united kingdom (united kingdom) - tscheme

62
UNITED KINGDOM (UNITED KINGDOM) : Trusted List Tsl Id: UKTSL22November2018 Valid until nextUpdate value: 2019-05-11T00:00:00Z TSL signed on: 2018-11-22T12:07:57Z PDF generated on: Thu Nov 22 13:08:28 CET 2018 ETSI 2016 - TSL HR - PDF/A-1b generator UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 1

Upload: others

Post on 01-May-2022

17 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: UNITED KINGDOM (UNITED KINGDOM) - tScheme

UNITED KINGDOM (UNITED KINGDOM) : Trusted List

Tsl Id: UKTSL22November2018

Valid until nextUpdate value: 2019-05-11T00:00:00Z

TSL signed on: 2018-11-22T12:07:57Z

PDF generated on: Thu Nov 22 13:08:28 CET 2018

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 1

Page 2: UNITED KINGDOM (UNITED KINGDOM) - tScheme

TSL Scheme Information

TSL Id UKTSL22November2018

TSLTag http://uri.etsi.org/19612/TSLTag

TSL Version Identifier 5

TSL Sequence Number 18

TSL Type http://uri.etsi.org/TrstSvc/TrustedList/TSLType/EUgeneric

Scheme Operator Name

Name [ en ] tScheme Limited

PostalAddress

Street Address [ en ] Mulberry Grove, PO Box 3653

Locality [ en ] WOKINGHAM, Berks

Postal Code [ en ] RG40 9NN

Country Name [ en ] UK

ElectronicAddress

URI mailto:[email protected]

URI http://www.tscheme.org/UK_TSL/

Scheme Name

Name [ en ] UK:Trusted list including information related to the qualified trust service providers which aresupervised by the issuing Member State, together with information related to the qualified trustservices provided by them, in accordance with the relevant provisions laid down in Regulation(EU) No 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronicidentification and trust services for electronic transactions in the internal market and repealingDirective 1999/93/EC.

Scheme Information URI

URI [ en ] https://www.tscheme.org/tsl/tsl-scheme-information

Status Determination Approach http://uri.etsi.org/TrstSvc/TrustedList/StatusDetn/EUappropriate

Scheme Type Community Rules

URI [ en ] http://uri.etsi.org/TrstSvc/TrustedList/schemerules/EUcommon

URI [ en ] http://uri.etsi.org/TrstSvc/TrustedList/schemerules/UK

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 2

Page 3: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Scheme Territory UK

Policy Or Legal Notice

TSL Legal Notice [ en ] The applicable legal framework for the present trusted list is Regulation (EU) No 910/2014 ofthe European Parliament and of the Council of 23 July 2014 on electronic identification andtrust services for electronic transactions in the internal market and repealing Directive1999/93/EC.

Historical Information Period 65535

Pointer to other TSL - EUROPEAN UNION

1.EU TSL - MimeType: application/vnd.etsi.tsl+xml

TSL Location https://ec.europa.eu/information_society/policy/esignature/trusted-list/tl-mp.xml

EU TSL digital identities

TSL Scheme Operator certificate fields details

Version: 3

Serial Number: 21267647932559079066510326516695893879

X509 Certificate -----BEGIN CERTIFICATE-----

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

-----END CERTIFICATE-----

Signature algorithm: SHA1withRSA

Issuer SERIAL NUMBER: 201306

Issuer CN: Citizen CA

Issuer C: BE

Subject SERIAL NUMBER: 60021211919

Subject GIVEN NAME: Pierre André

Subject SURNAME: Damas

Subject CN: Pierre Damas (Signature)

Subject C: BE

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 3

Page 4: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Valid from: Wed Jul 17 19:44:08 CEST 2013

Valid to: Sat Jul 14 01:59:59 CEST 2018

Public Key: 30:81:9F:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:81:8D:00:30:81:89:02:81:81:00:8C:BF:EE:C3:BE:1C:CB:C0:6D:E9:AE:2A:D4:0C:66:98:45:2D:BE:8C:16:6D:37:67:18:5E:E9:68:29:2A:80:73:94:39:F0:51:26:93:48:2C:65:11:7E:FF:87:64:B7:C8:60:0A:F6:C1:72:99:86:E8:57:2F:4D:F3:71:41:BC:4F:5F:CF:32:63:0A:41:62:C5:A7:27:76:83:E4:FE:10:AC:DD:BE:7D:9C:70:C5:F5:F1:45:17:17:FA:DD:F4:20:1A:6B:F9:66:05:BF:F1:A1:26:1A:05:A3:42:D6:51:E8:42:E1:EC:AF:9C:C7:CF:E0:9F:CC:47:84:C6:95:04:6B:73:02:03:01:00:01

Authority Key Identifier C3:0F:C3:72:4D:3F:DE:B2:38:DE:39:2E:47:64:50:FF:F2:8F:F3:C7

Authority Info Access http://certs.eid.belgium.be/belgiumrs2.crt

http://ocsp.eid.belgium.be

Certificate Policies Policy OID: 2.16.56.9.1.1.2.1

CPS pointer: http://repository.eid.belgium.be

CRL Distribution Points http://crl.eid.belgium.be/eidc201306.crl

QCStatements - crit. = false id_etsi_qcs_QcCompliance

Key Usage: nonRepudiation

Thumbprint algorithm: SHA-256

Thumbprint: FF:EA:7F:0E:D2:9B:EB:07:73:EA:3B:0C:47:29:BB:F8:00:A6:C3:90:B6:21:95:CB:27:0F:12:A4:AA:62:F2:84

EU TSL digital identities

TSL Scheme Operator certificate fields details

Version: 3

Serial Number: 21267647932559078025136389726459194295

X509 Certificate -----BEGIN CERTIFICATE-----

MIID/TCCAuWgAwIBAgIQEAAAAAAAWcxEUPr16SDrtzANBgkqhkiG9w0BAQUFADAzMQswCQYDVQQGEwJCRTETMBEGA1UEAxMKQ2l0aXplbiBDQTEPMA0GA1UEBRMGMjAxMzExMB4XDTEzMDcyNDAxNDUzMVoXDTE4MDcxODIzNTk1OVowbzELMAkGA1UEBhMCQkUxIjAgBgNVBAMTGU1hYXJ0ZW4gT3R0b3kgKFNpZ25hdHVyZSkxDjAMBgNVBAQTBU90dG95MRYwFAYDVQQqEw1NYWFydGVuIEpvcmlzMRQwEgYDVQQFEws4MzEyMTQyNDEwMjCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAjbr1T8USYkuh4X+Yi+coykq7mbF8PjgyjWQ28uODqRCkynuqJz468tCIYxsM/+/QdqEFq4Z5Z1YDbBYb5KsxfBmkzr9D+Gt49iWVt9Ig+FhngbOexwCW108t6Q/+NAo6gwl6IKkzv2wpEJIwtc51VFzvM+WkE1mNmclphYRTL5UCAwEAAaOCAVMwggFPMB8GA1UdIwQYMBaAFLws1Y0dT3YXfAzva5To9R51FmNhMG4GCCsGAQUFBwEBBGIwYDA2BggrBgEFBQcwAoYqaHR0cDovL2NlcnRzLmVpZC5iZWxnaXVtLmJlL2JlbGdpdW1yczIuY3J0MCYGCCsGAQUFBzABhhpodHRwOi8vb2NzcC5laWQuYmVsZ2l1bS5iZTBEBgNVHSAEPTA7MDkGB2A4CQEBAgEwLjAsBggrBgEFBQcCARYgaHR0cDovL3JlcG9zaXRvcnkuZWlkLmJlbGdpdW0uYmUwOQYDVR0fBDIwMDAuoCygKoYoaHR0cDovL2NybC5laWQuYmVsZ2l1bS5iZS9laWRjMjAxMzExLmNybDAOBgNVHQ8BAf8EBAMCBkAwEQYJYIZIAYb4QgEBBAQDAgUgMBgGCCsGAQUFBwEDBAwwCjAIBgYEAI5GAQEwDQYJKoZIhvcNAQEFBQADggEBAHNRipzOD4aXB7Oo4FgfBbWgPkmUGTqkz2jK9U2tEWUbyQrhirgqhxK6YMAHBvzL+7BHouMEAuxycZG3ozAfEDRZiznFWyqS8QlnHUe0ThaAvs8v5wYOUO7lJ6vnaNLLvQj7W3L5kCnEva5h0Jh9wMytlNp89dd02l7MD4BsidXoMN21AE8su39tBmNayLF6YrFLe3Zob4fQCuIEbx/pj3kYIVC4WM7uuDx+QpEJdNBtB41o2q2JJFqusRP7W0phkxX7sPtYkot6RXLdgaZNoB4YIRwGozIvcegydRVqpcYrvFSoppNHQqd8ZNzswjGzqBhlWYPsxdjjsxJiUyk7T1c=

-----END CERTIFICATE-----

Signature algorithm: SHA1withRSA

Issuer SERIAL NUMBER: 201311

Issuer CN: Citizen CA

Issuer C: BE

Subject SERIAL NUMBER: 83121424102

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 4

Page 5: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Subject GIVEN NAME: Maarten Joris

Subject SURNAME: Ottoy

Subject CN: Maarten Ottoy (Signature)

Subject C: BE

Valid from: Wed Jul 24 03:45:31 CEST 2013

Valid to: Thu Jul 19 01:59:59 CEST 2018

Public Key: 30:81:9F:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:81:8D:00:30:81:89:02:81:81:00:8D:BA:F5:4F:C5:12:62:4B:A1:E1:7F:98:8B:E7:28:CA:4A:BB:99:B1:7C:3E:38:32:8D:64:36:F2:E3:83:A9:10:A4:CA:7B:AA:27:3E:3A:F2:D0:88:63:1B:0C:FF:EF:D0:76:A1:05:AB:86:79:67:56:03:6C:16:1B:E4:AB:31:7C:19:A4:CE:BF:43:F8:6B:78:F6:25:95:B7:D2:20:F8:58:67:81:B3:9E:C7:00:96:D7:4F:2D:E9:0F:FE:34:0A:3A:83:09:7A:20:A9:33:BF:6C:29:10:92:30:B5:CE:75:54:5C:EF:33:E5:A4:13:59:8D:99:C9:69:85:84:53:2F:95:02:03:01:00:01

Authority Key Identifier BC:2C:D5:8D:1D:4F:76:17:7C:0C:EF:6B:94:E8:F5:1E:75:16:63:61

Authority Info Access http://certs.eid.belgium.be/belgiumrs2.crt

http://ocsp.eid.belgium.be

Certificate Policies Policy OID: 2.16.56.9.1.1.2.1

CPS pointer: http://repository.eid.belgium.be

CRL Distribution Points http://crl.eid.belgium.be/eidc201311.crl

QCStatements - crit. = false id_etsi_qcs_QcCompliance

Key Usage: nonRepudiation

Thumbprint algorithm: SHA-256

Thumbprint: F7:BC:0D:16:4D:EC:8F:36:70:9A:BE:85:FC:57:02:2F:3B:16:84:70:0A:80:4C:36:8D:34:32:90:04:90:DF:CB

EU TSL digital identities

TSL Scheme Operator certificate fields details

Version: 3

Serial Number: 1743254

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 5

Page 6: UNITED KINGDOM (UNITED KINGDOM) - tScheme

X509 Certificate -----BEGIN CERTIFICATE-----

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

-----END CERTIFICATE-----

Signature algorithm: SHA256withRSA

Issuer CN: LuxTrust Global Qualified CA 3

Issuer O: LuxTrust S.A.

