVoXDTI0MDMxODEwMTQ1OVowZDELMAkGA1UEBhMCRUUxIjAgBgNVBAoMGUFTIFNl cnrpzml0c2vlcmltaxnrzxnrdxmxfzavbgnvbammdkvtvevjrc1tsyaymdexmrgwfgyjkozihvcn AQkBFglwa2lAc2suZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6XxsZh6r/aXc Ne3kSpNMOqmQoAXUpzzcr4ZSaGZh/7JHIiplvNi6tbW/lK7sAiRsb65KzMWROEauld66ggbDPga6 ku97c+axgu7+droxstjuov6vlrhzvanlmiokycpwaxjm+efqpzudxebkw96b3/fg69zbp3s9y6we hwu5y9iiql8ytkgnnuxidqbon1bgqm+hvesgtf22j6r6g3fse07rnmnsknc3djulscukf4kh0rvg VK9BdiCdFaZjHEykjwjIGzqnyxyRKe4YbJ6B9ABm95eSFgMBHtZEYU+q0VUIQGhAGAurOTXjWi1T ssa42mnlgqzei5gxmxtabp51agmbaagjggggmiibndasbgnvhrmbaf8ecdagaqh/ageama4ga1ud DwEB/wQEAwIBBjCB9gYDVR0gBIHuMIHrMIHoBgsrBgAc4fZAEBATCB2DCBsgYIKwYBBQUHAgIw gauegaiaswbhahmadqb0ageadabhagsacwblacaaaqbzagkaawb1ahqadad1aguabgbkageadgbh AGwAZQAgAGQAbwBrAHUAbQBlAG4AZABpAGwAZQAgAGsAYQBuAHQAYQB2AGEAdABlACAAcwBlAHIA dabpagyaaqbrageayqb0agkazablacaadgdkagwaagbhahmadabhag0aaqbzaguaawbzac4wiqyi KwYBBQUHAgEWFWh0dHBzOi8vd3d3LnNrLmVlL0NQUzAdBgNVHQ4EFgQUe2ryVVBcuNl6CIdBrvqi Kz1bV3YwHwYDVR0jBBgwFoAUEvJaPupWHL/NBqzx8SXJqUvUFJkwPQYDVR0fBDYwNDAyoDCgLoYs ahr0cdovl3d3dy5zay5lzs9yzxbvc2l0b3j5l2nybhmvzwvjy3jjys5jcmwwdqyjkozihvcnaqef BQADggEBAKC4IN3FC2gVDIH05TNMgFrQOCGSnXhzoJclRLoQ81BCOXTZI4qn7N74FHEnrAy6uNG7 SS5qANqSaPIL8dp63jg/L4qn4iWaB5q5GGJOV07SnTHS7gUrqChGClnUeHxiZbL13PkP37Lnc+TK l1skfgtn5fbh5cqrhvba/vf3yzlimu+l7evohw9hkxz//z8kdn6ieipffzdtoov/0exvllxqklyb UuS6LYRRDiqQupgBKQBTwNbC8x0UHX00HokW+dCVcQvsUbv4xLhRq/MvyTthE+RdbkrV0JuzbfZv ADfj75nA3+ZAzFYS5ZpMOjZ9p4rQVKpzQTklrF0m6mkdcEo= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer E: Issuer CN: Certification Centre Root CA Issuer O: Issuer C: ESTEID-SK 2011 Valid from: Fri Mar 18 11:14:59 CET 2011 Valid to: Mon Mar 18 11:14:59 CET 2024 Public Key: Basic Constraints 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:B3:E9:7C:6C:66:1E:AB:FD:A5:DC:35:ED:E4:4A:93:4C:3A:A9:90:A0:05:D4:A7:3C:DC:AF:86:52:68:66:61:FF:B2:4 7:22:2A:65:BC:D8:BA:B5:B5:BF:94:AE:EC:02:24:6C:6F:AE:4A:CC:C5:91:38:46:AE:95:DE:BA:82:06:C3:3E:06:BA:91:4F:7B:0B:E0:17:1A::FE:0D:13:97:B2:D8:D4:3A:FE:95:96:B1:D9:54:09:CB:98:83:A4:C9:CA:56:6 B:18:CC:F8:47:D0:3D:9B:83:C4:46:E4:C3:DE:81:DF:F7:C6:EB:D6:5B:A7:7B:3D:CB:A5:84:87:05:39:63:D2:22:42:5F:18:4E:41:A7:35:4C:62:75:06:CE:37:50:46:42:6F:87:54:4B:20:4D:FD:B6:27:AA:FA:1B:71:6C:13:4E:E B:9C:C3:6C:90:D0:B7:0E:3B:8B:48:25:0A:17:89:07:D2:B5:46:54:AF:41:76:20:9D:15:A6:63:1C:4C:A4:8F:08:C8:1B:3A:A7:CB:1C:91:29::18:6C:9E:81:F4:00:66:F7:97:92:16:03:01:1E:D6:44:61:4F:AA:D1:55:08:40:68:4 0:18:0B:AB:39:35:E3:5A:2D:53:B2:C0:38:DA:69:CB:19:06:44:23:91:97:31:7B:5A:6E:9E:75:02:03:01:00:01 IsCA: true - Path length: 0 Certificate Policies Policy OID: CPS text: [Kasutatakse isikuttõendavale dokumendile kantavate sertifikaatide väljastamiseks.] CPS pointer: Subject Key Identifier 7B:6A:F2:55:50:5C:B8:D9:7A:08:87:41:AE:FA:A2:2B:3D:5B:57:76 STI (ESTONIA) - Trusted List ID: 0001 Page 22

