CESKÁ REPUBLIKA (CZECH REPUBLIC) : Trusted List

Transcription

1 ETSI TSL HR - PDF/A-1b generator Ing. Rado mír Šimek Digitálně podepsal Ing. Radomír Šimek DN: c=, cn=ing. Radomír Šimek, o=ministry of the Interior of the Czech Republic, serialnumber=ica Datum: :20:6 +02'00' CESKÁ REPUBLIKA (ECH REPUBLIC) : Trusted List Tsl Id: TSL_ Valid until nextupdate value: T09:00:00Z TSL signed on: T09:04:16.968Z PDF generated on: Fri Oct 02 11:12:48 CEST 2015 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 1

2 TSL Scheme Information TSL Id TSLTag TSL_ TSL Version Identifier 4 TSL Sequence Number 6 TSL Type Scheme Operator Name Ministry of the Interior of the Czech Republic Ministerstvo vnitra České republiky PostalAddress Street Address [ en ] Nad Stolou Locality [ en ] Prague 7 Postal Code [ en ] 1704 Country PostalAddress Street Address [ cs ] Nad Štolou Locality [ cs ] Praha 7 Postal Code [ cs ] 1704 Country ElectronicAddress URI mailto:[email protected] URI Scheme Name :Supervision/Accreditation Status List of certification services from Certification Service Providers, which are supervised/accredited by the referenced Scheme Operator's Member State for compliance with the relevant provisions laid down in Directive 1999/9/EC of the European Parliament and of the Council of 1 December 1999 on a Community framework for electronic signatures. CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 2

3 :Seznam stavu dohledu/akreditace certifikačních služeb poskytovatelů certifikačních služeb, nad nimiž je vykonáván dohled nebo kteří jsou akreditováni Ministerstvem vnitra v souladu s příslušnými ustanoveními směrnice Evropského parlamentu a Rady 1999/9/ES ze dne o zásadách Společenství pro elektronické podpisy. Scheme Information URI URI [ en ] Status Determination Approach Scheme Type Community Rules URI [ en ] URI [ en ] Scheme Territory Policy Or Legal Notice TSL Legal Notice [ en ] The applicable legal framework for the present TSL implementation of the Trusted List of supervised/accredited Certification Service Providers for Czech Republic is Directive 1999/9/EC of the European Parliament and of the Council of 1 December 1999 on a Community framework for electronic signatures and its implementation in Czech Republic laws. TSL Legal Notice [ cs ] Platným právním rámcem pro tuto implementaci seznamu důvěryhodných poskytovatelů certifikačních služeb, nad nimiž je vykonáván dohled nebo kteří jsou