Issuer C: LU

Subject T: Professional Person

Subject E: [email protected]

Subject SERIAL NUMBER: 10304444110080837592

Subject GIVEN NAME: Maarten Joris

Subject SURNAME: Ottoy

Subject CN: Maarten Joris Ottoy

Subject OU: 0949.383.342

Subject O: European Commission

Subject L: BE

Subject C: BE

Valid from: Thu Sep 15 11:00:12 CEST 2016

Valid to: Sun Sep 15 11:00:12 CEST 2019

Public Key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

Basic Constraints IsCA: false

Authority Info Access http://qca.ocsp.luxtrust.lu

http://ca.luxtrust.lu/LTGQCA3.crt

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 6

Page 7: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Certificate Policies Policy OID: 1.3.171.1.1.10.3.1

CPS text: [LuxTrust Qualified Certificate on SSCD compliant with ETSI TS 101 456 QCP+certificate policy. Key Generation by CSP. Sole Authorised Usage: Support of Qualified ElectronicSignature.]

CPS pointer: https://repository.luxtrust.lu

Policy OID: 0.4.0.1456.1.1

QCStatements - crit. = false id_etsi_qcs_QcCompliance

id_etsi_qcs_QcSSCD

Authority Key Identifier 63:8F:C2:8B:03:B1:AB:8E:D8:53:47:96:1D:99:A8:7D:F6:AC:A8:75

CRL Distribution Points http://crl.luxtrust.lu/LTGQCA3.crl

Subject Key Identifier 47:C3:B1:09:01:B1:82:2B

Key Usage: nonRepudiation

Thumbprint algorithm: SHA-256

Thumbprint: 9C:1A:3B:64:6E:AF:13:23:98:EF:31:9E:41:C8:E7:ED:72:5B:64:D5:77:25:80:AE:12:5D:59:C0:F6:84:56:30

EU TSL digital identities

TSL Scheme Operator certificate fields details

Version: 3

Serial Number: 1974568

X509 Certificate -----BEGIN CERTIFICATE-----

MIIHDjCCBPagAwIBAgIDHiEoMA0GCSqGSIb3DQEBCwUAME4xCzAJBgNVBAYTAkxVMRYwFAYDVQQKDA1MdXhUcnVzdCBTLkEuMScwJQYDVQQDDB5MdXhUcnVzdCBHbG9iYWwgUXVhbGlmaWVkIENBIDMwHhcNMTcwNTExMTAyNzI1WhcNMjAwNTExMTAyNzI1WjCCAQkxCzAJBgNVBAYTAk5MMQswCQYDVQQHEwJCRTEcMBoGA1UEChMTRXVyb3BlYW4gQ29tbWlzc2lvbjEVMBMGA1UECxMMMDk0OS4zODMuMzQyMSEwHwYDVQQDExhNaWNoYWVsIFRoZW9kb29yIGRlIEJvZXIxEDAOBgNVBAQTB2RlIEJvZXIxGTAXBgNVBCoTEE1pY2hhZWwgVGhlb2Rvb3IxHTAbBgNVBAUTFDEwMzAzOTY5NDUwMDg1MDQ2NDI0MSswKQYJKoZIhvcNAQkBFhxtaWNoYWVsLmRlLWJvZXJAZWMuZXVyb3BhLmV1MRwwGgYDVQQMExNQcm9mZXNzaW9uYWwgUGVyc29uMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2G70g/Tsyt8nyI1PXYHgIm6a6DawB2ATZMsMxkS1flXjkPNMd/e1Go/G1+IFsqA6iBlfxmFhABJa9FbFallOMBrE3Ao0SdHpT4UbrhVyWx5iV/DjInxPMCzx3Przus3CVy7YhKHO9Jt/qPruWeLCf3YFMV8N02lig904Vbc6pxjx5yqKij7skHSiMyAzdgw/VIQZjJF8PiA10eguvwgS/BU6ip5M03DoGOZPBvIt3q/Av4YHtd7LaOFTYl/zRcn2f12FqO4JMiNR5LxfByRbMmUJQe8sjtC0/ho7cG3BWuusLUe/LtQIGCT/uXXdF9qKuOiPDQ3OpfhJIhElaJPpwIDAQABo4ICNjCCAjIwDAYDVR0TAQH/BAIwADBmBggrBgEFBQcBAQRaMFgwJwYIKwYBBQUHMAGGG2h0dHA6Ly9xY2Eub2NzcC5sdXh0cnVzdC5sdTAtBggrBgEFBQcwAoYhaHR0cDovL2NhLmx1eHRydXN0Lmx1L0xUR1FDQTMuY3J0MIIBHgYDVR0gBIIBFTCCAREwggEDBggrgSsBAQoDATCB9jCBxwYIKwYBBQUHAgIwgboagbdMdXhUcnVzdCBRdWFsaWZpZWQgQ2VydGlmaWNhdGUgb24gU1NDRCBjb21wbGlhbnQgd2l0aCBFVFNJIFRTIDEwMSA0NTYgUUNQKyBjZXJ0aWZpY2F0ZSBwb2xpY3kuIEtleSBHZW5lcmF0aW9uIGJ5IENTUC4gU29sZSBBdXRob3Jpc2VkIFVzYWdlOiBTdXBwb3J0IG9mIFF1YWxpZmllZCBFbGVjdHJvbmljIFNpZ25hdHVyZS4wKgYIKwYBBQUHAgEWHmh0dHBzOi8vcmVwb3NpdG9yeS5sdXh0cnVzdC5sdTAIBgYEAIswAQEwIgYIKwYBBQUHAQMEFjAUMAgGBgQAjkYBATAIBgYEAI5GAQQwCwYDVR0PBAQDAgZAMB8GA1UdIwQYMBaAFGOPwosDsauO2FNHlh2ZqH32rKh1MDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwubHV4dHJ1c3QubHUvTFRHUUNBMy5jcmwwEQYDVR0OBAoECED2Gny4nY/ZMA0GCSqGSIb3DQEBCwUAA4ICAQBvdAp4qOITVgjyiZkdUMoQC5HPDvptyJrF+j4aZmCIYbg8UEy5RqurLv5icKUWjp0nYO8Qq4drrMGHbOMlWiVZ6yUiy8oXv62gv/hiSGGrwDKekfZcJ3K9wUT50TaM3sROmY0BzbYqatsDOoHb2BwhNMooFwo+sUZ+5Qt1Lv+FMLKHxeO9rM4ezXPO8Vsfh6d5zddGl29WrxbBZj7bp3cfSBHJa1t6NIIr5+sU9Xu+GvTSXuSSht3kmVU9ofctXetQ8Qq+mxPwPhNTyNu8IaQgQQBnWTMb6PQgtIaWOJak9mpRhvvlH9+sdIjNvGO46BCNykUPu4Mdgi0Zq5rsoCJUp5EpUWrAmdM5yMufMMKXqW8XHqU0KsTGyBcIkoElmhvtCQBBTfE5vh7yOS6hYpzTop9fLTJ+uQJI14DTOu+iVSmw5Oh8AYTPKh5wzKkEWTiq5Z0KiwmmOIxo8T9Ytlhsae/7aO1nC3WxFKaqWAFQx5UPIs4bQ0rRW39n1T6PovJxkKTPEW6TPmYrYjR2DYlsSnIbR9ebHUbRB/v/o9Pvqx6dArlpVuhDWWDjuAT1bW3ej+/jIJGyQtwKqL9fnDcmuUqzoBa9fXJuB1e8m3+tI1H5e9F/JH3kdkPsrV9DMS13+MYIeQJgAK3ofJcuKCKYQ5uUEZaU2CKiR6TzvzzGqQ==

-----END CERTIFICATE-----

Signature algorithm: SHA256withRSA

Issuer CN: LuxTrust Global Qualified CA 3

Issuer O: LuxTrust S.A.

Issuer C: LU

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 7

Page 8: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Subject T: Professional Person

Subject E: [email protected]

Subject SERIAL NUMBER: 10303969450085046424

Subject GIVEN NAME: Michael Theodoor

Subject SURNAME: de Boer

Subject CN: Michael Theodoor de Boer

Subject OU: 0949.383.342

Subject O: European Commission

Subject L: BE

Subject C: NL

Valid from: Thu May 11 12:27:25 CEST 2017

Valid to: Mon May 11 12:27:25 CEST 2020

Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:AB:61:BB:D2:0F:D3:B3:2B:7C:9F:22:35:3D:76:07:80:89:BA:6B:A0:DA:C0:1D:80:4D:93:2C:33:19:12:D5:F9:57:8E:43:CD:31:DF:DE:D4:6A:3F:1B:5F:88:16:CA:80:EA:20:65:7F:19:85:84:00:49:6B:D1:5B:15:A9:65:38:C0:6B:13:70:28:D1:27:47:A5:3E:14:6E:B8:55:C9:6C:79:89:5F:C3:8C:89:F1:3C:C0:B3:C7:73:EB:CE:EB:37:09:5C:BB:62:12:87:3B:D2:6D:FE:A3:EB:B9:67:8B:09:FD:D8:14:C5:7C:37:4D:A5:8A:0F:74:E1:56:DC:EA:9C:63:C7:9C:AA:2A:28:FB:B2:41:D2:88:CC:80:CD:D8:30:FD:52:10:66:32:45:F0:F8:80:D7:47:A0:BA:FC:20:4B:F0:54:EA:2A:79:33:4D:C3:A0:63:99:3C:1B:C8:B7:7A:BF:02:FE:18:1E:D7:7B:2D:A3:85:4D:89:7F:CD:17:27:D9:FD:76:16:A3:B8:24:C8:8D:47:92:F1:7C:1C:91:6C:C9:94:25:07:BC:B2:3B:42:D3:F8:68:ED:C1:B7:05:6B:AE:B0:B5:1E:FC:BB:50:20:60:93:FE:E5:D7:74:5F:6A:2A:E3:A2:3C:34:37:3A:97:E1:24:88:44:95:A2:4F:A7:02:03:01:00:01

Basic Constraints IsCA: false

Authority Info Access http://qca.ocsp.luxtrust.lu

http://ca.luxtrust.lu/LTGQCA3.crt

Certificate Policies Policy OID: 1.3.171.1.1.10.3.1

CPS text: [LuxTrust Qualified Certificate on SSCD compliant with ETSI TS 101 456 QCP+certificate policy. Key Generation by CSP. Sole Authorised Usage: Support of Qualified ElectronicSignature.]