23 Authority Key Identifier 12:F2:5A:3E:EA:56:1C:BF:CD:06:AC:F1:F1:25:C9:A9:4B:D4:14:99 CRL Distribution Points Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: 41:EC:80:8E:33:CC:A8:65:9E:AE:A8:16:70:D6:C7:DC:01:44:66:36:E1:F2:27:56:1B:63:07:B8:0B: A6:38:62 ESTEID-SK Service status description [en] undefined T22:00:00Z TSP Service Definition URI URI [ et ] URI [ en ] Extension (critical): Qualifiers [QCWithQSCD] Qualifier type description [en] undefined. Qualifier Criteria list assert=atleastone Key Usage [ digitalsignature ] true Key Usage [ nonrepudiation ] true Extension (critical): Qualifiers [QCStatement, QCForESig] Qualifier type description [en] it is ensured by the CSP and controlled (supervision model) or audited (accreditation model) by the Member State (respectively its Supervisory Body or Accreditation Body) that all certificates issued under the service (CA/QC) identified in 'Service digital identity' and further identified by the above (filters) information used to further identify under the 'Sdi' identified trust service that precise set of certificates for which this additional information is required with regard to the issuance of such certificates is issued as a Qualified Certificate. STI (ESTONIA) - Trusted List ID: 0001 Page 23

24 Qualifier Qualifier Criteria list assert=all Key Usage [ nonrepudiation ] true Extension (critical): additionalserviceinformation AdditionalServiceInformation URI [ en ] History instance n.1 - Status: undersupervision ESTEID-SK 2011: Qualified certificates for Estonian ID-card, the residence permit card, the digital identity card, the digital identity card in form of the Mobile-ID ESTEID-SK 2011 X509SKI X509 SK I e2ryvvbcunl6cidbrvqikz1bv3y= T11:14:59Z Extension (critical): Qualifiers [QCWithSSCD] STI (ESTONIA) - Trusted List ID: 0001 Page 24

25 Qualifier type description [en] it is ensured by the trust service provider and controlled (supervision model) or audited (accreditation model) by the referenced Member State (respectively its Supervisory Body or Accreditation Body) that all Qualified Certificates issued under the service identified in "Service digital identity" and further identified by the filters information used to further identify under the "Sdi" identified trust service that precise set of Qualified Certificates for which this additional information is required with regards to the presence or absence of Secure Signature Creation Device (SSCD) support ARE supported by an SSCD (i.e. that that the private key associated with the public key in the certificate is stored in a Secure Signature Creation Device conformant with the applicable European legislation); Qualifier Criteria list assert=atleastone Key Usage [ digitalsignature ] true Key Usage [ nonrepudiation ] true Extension (critical): Qualifiers [QCStatement] Qualifier type description [en] it is ensured by the CSP and controlled (supervision model) or audited (accreditation model) by the Member State (respectively its Supervisory Body or Accreditation Body) that all certificates issued under the service (CA/QC) identified in 'Service digital identity' and further identified by the above (filters) information used to further identify under the 'Sdi' identified trust service that precise set of certificates for which this additional information is required with regard to the issuance of such certificates is issued as a Qualified Certificate. Qualifier Criteria list assert=all Key Usage [ nonrepudiation ] true Service (granted): ESTEID-SK 2015 qualified certificates for electronic signatures Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. ESTEID-SK 2015 qualified certificates for electronic signatures Certificate fields details Version: 3 Serial Number: STI (ESTONIA) - Trusted List ID: 0001 Page 25