akreditováni, v podobě TSL pro Českou republiku je směrnice Evropského parlamentu a Rady 1999/9/ES ze dne 1. prosince 1999 o zásadách Společenství pro elektronické podpisy a její transpozice do právního řádu České republiky. Historical Information Period 6555 Pointer to other TSL - EUROPEAN UNION 1.EU TSL - MimeType: application/pdf TSL Location EU TSL digital identities TSL Scheme Operator certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page

4 MIIFKzCCBBOgAwIBAgISESFCgSJf+NfOVIYHRWWewAm0MA0GCSqGSIbDQEBCwUAMGYxCzAJBgNV BAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNHbG9iYWxTaWduIE9y Z2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzIwHhcNMTUwMzAzMDg1MTAyWhcN MTgwNDIwMTAwNTA1WjBnMQswCQYDVQQGEwJCRTEQMA4GA1UECBMHQmVsZ2l1bTERMA8GA1UEBxMI QnJ1cNlbHMxHDAaBgNVBAoTE0V1cm9wZWFuIENvbW1pcNpb24xFTATBgNVBAMTDGVjLmV1cm9w YS5ldTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMFBF1FjO2VA4nIvTMtXToyfWMN FYRvJc2SIJFpcZNZcUK9wwNLj/lOB5+eABCTDShJf8fQgmyEcAU7gXhFw9DFgfnXsmmA1a79zz bs5kwzkmawee4lfsycbjocuuavd79oar4vyv7gzmvab8nxuqwvecwzqwt6sl+rx0ogh1bbeko9w Q5lbEgRw1MLlyFH2kUieMhjCwO2nQJ9UMTaLu7px4LpZ7tlaVetY7UpMPiGAD4kct1YIoJWJllY bbz7jmalmradlvvu5y6ice4h4j0kdj/lzliveciorqrx8ngiis1lfnsckvz2sbzjvjvxbqxyaey tzqvwxexdpmcaweaaaocadawgghmma4ga1uddweb/wqeawifodbjbgnvhsaeqjbamd4gbmebdaec AjA0MDIGCCsGAQUFBwIBFiZodHRwczovLddy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0bJ5LzAX BgNVHREEEDAOggxlYy5ldXJvcGEuZXUwCQYDVR0TBAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwSQYDVR0fBEIwQDA+oDygOoY4aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9ncy9n c29yz2fuaxphdglvbnzhbhnoytjnmi5jcmwwgaagccsgaqufbwebbigtmigqme0gccsgaqufbzac hkfodhrwoi8vc2vjdxjllmdsb2jhbhnpz24uy29tl2nhy2vydc9nc29yz2fuaxphdglvbnzhbhno YTJnMnIxLmNydDA/BggrBgEFBQcwAYYzaHR0cDovL29jcAyLmdsb2JhbHNpZ24uY29tL2dzbJn YW5pemF0aW9udmFsc2hhMmcyMB0GA1UdDgQWBBQ9lw0pOEotT5cKTF8vxuW6ZCUhzAfBgNVHSME GDAWgBSWmHxvRwWKVMcwMx9O4MAQOYafDANBgkqhkiG9w0BAQsFAAOCAQEArSonov8KbE8+5Vwe wgbhhilhanliirmlvj1siarxvxl6abmmo8cjw2+vtzaqdndkzuy6cnats0y0qkbecs7fvtvp8qqa iv71+jij6idt9r9ij1sundeqwz6mng98ecmvsduzlyieezxh049tahranscvrtu7kpt06cgbcjn ondg7yvxx2bs9civbexrqkmppvhwup2hw/iphhmifprmxpqfa5fkrqnwjw1brblgloqc1mkj7j uvx108khlwa5cgiohctnoh9dfyuqpwqecbrobwdghl4o0ra+bu/z4j85ypob/+f7roqxrfcpv4z Pdg65pNoPppjFDE4TD2bhg== SHA256withRSA GlobalSign Organization Validation CA - SHA256 - G2 GlobalSign nv-sa BE ec.europa.eu European Commission Subject L: Brussels