CPS pointer: https://repository.luxtrust.lu

Policy OID: 0.4.0.1456.1.1

QCStatements - crit. = false id_etsi_qcs_QcCompliance

id_etsi_qcs_QcSSCD

Authority Key Identifier 63:8F:C2:8B:03:B1:AB:8E:D8:53:47:96:1D:99:A8:7D:F6:AC:A8:75

CRL Distribution Points http://crl.luxtrust.lu/LTGQCA3.crl

Subject Key Identifier 40:F6:1A:7C:B8:9D:8F:D9

Key Usage: nonRepudiation

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 8

Page 9: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Thumbprint algorithm: SHA-256

Thumbprint: 59:A1:BF:29:0B:81:8B:17:7A:D6:1A:C4:B3:E6:DC:DD:D4:6D:A6:D5:BE:95:79:F8:56:4A:DE:A6:F2:CF:07:3E

EU TSL digital identities

TSL Scheme Operator certificate fields details

Version: 3

Serial Number: 21267647932558803542992831893320696944

X509 Certificate -----BEGIN CERTIFICATE-----

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

-----END CERTIFICATE-----

Signature algorithm: SHA1withRSA

Issuer SERIAL NUMBER: 201508

Issuer CN: Citizen CA

Issuer C: BE

Subject SERIAL NUMBER: 67022330340

Subject GIVEN NAME: Jean-Marc

Subject SURNAME: Verbergt

Subject CN: Jean-Marc Verbergt (Signature)

Subject C: BE

Valid from: Fri May 01 20:54:54 CEST 2015

Valid to: Sat Apr 26 01:59:59 CEST 2025

Public Key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

Authority Key Identifier 6A:6F:51:E5:CC:27:5D:65:09:EE:A8:1B:12:94:03:F0:40:A0:08:F2

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 9

Page 10: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Authority Info Access http://certs.eid.belgium.be/belgiumrs3.crt

http://ocsp.eid.belgium.be/2

Certificate Policies Policy OID: 2.16.56.10.1.1.2.1

CPS pointer: http://repository.eid.belgium.be

CPS text: [Gebruik onderworpen aan aansprakelijkheidsbeperkingen, zie CPS - Usage soumis à deslimitations de responsabilité, voir CPS - Verwendung unterliegt Haftungsbeschränkungen,gemäss CPS]

CRL Distribution Points http://crl.eid.belgium.be/eidc201508.crl

QCStatements - crit. = false id_etsi_qcs_QcCompliance

id_etsi_qcs_QcSSCD

Key Usage: nonRepudiation

Thumbprint algorithm: SHA-256

Thumbprint: 54:00:AB:71:2C:41:AA:F0:C4:0B:50:5E:26:4D:54:94:D8:AF:41:80:F8:F6:29:55:D1:62:23:B3:29:0F:97:C3

TSL Type http://uri.etsi.org/TrstSvc/TrustedList/TSLType/EUlistofthelists

Scheme Territory EU

Mime Type application/vnd.etsi.tsl+xml

Scheme Operator Name

Name [ en ] European Commission

Scheme Type Community Rules

URI [ en ] http://uri.etsi.org/TrstSvc/TrustedList/schemerules/EUlistofthelists

List Issue Date Time 2018-11-22T01:00:00Z

Next Update

date Time 2019-05-11T00:00:00Z

Distribution Points

URI https://www.tscheme.org/tsl/uk-tsl

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 10

Page 11: UNITED KINGDOM (UNITED KINGDOM) - tScheme

1 - TSP: Royal Bank of Scotland Plc

TSP Name

Name [ en ] Royal Bank of Scotland Plc

TSP Trade Name

Name [ en ] NTRUK-SC090312

Name [ en ] The Royal Bank of Scotland plc

PostalAddress

Street Address [ en ] 2nd Floor

Locality [ en ] 280 Bishopsgate

State Or Province [ en ] London

Postal Code [ en ] EC2M 4RB

Country Name [ en ] UK

ElectronicAddress

URI mailto:[email protected]

URI http://www.trustAssured.co.uk/

TSP Information URI

URI [ en ] http://www.rbs.co.uk/corporate/electronic-services/g6/trustassured/policy-documents.ashx

1.1 - Service (withdrawn): Trustassured

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC

Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verifiedby the relevant registration services.

Service Name

Name [ en ] Trustassured

Service digital identities

Certificate fields details

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 11

Page 12: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Version: 3

Serial Number: 13298795840390662789487311757372293122

X509 Certificate -----BEGIN CERTIFICATE-----

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

-----END CERTIFICATE-----

Signature algorithm: SHA1withRSA

Issuer CN: IdenTrust Root Certificate Authority

Issuer OU: IdenTrust Root Certificate Authority

Issuer O: IdenTrust Inc.

Subject CN: The Royal Bank of Scotland Plc TrustAssured CA

Subject OU: The Royal Bank of Scotland plc TrustAssured Infrastructure

Subject O: The Royal Bank of Scotland plc

Valid from: Wed Oct 09 18:41:54 CEST 2013

Valid to: Fri Oct 09 18:41:54 CEST 2020

Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:CB:90:B9:21:A9:1F:FB:1B:C2:65:67:96:14:0D:B1:6F:E5:13:58:0D:B0:7C:4C:DA:BA:D1:80:A3:02:18:7A:17:5C:FC:2B:F4:61:B5:04:43:E2:2D:39:7D:B5:FB:97:1E:5C:6A:9E:9E:C4:20:90:E9:A8:78:86:EB:EB:A1:0E:EA:4B:A5:83:B6:8B:F2:66:04:4A:CA:2C:8F:E4:96:31:C9:56:40:AC:27:EC:2F:80:E5:C4:37:ED:68:73:45:70:6C:53:43:92:A4:1D:7C:E0:43:F5:D0:54:9D:A6:4D:7E:E0:05:83:89:51:BA:F0:A5:D9:15:B9:F9:D3:89:E3:89:EA:ED:2D:B3:76:D0:65:BB:02:8E:B9:13:74:11:95:D7:4B:8B:89:BF:7F:6E:7F:98:2A:8C:EB:CE:2C:97:3D:37:E7:FD:65:6D:1C:FE:ED:A3:40:B7:D1:E8:0F:73:CB:D5:7B:FA:E3:BB:92:18:8E:30:CE:43:34:10:5F:12:69:3A:9E:35:AB:67:53:B6:0E:3C:EB:53:92:CA:58:4A:88:6B:31:DC:58:A4:46:7D:E9:C1:4C:14:6F:D1:2C:0E:EA:21:CD:95:1F:92:17:22:D7:88:23:02:46:4F:26:2A:0C:40:E8:A2:2A:2A:8D:F4:DF:55:01:24:36:C8:99:E3:E9:96:4D:02:03:01:00:01

Basic Constraints IsCA: true - Path length: 7

Certificate Policies Policy OID: 1.2.840.114021.1.6.1

CPS text: [This certificate is for the sole use of IdenTrust, its Participants and their customers.IdenTrust accepts no liability for any claim except as expressly provided in its Operating Rules IL-OPRUL.]

Subject Key Identifier 63:17:C0:81:D4:BF:0F:A9:66:31:96:FA:17:C1:B0:CA:DA:17:02:D0

Authority Info Access https://identrustroot.ocsptn.identrust.com

https://identrustroot.tctn.identrust.com

Authority Key Identifier 74:D8:09:F6:49:27:9B:04:1A:19:63:FA:61:2B:73:FF:9D:6E:49:3D

Key Usage: digitalSignature - nonRepudiation - keyEncipherment - dataEncipherment - keyAgreement -keyCertSign - cRLSign

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 12

Page 13: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Thumbprint algorithm: SHA-256

Thumbprint: FC:4A:C9:A4:6D:D2:86:8B:01:02:88:F6:ED:35:48:1A:2F:A3:25:B4:50:04:52:52:72:BF:F7:62:26:29:9E:BF

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/withdrawn

Service status description [en] undefined.

Status Starting Time 2017-06-30T22:00:00Z

Scheme Service Definition URI

URI [ en ] http://www.tscheme.eu/directory/rbsg/index.html

Service Supply Points

Service Supply Point http://www.trustassured.co.uk/

TSP Service Definition URI

URI [ en ] http://www.trustassured.co.uk/

1.1.1 - Extension (critical): additionalServiceInformation

AdditionalServiceInformation

URI [ en ] http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/ForeSignatures

1.1.2 - History instance n.1 - Status: granted

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC

Service Name

Name [ en ] Trustassured

Service digital identities

X509SubjectName

Subject CN: The Royal Bank of Scotland Plc TrustAssured CA

Subject OU: The Royal Bank of Scotland plc TrustAssured Infrastructure

Subject O: The Royal Bank of Scotland plc

X509SKI

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 13

Page 14: UNITED KINGDOM (UNITED KINGDOM) - tScheme

X509 SK I YxfAgdS/D6lmMZb6F8GwytoXAtA=

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/granted

Status Starting Time 2016-06-30T22:00:00Z

1.1.2.1 - Extension (critical): additionalServiceInformation

AdditionalServiceInformation

URI [ en ] http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/ForeSignatures

1.1.3 - History instance n.2 - Status: accredited

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC

Service Name

Name [ en ] Trustassured

Service digital identities

X509SubjectName

Subject CN: The Royal Bank of Scotland Plc TrustAssured CA

Subject OU: The Royal Bank of Scotland plc TrustAssured Infrastructure

Subject O: The Royal Bank of Scotland plc

X509SKI

X509 SK I YxfAgdS/D6lmMZb6F8GwytoXAtA=

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited

Status Starting Time 2002-02-11T12:00:00Z

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 14

Page 15: UNITED KINGDOM (UNITED KINGDOM) - tScheme

2 - TSP: Entrust (Europe) Ltd

TSP Name

Name [ en ] Entrust (Europe) Ltd

TSP Trade Name

Name [ en ] NTRUK-03613613

Name [ en ] Trustis

PostalAddress

Street Address [ en ] Napier Court, Napier Road,

Locality [ en ] READING

State Or Province [ en ] Berkshire

Postal Code [ en ] RG1 8BW

Country Name [ en ] UK

ElectronicAddress

URI http://www.trustis.com

URI mailto:[email protected]

TSP Information URI

URI [ en ] http://www.trustis.com

2.1 - Service (recognisedatnationallevel): Certificate Factory

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/unspecified

Service type description [en] A trust service of an unspecified type.