Subject ST: Belgium BE Tue Mar 0 09:51:02 CET 2015 Fri Apr 20 12:05:05 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:C1:41:17:51:6:B:65:40:E2:72:2F:4F:7:2D:5D:A:2:7D:6:0D:15:84:6F:25:CD:92:20:91:77:A5:C6:4D:65:C5:0A: F7:0C:0D:2F:78:FF:94:E0:79:F9:E0:01:09:0:D2:84:97:FC:7D:08:26:C8:47:00:5:B8:17:84:5C:D:0C:58:1F:9D:7B:26:98:0D:5A:EF:DC:F:6E:CE:4A:5B:9:26:0:01:04:E2:57:D2:61:C6:C9:A0:2B:94:6A:F0:FB:F6:86:91: E2:FD:F2:BF:B1:99:1:56:9B:F2:75:EE:A9:6B:DE:7:0C:D0:59:E:AC:97:EA:F1:D2:88:21:D5:B6:DE:28:EF:70:4:99:5B:12:04:70:D4:C2:E5:C8:51:F6:91:48:9E:2:18:C2:C0:ED:A7:40:9F:54:1:6:8B:BB:BA:71:E0:BA: 59:EE:D9:5A:55:EB:58:ED:4A:4C:E:21:80:0F:7E:24:72:DD:58:22:82:56:26:59:58:6D:BC:FB:8E:60:0B:99:10:1D:2E:FB:EE:E7:2E:88:71:EE:07:E2:D:24:0C:9F:E5:DF:2:E2:55:E0:A2:9:1A:AB:C7:C9:E0:8A:24:B5:2D: F:52:72:4B:F:DA:C6:F:8D:52:6F:5D:BA:B1:60:01:2:B5:94:2F:C:11:17:74:F:02:0:01:00:01 Policy OID: CPS pointer: Subject Alternative Name ec.europa.eu Basic Constraints IsCA: false Extended Key Usage id_kp_serverauth CRL Distribution Points Authority Info Access D:97:0D:29:8:4A:2D:4F:97:0A:4C:5F:2F:C6:ED:D6:E9:90:94:87 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 4

5 Authority Key Identifier 96:DE:61:F1:BD:1C:16:29:5:1C:C0:CC:7D:B:8:00:40:E6:1A:7C digitalsignature - keyencipherment E2:B6:C:00:9A:FA:80:BC:AB:2E:B5:FE:C5:A2:C4:AE:06:06:AC:A2:05:BA:4E:D6:2F:2F:B7:6C :C1:1E:08:DA X509SubjectName ec.europa.eu European Commission Subject L: Brussels Subject ST: Belgium BE Mime Type application/pdf TSL Type Scheme Territory EU Scheme Operator Name European Commission Scheme Type Community Rules URI [ en ] 2.EU TSL - MimeType: application/vnd.etsi.tsl+xml TSL Location EU TSL digital identities TSL Scheme Operator certificate fields details 114 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 5

6 MIIHPDCCBSSgAwIBAgIBcjANBgkqhkiG9w0BAQsFADAxMQswCQYDVQQGEwJFUzERMA8GA1UECgwI Rk5NVC1SQ00xDzANBgNVBAMMBklTQSBDQTAeFw0xMTExMTYxNTExMDdaFw0xNTExMTYxNTExMDda ME0xCzAJBgNVBAYTAkJFMRwwGgYDVQQKDBNFVVJPUEVBTiBDT01NSVNTSU9OMSAwHgYDVQQDDBco U0lHTikgQU5ORUxJIEFORFJFU1NPTjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMw8 81fbxBn5Eq64Hf6pqEqn0Intg49k5D+E2JBMcyeOMYE4WwuzVqs7fuKMX5mhiFw7llVx42S7GIDn Ka6ascF7irISsYTGOtD6dGt8OEOQkG5i24wxTwe6VW1W/PEO0WoRjkPDBqgljnqcLn+WJLrYl 9fpkxyT+Hpl0jnGkGi7UUKEDuoCglFy9Tb1TE+eVNiGWmfskRy6q9Pioujp2FqrwNm95VAkLFGo NF4iZQda79bgjvAYnA5p4QXgr/5sWZjgsaEa9PlRwEvO7C8ndnRE/PTUNwaSmOZsmPH/ksCCnfT DqqehHVnryK6QIUKhRsoT1m60qv4UKrvrsCAwEAAaOCA0EwggM9MF0GA1UdEQRWMFSBHUFOTkVM SS5BTkRSRVNTT05ARUMuRVVST1BBLkVVpDMwMTEYMBYGCSsGAQQBrGYBAgwJQU5EUkVTU09OMRUw EwYJKwYBBAGsZgEBDAZBTk5FTEkwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBkAwHQYDVR0OBBYE FEoUEf+0Oe59fVRs/rW2M0KhmlDsMB8GA1UdIwQYMBaAFEft+GPwma9e/n4OXFjL/uI1N6a9MIHg BgNVHSAEgdgwgdUwgcgGCisGAQQBrGYDBAEwgbkwKQYIKwYBBQUHAgEWHWh0dHA6Ly9dcuY2Vy dc5mbm10lmvzl2rwymvmiglbggrbgefbqccajb/dh1rdwfsawzpzwqgy2vydglmawnhdguuifvu ZGVyIHRoZSB1c2FnZSBjb25kaXRpb25zIGFzc2VydGVkIGluIHRoZSBGTk1ULVJDTSBDUFMgKDEw NiwgSm9yZ2UgSnVhbiBzdHJlZXQsMjgwMDksIE1hZHJpZCwgUBhaW4pLjAIBgYEAIswAQEwgYYG CCsGAQUFBwEBBHoweDBBBggrBgEFBQcwAYY1aHR0cDovL29jcBJU0FjYS5jZXJ0LmZubXQuZXMv b2nzceltqwnhl09jcbszxnwb25kzxiwmwyikwybbquhmakgj2h0dha6ly9dcuy2vydc5mbm10 LmVzL2NlcnRzL0lTQUNBLmNydDBGBggrBgEFBQcBAwQ6MDgwCAYGBACORgEBMAsGBgQAjkYBAwIB DzAVBgYEAI5GAQIwCxMDRVVSAgECAgECMAgGBgQAjkYBBDCBzAYDVR0fBIHEMIHBMIG+oIG7oIG4 hogibgrhcdovl2xkyxbju0fjys5jzxj0lmzubxquzxmvq049q1jmmixjbj1ju0elmjbdqsxvpuzo TVQtUkNNLEM9RVM/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDtiaW5hcnk/YmFzZT9vYmplYRj bgfzcz1jukxeaxn0cmlidxrpb25qb2ludiyrahr0cdovlddy5jzxj0lmzubxquzxmvyjsc19j U0FjYS9DUkwyLmNybDANBgkqhkiG9w0BAQsFAAOCAgEALIKumRPBo9NIYyzm4LSJklE9CmsirJC8 9MPcFiC9+vg4YrO9Mmakr8G5ZAVZf+Zr6HgLcIf9/BSgE4UDFD9mAROPDElqx2ppg1+foIvlqg5 7EiHH2kOS4IYJEJpWCs4IqcBkSKcS5vJ5XVpNJL4elpeMQjsGoqjmkKDr1IeZQVOxOiW/bNhM9Fw 6R1aMMLbnziwAgHWDpmIj2Se74HuSca0ctm9fAPp/2Y87bgZ1ETs9A6wc4GxYEuGTwh1HPbDB6t gjsnjh0hyqbitjb8im0xgvur9dqkt8ez4dvyxcaflycmflaemf8jljov4uu1yrrt9wesij5gcoe 4cy1cuvRMifqYhoiKPojJaLTV7ASy1X0yuBWyg0jGyvE6aTIAuXGCwdGYB1WnSzEUPJboqcyJ ydkxxxnbkfchw602pvb0ituqitgh+kfix2mqqf+v0rdewquwdadnhc+cqoc7sxkjxko657dyzt/ Ey5MR+gXRm6oK52iXIqjM8kbDqCqAOHVC7u+bUvh0y5B5PjGYuE2K9xK6ooavh5ytF/kY+y0Ju 804CRF00b4wKcibGxplOrU1g+ncONNmBHGbsLULXrum8+fsDO04Mf0t0O9Mt/ZwAZTa8Cwq/0pq OWdRqucV7pq/A7fEnRb5AdBaAzxqrXVaa92NkScAm80= SHA256withRSA ISA CA FNMT-RCM ES (SIGN) ANNELI ANDRESSON EUROPEAN COMMISSION BE Wed Nov 16 16:11:07 CET 2011 Mon Nov 16 16:11:07 CET 2015 Subject Alternative Name 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:CC:C:F:57:DB:C4:19:F9:12:AE:B8:1D:FE:A9:A8:4A:A7:D0:89:ED:8:8F:64:E4:F:84:D8:90:4C:7:27:8E:1:81: 8:5B:0B:B:56:AB:B:7E:E2:8C:5F:99:A1:88:5C:B:96:55:71:E:64:BB:18:80:E7:29:AE:9A:B1:C1:7B:8A:B2:12:B1:84:C6:A:D0:FA:74:6B:7C:8:4:90:90:6E:62:DB:8C:1:4F:7C:1E:EB:75:56:D5:6F:CF:10:ED:16:A1: 