Service Name

Name [ en ] Certificate Factory

Service digital identities

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Service status description [en] undefined.

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 15

Page 16: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Status Starting Time 2016-06-30T22:00:00Z

Scheme Service Definition URI

URI [ en ] https://www.tscheme.org/certificate-factory-entrust-datacard

Service Supply Points

Service Supply Point http://www.trustis.com

TSP Service Definition URI

URI [ en ] http://www.trustis.com

2.1.1 - History instance n.1 - Status: accredited

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/unspecified

Service Name

Name [ en ] Certificate Factory

Service digital identities

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited

Status Starting Time 2002-03-08T12:00:00Z

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 16

Page 17: UNITED KINGDOM (UNITED KINGDOM) - tScheme

3 - TSP: British Telecommunications Plc

TSP Name

Name [ en ] British Telecommunications Plc

TSP Trade Name

Name [ en ] NTRUK-1800000

Name [ en ] BT

PostalAddress

Street Address [ en ] BT Trust Services Helpdesk

Locality [ en ] PO Box 641 Cardiff

State Or Province [ en ] South Glamorgan

Postal Code [ en ] CF1 1YL

Country Name [ en ] UK

ElectronicAddress

URI http://www.globalservices.bt.com/uk/en/products/assure_public_key_infrastructure

URI mailto:[email protected]

TSP Information URI

URI [ en ] http://www.globalservices.bt.com/uk/en/products/assure_public_key_infrastructure

3.1 - Service (recognisedatnationallevel): BT Assure PKI

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/unspecified

Service type description [en] A trust service of an unspecified type.

Service Name

Name [ en ] BT Assure PKI

Service digital identities

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Service status description [en] undefined.

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 17

Page 18: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Status Starting Time 2016-06-30T22:00:00Z

Scheme Service Definition URI

URI [ en ] https://www.tscheme.org/managed-pki-security-bt

TSP Service Definition URI

URI [ en ] http://www.globalservices.bt.com/uk/en/products/assure_public_key_infrastructure

3.1.1 - History instance n.1 - Status: accredited

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/unspecified

Service Name

Name [ en ] BT Assure PKI

Service digital identities

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited

Status Starting Time 2002-05-27T11:00:00Z

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 18

Page 19: UNITED KINGDOM (UNITED KINGDOM) - tScheme

4 - TSP: Health & Social Care Information Centre

TSP Name

Name [ en ] Health & Social Care Information Centre

TSP Trade Name

Name [ en ] NTRUK-Health and Social Care Act 2012 Part 9 Chapter 2

Name [ en ] NHS

PostalAddress

Street Address [ en ] 1 Trevelyan Square, Boar Lane,

Locality [ en ] Leeds

State Or Province [ en ] West Yorkshire

Postal Code [ en ] LS1 6AE

Country Name [ en ] UK

ElectronicAddress

URI http://www.hscic.gov.uk/

URI mailto:[email protected]

TSP Information URI

URI [ en ] http://systems.hscic.gov.uk/infogov/security/infrasec/nhspki/docs

4.1 - Service (recognisedatnationallevel): Root CA for NHS PKI

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/PKC

Service type description [en] A certificate generation service creating and signing non-qualified public key certificates based on the identity and otherattributes verified by the relevant registration services.

Service Name

Name [ en ] Root CA for NHS PKI

Service digital identities

Certificate fields details

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 19

Page 20: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Version: 3

Serial Number: 1084362678

X509 Certificate -----BEGIN CERTIFICATE-----

MIID9zCCAt+gAwIBAgIEQKIPtjANBgkqhkiG9w0BAQUFADA4MQwwCgYDVQQKEwNOSFMxCzAJBgNVBAsTAkNBMRswGQYDVQQDExJOSFMgUm9vdCBBdXRob3JpdHkwHhcNMDQwNjA0MTA1ODMxWhcNMjQwNjA0MTEyODMxWjA4MQwwCgYDVQQKEwNOSFMxCzAJBgNVBAsTAkNBMRswGQYDVQQDExJOSFMgUm9vdCBBdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvIzZXhKyitE4BTeiay48TioOBds/PbC1hzE36faAdwLuU33BVQNWNi/lA/sTi6kvJs4vCgDrEOeY2TuS+tZhqOmdQHcJIQZYWfjPjtT3Q5IdR0NI0sUyTo7qcD+1Uutiv7Mr290NfFky6z4Ibj19QvfF10iC2jLd2p7dJ3MQq2jdJWiVyI8NkgavyLj7N8CpF2Trb7g/K4J57+oxzRShtCJNLVseK3InVTIejOJ6FaH5dqbVA63dtu9YwK9J1IP2O0IL1InSZIulNkCXFlGI38PDnNdFgPwYxdhFZ1FD9X+zkVmwvI1CGzn+OiVH/l/ANRBxhh/yhUDwBFoNz6IxXAgMBAAGjggEHMIIBAzBaBgNVHR8EUzBRME+gTaBLpEkwRzEMMAoGA1UEChMDTkhTMQswCQYDVQQLEwJDQTEbMBkGA1UEAxMSTkhTIFJvb3QgQXV0aG9yaXR5MQ0wCwYDVQQDEwRDUkwxMCsGA1UdEAQkMCKADzIwMDQwNjA0MTA1ODMxWoEPMjAyNDA2MDQxMTI4MzFaMAsGA1UdDwQEAwIBBjAfBgNVHSMEGDAWgBTjJxeTzCue37VWdXJzwtcLoJ3wWzAdBgNVHQ4EFgQU4ycXk8wrnt+1VnVyc8LXC6Cd8FswDAYDVR0TBAUwAwEB/zAdBgkqhkiG9n0HQQAEEDAOGwhWNy4wOjQuMAMCBJAwDQYJKoZIhvcNAQEFBQADggEBAIHWfvzcbYSyFcMWQnUzplM0u0559K+KEMzlM5+TDgqzC3K94Y09mWYUMyS+qoYV88VzaKyb38FSs2/uNhPTXMduhqQTIoPiR2DFMjgjCMoAfvh9R2pFnbpncXLa9I1aN9RgYryCk/6d7UP+gBurwfxmyObiCmozMIvIpoRXNKRqhqh/zKUKI7/tc2t/ris2bOw2j5X1aqflzrrBh/DEFkvK9InQg6cYdMOqWT/iQ+WOc/UIisNXGfYFsAnD7XUlHf7+Z8FNEtUptUqiBkmMvXfy9Bgv/pqqZe8HedZjQAc6SgE+DfBuU8CZt6h1WCZu4YlAaFPFg1qeO4bUm+/96oA=

-----END CERTIFICATE-----

Signature algorithm: SHA1withRSA

Issuer CN: NHS Root Authority

Issuer OU: CA

Issuer O: NHS

Subject CN: NHS Root Authority

Subject OU: CA

Subject O: NHS

Valid from: Fri Jun 04 12:58:31 CEST 2004

Valid to: Tue Jun 04 13:28:31 CEST 2024

Public Key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

CRL Distribution Points O=NHS,OU=CA,CN=NHS Root Authority,CN=CRL1

Authority Key Identifier E3:27:17:93:CC:2B:9E:DF:B5:56:75:72:73:C2:D7:0B:A0:9D:F0:5B

Subject Key Identifier E3:27:17:93:CC:2B:9E:DF:B5:56:75:72:73:C2:D7:0B:A0:9D:F0:5B

Basic Constraints IsCA: true

Key Usage: keyCertSign - cRLSign

Thumbprint algorithm: SHA-256

Thumbprint: CB:7F:39:ED:D2:61:63:1F:E9:59:95:03:0F:79:3C:90:D3:DB:6D:84:91:2B:0F:F7:A1:A9:6F:ED:EA:6D:9F:10

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Service status description [en] undefined.

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 20

Page 21: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Status Starting Time 2016-06-30T22:00:00Z

Scheme Service Definition URI

URI [ en ] https://www.tscheme.org/root-ca-nhs-pki-service-health-and-social-care-information-centre

TSP Service Definition URI

URI [ en ] http://www.hscic.gov.uk/

4.1.1 - History instance n.1 - Status: accredited

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/PKC

Service Name

Name [ en ] Root CA for NHS PKI

Service digital identities

X509SubjectName

Subject CN: NHS Root Authority

Subject OU: CA

Subject O: NHS

X509SKI

X509 SK I 4ycXk8wrnt+1VnVyc8LXC6Cd8Fs=

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited

Status Starting Time 2007-11-29T12:00:00Z

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 21

Page 22: UNITED KINGDOM (UNITED KINGDOM) - tScheme

5 - TSP: Registers of Scotland Executive Agency

TSP Name

Name [ en ] Registers of Scotland Executive Agency

TSP Trade Name

Name [ en ] NTRUK-non-ministerial department of the Scottish Government

Name [ en ] Registers of Scotland

PostalAddress

Street Address [ en ] Meadowbank House,

Locality [ en ] 153 London Road, Edinburgh

State Or Province [ en ] Midlothian

Postal Code [ en ] EH8 7AU

Country Name [ en ] UK

ElectronicAddress

URI https://www.ros.gov.uk/services/online-services/artl

URI mailto:[email protected]

TSP Information URI

URI [ en ] https://www.ros.gov.uk/services/online-services/artl

5.1 - Service (recognisedatnationallevel): ARTL

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/PKC

Service type description [en] A certificate generation service creating and signing non-qualified public key certificates based on the identity and otherattributes verified by the relevant registration services.