18:E4:C:0:6A:82:58:E7:A9:C2:E7:F9:62:4B:AF:76:25:F5:FA:64:C7:24:FE:1F:7A:65:D2:9:C6:90:68:BB:51:42:84:0E:EA:02:82:51:72:F5:6:F5:4C:4F:9E:54:D8:86:5A:67:EC:91:1C:BA:AB:D:E2:A2:E8:E9:D8:5A:AB:C 0:D9:BD:E5:50:24:2C:51:A8:4:5E:22:65:07:5A:EF:D6:E0:8E:F0:18:9C:0E:69:E1:05:E0:AF:FE:6C:59:98:E0:B1:AD:C4:6B:D:E5:47:01:2F:B:B0:BC:9D:D9:D1:1:F:D:50:DC:1A:4A:6:99:B2:6:C7:FE:4B:02:0A:77: D:0E:AA:9E:84:75:67:AF:2D:CA:E9:02:14:2A:14:6C:A1:D:66:EB:4A:AF:E1:42:AB:BE:BB:02:0:01:00:01 Basic Constraints IsCA: false 4A:14:11:FF:B4:9:EE:7D:7D:54:6C:FE:B5:B6::42:A1:9A:50:EC Authority Key Identifier 47:ED:F8:6:F0:99:AF:5E:FE:7E:0E:5C:58:CB:FE:E2:5:7:A6:BD Policy OID: CPS pointer: CPS text: [Qualified certificate. Under the usage conditions asserted in the FNMT-RCM CPS (106, Jorge Juan street,28009, Madrid, Spain).] Policy OID: Authority Info Access CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 6

7 QCStatements - crit. = false id_etsi_qcs_qccompliance id_etsi_qcs_retentionperiod: 15 id_etsi_qcs_limitevalue Value: 200 Currency: EUR id_etsi_qcs_qcsscd CRL Distribution Points ldap://ldapisaca.cert.fnmt.es/cn=crl2,cn=isa%20ca,o=fnmt- RCM,C=ES?certificateRevocationList;binary?base?objectclass=cRLDistributionPoint nonrepudiation 5D:9:E8:F1:16:69:50:E9:97:8:2:AD:26:6F:06:74:2C:C4:A9:48:48:69:DF:61:EF:CB:84:9D:B2:F C:60:4A EU TSL digital identities TSL Scheme Operator certificate fields details MIIFnDCCBISgAwIBAgIDAVZhMA0GCSqGSIbDQEBBQUAMEUxCzAJBgNVBAYTAkxVMRYwFAYDVQQK Ew1MdXhUcnVzdCBTLkEuMR4wHAYDVQQDExVMdXhUcnVzdCBRdWFsaWZpZWQgQ0EwHhcNMDkxMjIz MTAzNTU2WhcNMTIxMjIzMTAzNTU2WjCCAQYxCzAJBgNVBAYTAkJFMQswCQYDVQQHEwJCRTEcMBoG A1UEChMTRXVybBlYW4gQ29tbWlzc2lvbjELMAkGA1UECxMCTkExJDAiBgNVBAMTG0thcmVsIExv ZGVaWprIE0gRGUgVnJpZW5kdDETMBEGA1UEBBMKRGUgVnJpZW5kdDEZMBcGA1UEKhMQS2FyZWwg TG9kZXdpamsgTTEdMBsGA1UEBRMUMTAxMDAzMzIxMTAwMDQNDkzNzgxLDAqBgkqhkiG9w0BCQEW HUthcmVsLkRlLVZyaWVuZHRAZWMuZXVybBhLmV1MRwwGgYDVQQMExNQcm9mZXNzaW9uYWwgUGVy c29umigfma0gcsqgsibdqebaquaa4gnadcbiqkbgqc96jbqnjcmak4lduzdmu5lngk7/uqnjbl DkUqN2Jb/STQSBJnRJchCY9DnKtqYG9cuSZDRxvIUkssqO/WpFu/I5fO9I4mvLGD9h4ot8/GkRnt belcnmlrkzjkadcshwuqnunpfaz4yggipslry9pbrkfxseenejao0ixiuqjwidaqabo4icvdcc AlAwDAYDVR0TAQH/BAIwADBgBggrBgEFBQcBAQRUMFIwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vYNw Lmx1eHRydXN0Lmx1MCsGCCsGAQUFBzAChh9odHRwOi8vY2EubHV4dHJ1cQubHUvTFRRQ0EuYJ0 MIIBHQYDVR0gBIIBFDCCARAwggECBggrgSsBAQIEATCB9TCBxwYIKwYBBQUHAgIwgboagbdMdXhU cnvzdcbrdwfsawzpzwqgq2vydglmawnhdgugb24gq0ntrcbjb21wbglhbnqgd2l0acbfvfnjifrt