Service Name

Name [ en ] ARTL

Service digital identities

Certificate fields details

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 22

Page 23: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Version: 3

Serial Number: 160770683215614113593164346668391097397

X509 Certificate -----BEGIN CERTIFICATE-----

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

-----END CERTIFICATE-----

Signature algorithm: SHA1withRSA

Issuer OU: Registers of Scotland Root CA

Issuer O: Registers of Scotland

Issuer C: GB

Subject OU: ARTL Issuing Authority

Subject O: Registers of Scotland

Subject C: GB

Valid from: Thu Oct 05 18:12:04 CEST 2006

Valid to: Wed Oct 05 18:11:06 CEST 2016

Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:98:2C:52:78:DE:BF:ED:09:E8:22:42:76:5D:6F:7A:8B:71:E4:DE:98:44:5E:A7:E5:08:88:5B:9F:57:6A:34:ED:4B:01:A3:BC:AF:DF:8D:41:CF:A0:40:96:B0:BB:5F:16:1F:8E:70:6E:F5:EC:F5:1F:22:5F:74:C8:DC:30:96:22:39:73:3A:CC:B1:41:7C:7F:1B:27:1C:32:7F:F1:6A:A3:A0:81:5C:9D:C7:51:AE:9B:4F:43:A3:C1:02:0B:6D:4D:3E:6D:92:F7:56:97:AB:40:D0:F7:E6:9D:0B:73:4D:61:87:E3:CC:99:36:0D:3B:00:D6:44:9F:2F:1B:4B:9A:4A:B2:E3:27:72:28:3B:FC:6D:29:10:4E:90:16:2E:80:E2:65:CD:5A:84:62:73:08:1E:44:94:47:88:F5:84:B9:81:2D:DC:0F:C7:C8:FE:CA:4C:CE:E7:F9:0F:90:B4:B6:2E:AB:F7:75:B6:F4:C9:A0:C5:D3:26:AA:E0:1B:7E:9C:02:FA:16:2F:7C:A2:86:84:28:D6:24:DD:D6:F3:53:7E:C2:7C:3D:F8:DD:C3:C6:B7:29:D3:26:17:E9:93:F8:7D:2A:E6:B8:A7:30:83:27:BF:DC:99:20:D2:AE:E0:A8:9A:07:30:7B:3B:80:45:68:9D:A1:77:67:59:68:1F:57:D1:99:02:03:01:00:01

Authority Key Identifier 35:32:4B:32:82:30:D5:75:75:01:42:39:0B:2B:3E:AF:DA:1C:27:20

Basic Constraints IsCA: true

Certificate Policies Policy OID: 1.3.6.1.4.1.5237.116.1.1

CPS pointer: http://artlpki.ros.gov.uk/cp/artlcertpol.pdf

CPS text: [Issued in accordance with and governed by the Registers of Scotland Executive AgencyARTL Issuing Authority Certificate Policy.http://artlpki.ros.gov.uk/cp/artlcertpol.pdf]

CRL Distribution Points http://www.ros.gov.uk/pki/ia.crl

http://www.trustis.com/pki/artl/crl/ia.crl

Subject Key Identifier 05:1F:89:D0:30:33:83:10:7E:F0:69:D4:A2:BD:CE:6D:65:64:A8:26

Key Usage: keyCertSign - cRLSign

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 23

Page 24: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Thumbprint algorithm: SHA-256

Thumbprint: D1:BE:CD:AD:11:09:09:D7:B8:E7:52:A3:9B:0D:8D:EE:DE:DA:99:71:F7:9E:E4:6F:01:42:38:7A:5E:41:2F:AF

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Service status description [en] undefined.

Status Starting Time 2016-06-30T22:00:00Z

Scheme Service Definition URI

URI [ en ] https://www.tscheme.org/artl-registers-scotland

Service Supply Points

Service Supply Point https://www.ros.gov.uk/services/online-services/artl

TSP Service Definition URI

URI [ en ] https://www.ros.gov.uk/services/online-services/artl

5.1.1 - History instance n.1 - Status: accredited

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/PKC

Service Name

Name [ en ] ARTL

Service digital identities

X509SubjectName

Subject OU: ARTL Issuing Authority

Subject O: Registers of Scotland

Subject C: GB

X509SKI

X509 SK I BR+J0DAzgxB+8GnUor3ObWVkqCY=

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited

Status Starting Time 2008-05-12T11:00:00Z

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 24

Page 25: UNITED KINGDOM (UNITED KINGDOM) - tScheme

6 - TSP: Home Office Technology

TSP Name

Name [ en ] Home Office Technology

TSP Trade Name

Name [ en ] NTRUK-part of Home Office ministerial department

Name [ en ] Police

PostalAddress

Street Address [ en ] Home Office Technology of Fry Building

Locality [ en ] 2 Marsham Street

State Or Province [ en ] London

Postal Code [ en ] SW1P 4DF

Country Name [ en ] UK

ElectronicAddress

URI https://www.gov.uk/government/organisations/home-office

URI mailto:[email protected]

TSP Information URI

URI [ en ] https://www.gov.uk/government/organisations/home-office

6.1 - Service (recognisedatnationallevel): Police Service Root CA

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/PKC

Service type description [en] A certificate generation service creating and signing non-qualified public key certificates based on the identity and otherattributes verified by the relevant registration services.

Service Name

Name [ en ] Police Service Root CA

Service digital identities

Certificate fields details

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 25

Page 26: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Version: 3

Serial Number: 1244634544

X509 Certificate -----BEGIN CERTIFICATE-----

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

-----END CERTIFICATE-----

Signature algorithm: SHA1withRSA

Issuer CN: Police Service PKI Root Certificate Authority

Issuer O: Police

Issuer C: GB

Subject CN: Police Service PKI Root Certificate Authority

Subject O: Police

Subject C: GB

Valid from: Wed Jun 10 13:19:04 CEST 2009

Valid to: Sun Jun 10 13:49:04 CEST 2029

Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:C2:24:F1:9F:F6:92:D9:04:6B:57:6A:E8:AF:C8:9D:06:25:BE:06:3E:32:2B:B2:37:6E:2E:4D:81:A3:14:F0:55:49:8E:B6:13:F0:8A:82:E8:B9:71:69:52:29:06:C5:F9:F5:D1:3D:44:BA:6D:CF:50:08:2D:C5:33:A0:63:00:95:33:63:08:70:80:9A:C2:EC:77:82:5C:CD:E3:B9:C2:F2:95:D3:9C:75:3B:72:2B:6E:4E:08:B0:B6:1E:DB:2E:C3:0A:00:28:0B:18:15:E3:E5:65:67:D9:D2:24:B4:A8:85:57:62:4C:88:C2:33:0E:71:B4:D0:29:DF:F0:7B:A7:4E:A6:F8:4B:D2:29:EB:12:EC:75:2A:43:32:BA:8A:91:01:4E:0C:F2:20:1C:DF:2D:32:3B:5E:DB:D1:04:BC:B2:6C:0B:F4:D8:BA:95:0D:6D:90:4F:B0:C1:DF:66:82:F3:48:DE:FC:C4:17:7C:36:7B:5B:98:82:5B:03:1D:8B:B7:F6:14:F9:A6:69:8E:3C:71:85:40:17:F1:5F:93:17:72:45:3F:0A:AA:51:FC:22:5C:B8:38:7D:E0:ED:D5:0F:E3:A6:47:3B:AC:5F:B7:9B:A2:8F:4C:2B:72:63:D2:6C:5B:21:66:3B:35:C4:54:2E:E1:EC:93:01:0B:44:4F:0B:7F:1B:02:03:01:00:01

Basic Constraints IsCA: true

Authority Key Identifier DB:F3:B1:04:DE:12:D6:77:07:69:98:E5:57:24:6F:39:22:F2:69:53

Subject Key Identifier DB:F3:B1:04:DE:12:D6:77:07:69:98:E5:57:24:6F:39:22:F2:69:53

Key Usage: keyCertSign - cRLSign

Thumbprint algorithm: SHA-256

Thumbprint: 2C:A0:08:91:F6:0C:5C:C6:15:F6:5C:2B:36:10:40:E8:5F:BA:E9:7E:F8:7C:3B:F5:2A:82:26:D0:B8:1C:F0:01

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Service status description [en] undefined.

Status Starting Time 2016-06-30T22:00:00Z

Scheme Service Definition URI

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 26

Page 27: UNITED KINGDOM (UNITED KINGDOM) - tScheme

URI [ en ] https://www.tscheme.org/police-service-pki-root-ca-home-office-technology

TSP Service Definition URI

URI [ en ] https://www.gov.uk/government/organisations/home-office

6.1.1 - History instance n.1 - Status: accredited

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/PKC

Service Name

Name [ en ] Police Service Root CA

Service digital identities

X509SubjectName

Subject CN: Police Service PKI Root Certificate Authority

Subject O: Police

Subject C: GB

X509SKI

X509 SK I 2/OxBN4S1ncHaZjlVyRvOSLyaVM=

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited

Status Starting Time 2011-02-25T12:00:00Z

6.2 - Service (recognisedatnationallevel): Police Service IAM Central Services CA

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/PKC

Service type description [en] A certificate generation service creating and signing non-qualified public key certificates based on the identity and otherattributes verified by the relevant registration services.

Service Name

Name [ en ] Police Service IAM Central Services CA

Service digital identities

Certificate fields details

Version: 3

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 27

Page 28: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Serial Number: 1244634735

X509 Certificate -----BEGIN CERTIFICATE-----

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

-----END CERTIFICATE-----

Signature algorithm: SHA1withRSA

Issuer CN: Police Service PKI Root Certificate Authority

Issuer O: Police

Issuer C: GB

Subject CN: Authentication Issuing Authority

Subject OU: IAM CS

Subject O: Police

Subject C: GB

Valid from: Thu Sep 30 13:08:13 CEST 2010

Valid to: Wed Sep 30 13:38:13 CEST 2020

Public Key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

Basic Constraints IsCA: true

Authority Info Access http://rca.x.pnn.police.uk/certs/root_cert.crt

http://ocsp.iamcs.x.pnn.police.uk

http://rca.pnn.police.uk/certs/root_cert.crt

http://ocsp.iamcs.pnn.police.uk

Certificate Policies Policy OID: 1.3.6.1.4.1.8311.0.509.1

Policy OID: 1.3.6.1.4.1.8311.0.509.3

Policy OID: 1.3.6.1.4.1.8311.0.509.4

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 28

Page 29: UNITED KINGDOM (UNITED KINGDOM) - tScheme

CRL Distribution Points http://rca.x.pnn.police.uk/crl/prca.crl

ldap://pkidirectory.iamcs.x.pnn.police.uk/cn=RootCRL,o=Police,c=GB?certificateRevocationList?base

http://rca.pnn.police.uk/crl/prca.crl

ldap://pkidirectory.iamcs.pnn.police.uk/cn=RootCRL,o=Police,c=GB?certificateRevocationList?base

C=GB,O=Police,CN=Police Service PKI Root Certificate Authority,CN=CRL1

Authority Key Identifier DB:F3:B1:04:DE:12:D6:77:07:69:98:E5:57:24:6F:39:22:F2:69:53

Subject Key Identifier 9B:B7:03:44:40:B8:8A:B0:68:46:14:F8:38:43:50:4C:28:64:3E:7F

Key Usage: keyCertSign - cRLSign

Thumbprint algorithm: SHA-256

Thumbprint: D6:BB:9F:51:F0:B7:8E:0B:04:98:B9:A9:A2:C8:1E:F0:20:01:44:BE:9E:76:EC:15:70:89:2D:3C:E6:AB:BB:F5

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Service status description [en] undefined.