IDEwMSA0NTYgUUNQKyBjZXJ0aWZpY2F0ZSBwb2xpYkuIEtleSBHZW5lcmF0aW9uIGJ5IENTUC4g U29sZSBBdXRobJpc2VkIFVzYWdlOiBTdXBwbJ0IG9mIFF1YWxpZmllZCBFbGVjdHJvbmljIFNp Z25hdHVyZS4wKQYIKwYBBQUHAgEWHWh0dHA6Ly9yZXBvc2l0bJ5Lmx1eHRydXN0Lmx1MAgGBgQA izabata2bggrbgefbqcbawqqmcgwcaygbacorgebmbigbgqajkybajaiewacaqacaqawcaygbaco RgEEMBEGCWCGSAGG+EIBAQQEAwIFIDALBgNVHQ8EBAMCBkAwHwYDVR0jBBgwFoAUjZCjB90aEeZ TJKrTUPeP80pZAUwMQYDVR0fBCowKDAmoCSgIoYgaHR0cDovL2NybC5sdXh0cnVzdC5sdS9MVFFD QS5jcmwwEQYDVR0OBAoECEwDOyVeIV5MA0GCSqGSIbDQEBBQUAA4IBAQBStS9gFx5BmEv5VciG 7qEPR5VzqEpBElkjXDYe68Dw7Ol1nCt51CSuAB2/UcTkfCDh6022H7+EtiUpdM6GH/7qDqZdjqYp Qznbu4xkrGTMLrTA1lalhgWugGQIpmCg69kiXns/AXcuJVQSRmABMvJrN5PNaALoguynWCrxRH PTUSpT5J9jCn90ZPAGhxELRxMdZuFZ2UAn8D8XLUxiz0IK9yqdysJiLzWsQazUkZ+lzDG0mPom yrkllzek8hxohkgr+2n760n+styyjwywp/ks/lopqwfufjwqe8jditgodzt4ewvsxunrbh5ls 29aBi0YsT9NYstznKgaR SHA1withRSA LuxTrust Qualified CA LuxTrust S.A. LU Subject T: Professional Person Subject E: [email protected] Subject SERIAL NUMBER: CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 7

8 Subject GIVEN NAME: Karel Lodewijk M Subject SURNAME: De Vriendt Karel Lodewijk M De Vriendt Subject OU: NA European Commission Subject L: BE BE Wed Dec 2 11:5:56 CET 2009 Sun Dec 2 11:5:56 CET 2012 Basic Constraints 0:81:9F:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:81:8D:00:0:81:89:02:81:81:00:BD:E8:90:6A:9E:0:A6:02:4E:7:2C:B:99:0C:CB:B9:94:D1:8A:EF:F5:10:9C:90:4B:0E:45:2A:7:62:5B:FD:24:D0:48:12:67:44: 97:21:09:8F:4:9C:AB:6A:60:6F:5C:B9:26:4:47:1B:C8:52:4B:2C:A8:EF:D6:A4:5B:BF:2:97:CE:F4:8E:26:BC:B1:8:F6:1E:28:B7:CF:C6:91:19:ED:6C:49:77:0A:7:25:44:A6:49:90:07:5C:48:7C:2E:AA:7B:8D:A5:F6:99:E :21:86:20:FB:25:47:2F:69:6D:19:1F:5D:27:9E:9D:E2:40:A:42:1:8A:ED:D0:27:02:0:01:00:01 IsCA: false Authority Info Access Policy OID: CPS text: [LuxTrust Qualified Certificate on CCSD compliant with ETSI TS QCP+ certificate policy. Key Generation by CSP. Sole Authorised Usage: Support of Qualified Electronic Signature.] CPS pointer: Policy OID: QCStatements - crit. = false id_etsi_qcs_qccompliance id_etsi_qcs_limitevalue Value: not readable Currency: not readable id_etsi_qcs_qcsscd Authority Key Identifier 8D:90:A:07:DD:1A:1:77:99:4C:92:AB:4D:4:DE:F:CD:29:64:05 CRL Distribution Points 4C:0:B:25:5E:DC:85:79 nonrepudiation CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 8