Status Starting Time 2016-06-30T22:00:00Z

Scheme Service Definition URI

URI [ en ] https://www.tscheme.org/police-service-iam-central-services-ca-home-office-technology

TSP Service Definition URI

URI [ en ] https://www.gov.uk/government/organisations/home-office

6.2.1 - History instance n.1 - Status: accredited

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/PKC

Service Name

Name [ en ] Police Service IAM Central Services CA

Service digital identities

X509SubjectName

Subject CN: Authentication Issuing Authority

Subject OU: IAM CS

Subject O: Police

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 29

Page 30: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Subject C: GB

X509SKI

X509 SK I m7cDREC4irBoRhT4OENQTChkPn8=

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited

Status Starting Time 2011-02-25T12:00:00Z

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 30

Page 31: UNITED KINGDOM (UNITED KINGDOM) - tScheme

7 - TSP: BT Global Financial Services

TSP Name

Name [ en ] BT Global Financial Services

Name [ en ] British Telecommunications plc

TSP Trade Name

Name [ en ] NTRUK-1800000

Name [ en ] BT

PostalAddress

Street Address [ en ] 81 Newgate Street

Locality [ en ] London

State Or Province [ en ] London

Postal Code [ en ] EC1A 7AJ

Country Name [ en ] UK

ElectronicAddress

URI https://www.radianzmessaging.bt.com

URI mailto:[email protected]

TSP Information URI

URI [ en ] https://www.radianzmessaging.bt.com

7.1 - Service (recognisedatnationallevel): BT Radianz Messaging

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/PKC

Service type description [en] A certificate generation service creating and signing non-qualified public key certificates based on the identity and otherattributes verified by the relevant registration services.

Service Name

Name [ en ] BT Radianz Messaging

Service digital identities

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 31

Page 32: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Certificate fields details

Version: 3

Serial Number: 459082102149776549085189

X509 Certificate -----BEGIN CERTIFICATE-----

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

-----END CERTIFICATE-----

Signature algorithm: SHA1withRSA

Issuer CN: BT Infrastructure for Secure Communication ROOT CA

Issuer O: British Telecommunications plc

Issuer C: GB

Subject CN: BT Managed Secure Messaging Issuing CA FL-CA-3006

Subject OU: BT Managed Secure Messaging

Subject O: British Telecommunications plc

Valid from: Tue Sep 22 13:51:04 CEST 2009

Valid to: Sun Sep 22 14:01:04 CEST 2019

Public Key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

Basic Constraints IsCA: true

Subject Key Identifier A9:97:66:5B:06:C4:06:01:E5:08:AB:96:FC:A1:04:0C:CA:44:CA:53

Authority Key Identifier 32:A7:38:2C:DA:27:93:EA:72:6A:5F:B7:AC:4A:DD:35:CE:79:DB:41

CRL Distribution Points file://\\BTISCROOTCA\CertEnroll\BT Infrastructure for Secure Communication ROOT CA.crl

Authority Info Access http://btiscrootca/CertEnroll/BTISCROOTCA_BT%20Infrastructure%20for%20Secure%20Communication%20ROOT%20CA.crt

file://\\BTISCROOTCA\CertEnroll\BTISCROOTCA_BT Infrastructure for Secure CommunicationROOT CA.crt

Key Usage: digitalSignature - keyCertSign - cRLSign

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 32

Page 33: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Thumbprint algorithm: SHA-256

Thumbprint: C3:C6:25:F0:20:21:52:27:96:75:DE:5D:58:73:7B:DA:18:D1:7B:28:B0:91:1B:92:B9:12:6B:BA:88:F0:EF:CD

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Service status description [en] undefined.

Status Starting Time 2016-06-30T22:00:00Z

Scheme Service Definition URI

URI [ en ] https://www.tscheme.org/radianz-messaging-service-bt-global-banking-and-financial-markets

TSP Service Definition URI

URI [ en ] https://www.radianzmessaging.bt.com/BTMSM/

7.1.1 - History instance n.1 - Status: accredited

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/PKC

Service Name

Name [ en ] BT Radianz Messaging

Service digital identities

X509SubjectName

Subject CN: BT Managed Secure Messaging Issuing CA FL-CA-3006

Subject OU: BT Managed Secure Messaging

Subject O: British Telecommunications plc

X509SKI

X509 SK I qZdmWwbEBgHlCKuW/KEEDMpEylM=

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited

Status Starting Time 2011-03-08T00:00:00Z

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 33

Page 34: UNITED KINGDOM (UNITED KINGDOM) - tScheme

8 - TSP: Metropolitan Police Service

TSP Name

Name [ en ] Metropolitan Police Service

TSP Trade Name

Name [ en ] NTRUK-Metropolitan Police Service

Name [ en ] Police

PostalAddress

Street Address [ en ] Room 892, Victoria Block, New Scotland Yard

Locality [ en ] 10 Broadway

State Or Province [ en ] London

Postal Code [ en ] SW1H 0BG

Country Name [ en ] UK

ElectronicAddress

URI http://content.met.police.uk/Site/digitalpolicing

URI mailto:[email protected]

TSP Information URI

URI [ en ] http://content.met.police.uk/Home

8.1 - Service (recognisedatnationallevel): Digital Policing - Secure Services

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/PKC

Service type description [en] A certificate generation service creating and signing non-qualified public key certificates based on the identity and otherattributes verified by the relevant registration services.

Service Name

Name [ en ] Digital Policing - Secure Services

Name [ en ] Metropolitan Police Class 3 Primary CA

Service digital identities

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 34

Page 35: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Certificate fields details

Version: 3

Serial Number: 458496757484258183872514

X509 Certificate -----BEGIN CERTIFICATE-----

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

-----END CERTIFICATE-----

Signature algorithm: SHA256withRSA

Issuer CN: Met Police Root CA

Issuer OU: Met

Issuer O: Police

Issuer C: GB

Subject CN: Met Police Class 3 Primary CA

Subject OU: Met

Subject O: Police

Subject C: GB

Valid from: Thu Nov 06 15:02:18 CET 2014

Valid to: Wed Nov 06 15:02:18 CET 2024

Public Key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

Subject Key Identifier 05:C6:2F:54:AC:F0:83:D7:90:A1:DB:03:B9:EB:1F:D2:33:9C:D8:C1

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 35

Page 36: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Certificate Policies Policy OID: 1.2.826.0.1343.509.11.31

CPS pointer: http://www.met.police.uk/epki/rpac3p.pdf

CPS text: [Met Police Class 3 Primary CA RPA]

Policy OID: 1.3.6.1.4.1.8311.0.509.1

Policy OID: 1.3.6.1.4.1.8311.0.509.3

Policy OID: 1.3.6.1.4.1.8311.0.509.4

Basic Constraints IsCA: true - Path length: 0

Authority Key Identifier 8F:ED:40:72:9E:10:D5:6B:12:A9:AD:8F:0B:A7:E2:E3:25:AD:5D:08

CRL Distribution Points http://epki.gslb.mps/epki/Met%20Police%20Root%20CA.crl

http://portal.iamcs.x.pnn.police.uk/pki/mps/Met%20Police%20Root%20CA.crl

http://epki.met.pnn.police.uk/epki/Met%20Police%20Root%20CA.crl

http://www.met.police.uk/epki/Met%20Police%20Root%20CA.crl

Authority Info Access http://epki.gslb.mps/epki/Met%20Police%20Root%20CA.crt

http://portal.iamcs.x.pnn.police.uk/pki/mps/Met%20Police%20Root%20CA.crt

http://epki.met.pnn.police.uk/epki/Met%20Police%20Root%20CA.crt

http://www.met.police.uk/epki/Met%20Police%20Root%20CA.crt

Key Usage: digitalSignature - keyCertSign - cRLSign

Thumbprint algorithm: SHA-256

Thumbprint: 38:D6:4D:11:4E:57:63:EC:B3:39:E0:AF:21:E8:22:08:9B:B1:23:3D:19:17:62:EF:9A:D0:00:0E:E7:DA:66:48

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Service status description [en] undefined.

Status Starting Time 2016-06-30T22:00:00Z

Scheme Service Definition URI

URI [ en ] https://www.tscheme.org/enterprise-pki-metropolitan-police-service

TSP Service Definition URI

URI [ en ] http://www.met.pnn.police.uk

8.1.1 - History instance n.1 - Status: accredited

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/PKC

Service Name

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 36

Page 37: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Name [ en ] Digital Policing - Secure Services

Name [ en ] Metropolitan Police Class 3 Primary CA

Service digital identities

X509SubjectName

Subject CN: Met Police Class 3 Primary CA

Subject OU: Met

Subject O: Police

Subject C: GB

X509SKI

X509 SK I BcYvVKzwg9eQodsDuesf0jOc2ME=

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited

Status Starting Time 2012-12-14T12:00:00Z

8.2 - Service (recognisedatnationallevel): Metropolitan Police Class 3 Secondary CA

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/PKC

Service type description [en] A certificate generation service creating and signing non-qualified public key certificates based on the identity and otherattributes verified by the relevant registration services.

Service Name

Name [ en ] Metropolitan Police Class 3 Secondary CA

Name [ en ] Digital Policing - Secure Services

Service digital identities

Certificate fields details

Version: 3

Serial Number: 458527266556983851876355

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 37

Page 38: UNITED KINGDOM (UNITED KINGDOM) - tScheme

X509 Certificate -----BEGIN CERTIFICATE-----

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

-----END CERTIFICATE-----

Signature algorithm: SHA256withRSA

Issuer CN: Met Police Root CA

Issuer OU: Met

Issuer O: Police

Issuer C: GB

Subject CN: Met Police Class 3 Secondary CA

Subject OU: Met

Subject O: Police

Subject C: GB

Valid from: Thu Nov 06 15:04:07 CET 2014

Valid to: Wed Nov 06 15:04:07 CET 2024

Public Key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

Subject Key Identifier 30:CE:F0:3E:3A:80:A3:EC:1F:83:6C:FC:4E:2A:00:E5:1D:95:ED:A5

Certificate Policies Policy OID: 1.2.826.0.1343.509.11.32

CPS pointer: http://www.met.police.uk/epki/rpac3s.pdf

CPS text: [Met Police Class 3 Secondary CA RPA]

Policy OID: 1.3.6.1.4.1.8311.0.509.2

Basic Constraints IsCA: true - Path length: 0

Authority Key Identifier 8F:ED:40:72:9E:10:D5:6B:12:A9:AD:8F:0B:A7:E2:E3:25:AD:5D:08

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 38

Page 39: UNITED KINGDOM (UNITED KINGDOM) - tScheme

CRL Distribution Points http://epki.gslb.mps/epki/Met%20Police%20Root%20CA.crl

http://portal.iamcs.x.pnn.police.uk/pki/mps/Met%20Police%20Root%20CA.crl

http://epki.met.pnn.police.uk/epki/Met%20Police%20Root%20CA.crl

http://www.met.police.uk/epki/Met%20Police%20Root%20CA.crl

Authority Info Access http://epki.gslb.mps/epki/Met%20Police%20Root%20CA.crt

http://portal.iamcs.x.pnn.police.uk/pki/mps/Met%20Police%20Root%20CA.crt

http://epki.met.pnn.police.uk/epki/Met%20Police%20Root%20CA.crt

http://www.met.police.uk/epki/Met%20Police%20Root%20CA.crt

Key Usage: digitalSignature - keyCertSign - cRLSign

Thumbprint algorithm: SHA-256

Thumbprint: 54:7E:27:37:B2:11:E0:53:B0:EF:23:60:3B:BA:ED:71:98:BE:99:AD:85:81:5D:3B:6B:57:2D:45:89:B3:9F:F6

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Service status description [en] undefined.

Status Starting Time 2016-06-30T22:00:00Z

Scheme Service Definition URI

URI [ en ] https://www.tscheme.org/enterprise-pki-metropolitan-police-service

TSP Service Definition URI

URI [ en ] http://www.met.pnn.police.uk

8.2.1 - History instance n.1 - Status: accredited

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/PKC

Service Name

Name [ en ] Metropolitan Police Class 3 Secondary CA

Name [ en ] Digital Policing - Secure Services

Service digital identities

X509SubjectName

Subject CN: Met Police Class 3 Secondary CA

Subject OU: Met

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 39

Page 40: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Subject O: Police

Subject C: GB

X509SKI

X509 SK I MM7wPjqAo+wfg2z8TioA5R2V7aU=

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited

Status Starting Time 2012-12-14T00:00:00Z

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 40

Page 41: UNITED KINGDOM (UNITED KINGDOM) - tScheme

9 - TSP: Experian Ltd

TSP Name

Name [ en ] Experian Ltd

TSP Trade Name

Name [ en ] NTRUK-00653331

Name [ en ] Experian Ltd

PostalAddress

Street Address [ en ] The Sir John Peace Building, Experian Way, NG2 Business Park

Locality [ en ] Nottingham

State Or Province [ en ] Nottinghamshire

Postal Code [ en ] NG80 1ZZ

Country Name [ en ] UK

ElectronicAddress

URI mailto:[email protected]

URI https://www.experianidentityservice.co.uk/Help/ContactUs

TSP Information URI

URI [ en ] https://www.experianplc.com/

9.1 - Service (recognisedatnationallevel): IDaaS (Identity as a Service)

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/IdV/nothavingPKIid

Service type description [en] undefined.

Service Name

Name [ en ] IDaaS (Identity as a Service)

Service digital identities

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Service status description [en] undefined.

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 41

Page 42: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Status Starting Time 2016-06-30T22:00:00Z

Scheme Service Definition URI

URI [ en ] https://www.tscheme.org/idaas-service-experian-limited

TSP Service Definition URI

URI [ en ] https://www.experianidentityservice.co.uk/

9.1.1 - History instance n.1 - Status: accredited

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/IdV/nothavingPKIid

Service Name

Name [ en ] IDaaS (Identity as a Service)

Service digital identities

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited

Status Starting Time 2014-10-20T23:00:00Z

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 42

Page 43: UNITED KINGDOM (UNITED KINGDOM) - tScheme

10 - TSP: Verizon UK Ltd

TSP Name

Name [ en ] Verizon UK Ltd

TSP Trade Name

Name [ en ] NTRUK-02776038

Name [ en ] Verizon UK Ltd

PostalAddress

Street Address [ en ] Reading International Business Park, Basingstoke Road

Locality [ en ] Reading

State Or Province [ en ] Berkshire

Postal Code [ en ] RG2 6DA

Country Name [ en ] UK

ElectronicAddress

URI mailto:[email protected]

URI http://www.verizonenterprise.com/Support/

TSP Information URI

URI [ en ] http://www.verizonenterprise.com/products/security/identity-access/

10.1 - Service (recognisedatnationallevel): Universal Identity Service

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/IdV/nothavingPKIid

Service type description [en] undefined.

Service Name

Name [ en ] Universal Identity Service

Service digital identities

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Service status description [en] undefined.

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 43

Page 44: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Status Starting Time 2016-06-30T22:00:00Z

Scheme Service Definition URI

URI [ en ] http://www.tscheme.eu/directory/Prev_AppServ/VZN_UIS.html

Service Supply Points

Service Supply Point http://www.verizonenterprise.com/products/security/identity-access/user-identity.xml

TSP Service Definition URI

URI [ en ] http://www.verizonenterprise.com/products/security/identity-access/user-identity.xml

10.1.1 - History instance n.1 - Status: accredited

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/IdV/nothavingPKIid

Service Name

Name [ en ] Universal Identity Service

Service Digital Identity

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited

Status Starting Time 2015-02-11T00:00:00Z

10.2 - Service (recognisedatnationallevel): Identity Proofing Service and Identity Broker Service (IPS/IBS)

from Verizon (UK) Limited

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/IdV/nothavingPKIid

Service type description [en] undefined.

Service Name

Name [ en ] Identity Proofing Service and Identity Broker Service (IPS/IBS) from Verizon (UK) Limited

Service digital identities

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Service status description [en] undefined.

Status Starting Time 2016-10-09T23:00:00Z

Scheme Service Definition URI

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 44

Page 45: UNITED KINGDOM (UNITED KINGDOM) - tScheme

URI [ en ] https://www.tscheme.org/identity-proofing-service-and-identity-broker-service-ipsibs-verizon-uk-limited

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 45

Page 46: UNITED KINGDOM (UNITED KINGDOM) - tScheme

11 - TSP: GB Group plc

TSP Name

Name [ en ] GB Group plc

TSP Trade Name

Name [ en ] NTRUK-9999999

Name [ en ] GB Group Ltd

PostalAddress

Street Address [ en ] The Foundation, Herons Way

Locality [ en ] Chester Business Park

State Or Province [ en ] Cheshire

Postal Code [ en ] CH4 9GB

Country Name [ en ] UK

ElectronicAddress

URI https://www.citizensafe.co.uk/

URI mailto:[email protected]

TSP Information URI

URI [ en ] https://www.citizensafe.co.uk/

11.1 - Service (recognisedatnationallevel): CitizenSafe IdP Service

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/IdV/nothavingPKIid

Service type description [en] undefined.

Service Name

Name [ en ] CitizenSafe IdP Service

Service digital identities

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Service status description [en] undefined.

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 46

Page 47: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Status Starting Time 2016-11-03T23:00:00Z

Scheme Service Definition URI

URI [ en ] https://www.tscheme.org/citizensafe-idp-service-gb-group-plc

Service Supply Points

Service Supply Point https://www.citizensafe.co.uk/

TSP Service Definition URI

URI [ en ] https://www.citizensafe.co.uk/

11.1.1 - History instance n.1 - Status: recognisedatnationallevel

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/IdV/nothavingPKIid

Service Name

Name [ en ] ID3global Service

Service digital identities

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Status Starting Time 2016-06-30T22:00:00Z

11.1.2 - History instance n.2 - Status: accredited

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/IdV/nothavingPKIid

Service Name

Name [ en ] ID3global Service

Service digital identities

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited

Status Starting Time 2015-02-12T00:00:00Z

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 47

Page 48: UNITED KINGDOM (UNITED KINGDOM) - tScheme

12 - TSP: Digidentity BV

TSP Name

Name [ en ] Digidentity BV

TSP Trade Name

Name [ en ] NTRUK-27322631

Name [ en ] Digidentity BV

PostalAddress

Street Address [ en ] Waldorpstraat 17p

Locality [ en ] Den Haag

State Or Province [ en ] Den Haag

Postal Code [ en ] 2521 CA

Country Name [ en ] NL

ElectronicAddress

URI https://www.digidentity.eu/en/

URI mailto:[email protected]

TSP Information URI

URI [ en ] http://www.digidentity.eu/en

12.1 - Service (recognisedatnationallevel): Digidentity BV Identity Service for Verify

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/IdV/nothavingPKIid

Service type description [en] undefined.

Service Name

Name [ en ] Digidentity BV Identity Service for Verify

Service digital identities

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Service status description [en] undefined.

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 48

Page 49: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Status Starting Time 2016-06-30T22:00:00Z

Scheme Service Definition URI

URI [ en ] https://www.tscheme.org/identity-provider-service-verify-digidentity-bv

Service Supply Points

Service Supply Point https://www.digidentity.eu/en/

12.1.1 - History instance n.1 - Status: accredited

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/IdV/nothavingPKIid

Service Name

Name [ en ] Digidentity BV Identity Service for Verify

Service digital identities

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited

Status Starting Time 2015-04-29T23:00:00Z

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 49

Page 50: UNITED KINGDOM (UNITED KINGDOM) - tScheme

13 - TSP: Barclays Bank Plc

TSP Name

Name [ en ] Barclays Bank Plc

TSP Trade Name

Name [ en ] NTRUK-Barclays Bank

Name [ en ] Barclays Bank

PostalAddress

Street Address [ en ] 1 Churchill Place

Locality [ en ] London

State Or Province [ en ] London

Postal Code [ en ] E14 5HP

Country Name [ en ] UK

ElectronicAddress

URI mailto:[email protected]

URI http://www.barclays.co.uk/identity

TSP Information URI

URI [ en ] http://www.barclays.co.uk/identity

13.1 - Service (recognisedatnationallevel): Barclays Identity Service

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/IdV/nothavingPKIid

Service type description [en] undefined.

Service Name

Name [ en ] Barclays Identity Service

Service digital identities

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Service status description [en] undefined.

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 50

Page 51: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Status Starting Time 2016-06-30T22:00:00Z

Scheme Service Definition URI

URI [ en ] https://www.tscheme.org/barclays-identity-service-barclays-bank-plc

TSP Service Definition URI

URI [ en ] http://www.barclays.co.uk/identity

13.1.1 - History instance n.1 - Status: recognisedatnationallevel

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/IdV/nothavingPKIid

Service Name

Name [ en ] Barclays Identity Service

Service digital identities

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Status Starting Time 2016-06-30T22:00:00Z

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 51

Page 52: UNITED KINGDOM (UNITED KINGDOM) - tScheme

14 - TSP: Exostar UK Limited

TSP Name

Name [ en ] Exostar UK Limited

Name [ en ] Exostar

TSP Trade Name

Name [ en ] VATUK-800969916

Name [ en ] NTRUK-9999998

PostalAddress

Street Address [ en ] The Broadgate Tower Third Floor

Locality [ en ] 20 Primrose Street

State Or Province [ en ] London

Postal Code [ en ] EC2A 2RS

Country Name [ en ] UK

ElectronicAddress

URI http://www.myexostar.com/Digital-Certificate-Service/

URI mailto:[email protected]

TSP Information URI

URI [ en ] http://www.myexostar.com/Federated-Identity-Service/Policy_and_Compliance/

14.1 - Service (withdrawn): Digital Certificate Service

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC

Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verifiedby the relevant registration services.

Service Name

Name [ en ] Digital Certificate Service

Name [ en ] DCS

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 52

Page 53: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Service digital identities

Certificate fields details

Version: 3

Serial Number: 1025834279162425889105434662153385551908044805

X509 Certificate -----BEGIN CERTIFICATE-----

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

-----END CERTIFICATE-----

Signature algorithm: SHA256withRSA

Issuer CN: Exostar Federated Identity Service Root CA 2

Issuer OU: Certification Authorities

Issuer O: Exostar LLC

Issuer C: US

Subject CN: Exostar Digital Certificate Service Signing CA 1

Subject O: Exostar UK Limited

Subject C: GB

Valid from: Thu May 26 17:21:41 CEST 2016

Valid to: Tue May 26 17:21:41 CEST 2026

Public Key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

Subject Key Identifier 45:0C:C3:6B:59:A7:F8:97:0F:DB:76:F2:81:1A:CC:2E:C6:73:D2:73

Basic Constraints IsCA: true - Path length: 0

Authority Key Identifier 54:0B:11:B0:1D:F9:57:CF:B0:7A:2D:52:52:F3:B3:A7:8C:52:F4:AC

CRL Distribution Points http://www.fis.evincible.com/fis/public/ERCA2.crl

Authority Info Access http://www.fis.evincible.com/fis/public/issuedtoERCA2.p7c

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 53

Page 54: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Certificate Policies Policy OID: 1.3.6.1.4.1.13948.1.1.1.29

Policy OID: 1.3.6.1.4.1.13948.1.1.1.23

Policy OID: 1.3.6.1.4.1.13948.1.1.1.24

Policy OID: 0.4.0.1456.1.2

Policy OID: 0.4.0.1456.1.1

Key Usage: digitalSignature - nonRepudiation - keyCertSign - cRLSign

Thumbprint algorithm: SHA-256

Thumbprint: A3:27:56:06:1D:85:97:30:24:9C:91:4D:24:F0:08:D1:82:50:62:46:25:3A:07:AF:99:49:B6:6E:9D:6A:4B:B7

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/withdrawn

Service status description [en] undefined.

Status Starting Time 2018-05-03T11:00:00Z

Scheme Service Definition URI

URI [ en ] https://www.tscheme.org/digital-certificate-service-exostar-uk-ltd

Service Supply Points

Service Supply Point http://www.myexostar.com/Digital-Certificate-Service/

TSP Service Definition URI

URI [ en ] http://www.myexostar.com/Digital-Certificate-Service/

14.1.1 - Extension (critical): Qualifiers [QCQSCDStatusAsInCert]

Qualifier type description [en] undefined.

Qualifier http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCQSCDStatusAsInCert

Criteria list assert=none

Key Usage [ digitalSignature ] true

14.1.2 - Extension (critical): additionalServiceInformation

AdditionalServiceInformation

URI [ en ] http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/ForeSignatures

14.1.3 - History instance n.1 - Status: granted

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 54

Page 55: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC

Service Name

Name [ en ] Digital Certificate Service

Name [ en ] DCS

Service digital identities

X509SubjectName

Subject CN: Exostar Digital Certificate Service Signing CA 1

Subject O: Exostar UK Limited

Subject C: GB

X509SKI

X509 SK I RQzDa1mn+JcP23bygRrMLsZz0nM=

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/granted

Status Starting Time 2016-06-30T22:00:00Z

14.1.3.1 - Extension (critical): Qualifiers [QCQSCDStatusAsInCert]

Qualifier type description [en] undefined.

Qualifier http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCQSCDStatusAsInCert

Criteria list assert=none

Key Usage [ digitalSignature ] true

14.1.3.2 - Extension (critical): additionalServiceInformation

AdditionalServiceInformation

URI [ en ] http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/ForeSignatures

14.1.4 - History instance n.2 - Status: accredited

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC

Service Name

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 55

Page 56: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Name [ en ] Digital Certificate Service

Name [ en ] DCS

Service digital identities

X509SubjectName

Subject CN: Exostar Digital Certificate Service Signing CA 1

Subject O: Exostar UK Limited

Subject C: GB

X509SKI

X509 SK I RQzDa1mn+JcP23bygRrMLsZz0nM=

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited

Status Starting Time 2016-06-29T23:00:00Z

14.1.4.3 - Extension (critical): Qualifiers [QCSSCDStatusAsInCert]

Qualifier type description [en] it is ensured by the trust service provider and controlled (supervision model) or audited (accreditation model) by thereferenced Member State (respectively its Supervisory Body or Accreditation Body) that all Qualified Certificates issuedunder the service (RootCA/QC or CA/QC) identified in "Service digital identity" and further identified by the filtersinformation used to further identify under the"Sdi" identified trust service that precise set of Qualified Certificates forwhich this additional information is required with regards to the presence or absence of Secure Signature Creation Device(SSCD) support DO contain the machineprocessable information indicating whether or not the Qualified Certificate issupported by an SSCD.

Qualifier http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCSSCDStatusAsInCert

Criteria list assert=none

Key Usage [ digitalSignature ] true

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 56

Page 57: UNITED KINGDOM (UNITED KINGDOM) - tScheme

15 - TSP: Morpho UK Limited

TSP Name

Name [ en ] Morpho UK Limited

TSP Trade Name

Name [ en ] NTRUK-Safran Secure Identity from Morpho Limited

PostalAddress

Street Address [ en ] 255 Wharfedale Road,

Locality [ en ] Wokingham,

Postal Code [ en ] RG41 5TP.

Country Name [ en ] UK

ElectronicAddress

URI https://secureidentity.co.uk/

URI mailto:[email protected]

TSP Information URI

URI [ en ] https://help.secureidentity.co.uk/hc/en-gb

15.1 - Service (recognisedatnationallevel): SecureIdentity from Morpho UK Limited

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/IdV/nothavingPKIid

Service type description [en] undefined.

Service Name

Name [ en ] SecureIdentity from Morpho UK Limited

Service digital identities

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Service status description [en] undefined.

Status Starting Time 2016-10-20T22:00:00Z

Scheme Service Definition URI

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 57

Page 58: UNITED KINGDOM (UNITED KINGDOM) - tScheme

URI [ en ] https://www.tscheme.org/secureidentity-morpho-uk-limited

TSP Service Definition URI

URI [ en ] https://secureidentity.co.uk/about-secure-identity/

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 58

Page 59: UNITED KINGDOM (UNITED KINGDOM) - tScheme

16 - TSP: Royal Mail Group Limited

TSP Name

Name [ en ] Royal Mail Group Limited

TSP Trade Name

Name [ en ] NTRUK-Royal Mail Identity Verificaton Service

PostalAddress

Street Address [ en ] 100 Victoria Embankment,

Locality [ en ] London,

Postal Code [ en ] EC4Y 0HQ.

Country Name [ en ] UK

ElectronicAddress

URI https://www.royalmail.com/personal/identity-verification

URI mailto:[email protected]

URI mailto:[email protected]

TSP Information URI

URI [ en ] https://www.royalmail.com/terms-and-conditions

16.1 - Service (recognisedatnationallevel): Royal Mail Identity Verification service

Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/IdV/nothavingPKIid

Service type description [en] undefined.

Service Name

Name [ en ] Royal Mail Identity Verification service

Service digital identities

Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/recognisedatnationallevel

Service status description [en] undefined.

Status Starting Time 2016-11-03T23:00:00Z

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 59

Page 60: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Scheme Service Definition URI

URI [ en ] https://www.tscheme.org/royal-mail-identity-verification-service-royal-mail-group-limited

TSP Service Definition URI

URI [ en ] https://www.royalmail.com/personal/identity-verification

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 60

Page 61: UNITED KINGDOM (UNITED KINGDOM) - tScheme

17 - Signature node - Id: id-ea8b251b4b3f450a14c1310998a9c96b

Signing Time 2018-11-22T12:07:57Z

TSL Scheme Operator certificate fields details

Version: 3

Serial Number: 87686497988

X509 Certificate -----BEGIN CERTIFICATE-----

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

-----END CERTIFICATE-----

Signature algorithm: SHA256withRSA

Issuer CN: TSL Signing

Issuer OU: PKI

Issuer O: tScheme Limited

Issuer C: UK

Subject CN: TSL Signing

Subject OU: PKI

Subject O: tScheme Limited

Subject C: UK

Valid from: Fri Jun 30 02:00:00 CEST 2017

Valid to: Tue Jun 30 02:00:00 CEST 2020

Public Key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

Subject Key Identifier B7:36:17:DF:3A:C1:BE:A1:5A:33:2B:C5:A5:FA:C1:35:11:1C:57:02

Basic Constraints IsCA: false

Certificate Policies Policy OID: 2.5.29.32.0

Extended Key Usage id-tsl-kp-tslSigning

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 61

Page 62: UNITED KINGDOM (UNITED KINGDOM) - tScheme

Key Usage: digitalSignature - nonRepudiation

Thumbprint algorithm: SHA-256

Thumbprint: 29:C1:2B:36:39:A5:10:A2:A4:2B:F9:8C:E8:8E:03:77:C1:50:E5:4D:7D:29:A7:EA:E4:2E:0C:D6:E1:28:C1:BD

ETSI 2016 - TSL HR - PDF/A-1b generator

UNITED KINGDOM (UNITED KINGDOM) - Trusted List ID: UKTSL22November2018 Page 62