9 D5:49:51:FE:BB:C5:9D:2C:2E:C0:1A:CC:D9:2C:CD:8C:9D:2C:74:44:C2:E5:51:BA:7E:C0:DE:62: 2C:74:14:8C EU TSL digital identities TSL Scheme Operator certificate fields details MIIHSDCCBTCgAwIBAgIQHaaUHzn5vENUk+T/aHIefTANBgkqhkiG9w0BAQsFADAxMQswCQYDVQQG EwJFUzERMA8GA1UECgwIRk5NVC1SQ00xDzANBgNVBAMMBklTQSBDQTAeFw0xNDEyMTkwODQyMzla Fw0xODEyMTkwODQyMzlaMEwxCzAJBgNVBAYTAkJFMRwwGgYDVQQKDBNFVVJPUEVBTiBDT01NSVNT SU9OMR8wHQYDVQQDDBYoU0lHTikgQUdOSUVTWktBIEJBSk5PMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAog6nQQcoPlHOrwXYDD+wj8lwn1zbalTTJL7yWN7OgO9/eSCIY5nGgfnsla pc6vso9rbsxwcv4cjcf2ngzdszhxnjpf4ig4cesbyui0ugfantbplfj/r5avf0ordgkti2h/6 sn2swgs4grcrfq5yt/zphoigjxjzk4s6ifmbg1ggrqusdjo+uvcbubcnjdfrozmm9typdv19 4f1NwXRbFOon1WtaIsJNKzw4+MKCAyD9BBVATQxGLYeCT2tZtDFbSSXZbBfSnfwGe7eMc99S12H r/mwapjhuwzzpienadvnlmnwxwutxcdo5hrmodtxv8vh9mklawvn4qidaqabo4idpzccazswwwyd VR0RBFQwUoEcQUdOSUVTWktBLkJBSk5PQEVDLkVVUk9QQS5FVaQyMDAxFDASBgkrBgEEAaxmAQIM BUJBSk5PMRgwFgYJKwYBBAGsZgEBDAlBR05JRVNaS0EwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMC BkAwHQYDVR0OBBYEFIe8EqP5sxbiNrSKwgNC00FsSfkjMB8GA1UdIwQYMBaAFEft+GPwma9e/n4O XFjL/uI1N6a9MIHgBgNVHSAEgdgwgdUwgcgGCisGAQQBrGYDBAEwgbkwKQYIKwYBBQUHAgEWHWh0 dha6ly9dcuy2vydc5mbm10lmvzl2rwymvmiglbggrbgefbqccajb/dh1rdwfsawzpzwqgy2vy dglmawnhdguuifvuzgvyihrozsb1c2fnzsbjb25kaxrpb25zigfzc2vydgvkigluihrozsbgtk1u LVJDTSBDUFMgKDEwNiwgSm9yZ2UgSnVhbiBzdHJlZXQsMjgwMDksIE1hZHJpZCwgUBhaW4pLjAI BgYEAIswAQEwgYYGCCsGAQUFBwEBBHoweDBBBggrBgEFBQcwAYY1aHR0cDovL29jcBJU0FjYS5j ZXJ0LmZubXQuZXMvb2NzcElTQWNhL09jcBSZXNwb25kZXIwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9 dcuy2vydc5mbm10lmvzl2nlcnrzl0ltqunblmnyddbgbggrbgefbqcbawq6mdgwcaygbacorgeb MAsGBgQAjkYBAwIBDzAVBgYEAI5GAQIwCxMDRVVSAgECAgECMAgGBgQAjkYBBDCBzAYDVR0fBIHE MIHBMIG+oIG7oIG4hoGIbGRhcDovL2xkYXBJU0FjYS5jZXJ0LmZubXQuZXMvQ049Q1JMMSxjbj1J U0ElMjBDQSxvPUZOTVQtUkNNLEM9RVM/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDtiaW5hcnk/ YmFzZT9vYmplYRjbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludIYraHR0cDovLddy5jZXJ0LmZu bxquzxmvyjsc19ju0fjys9dukwxlmnybdanbgkqhkig9w0baqsfaaocagead2cyyrljkbr+hxmw njwzne9q6nw29ulwx4c/kwfwgnxyjo/mbe2khgxfum7e441ih87px1p8jpteohtfvl8cxmsqydg5 6GBNq5NprbagpmKHiNCP77baZiLMFfEvc915ktLlYQEH+wIe5i0gMPmRWjA2urB/M+fXwLgqQdOE e4e0nslr7yjqhel1swqss4r1zk8zgv1uj0v+vamyxwftayyht/c9x+qtvxyafldcbvnpbxjxug7 vqhe7g5/rpx4vvzaznv9d5ibk+scx05drfrqsym4qw1sw4j0w2nxafqwkbfw6np5sgohfc9sh2l rcf/wlvepy8pitxfukrzlseb8zwm2vfzqrnggbxczdykfavdel/gnnhog5q4tn2tvv7yfxle gu7zn+iqbodlatbjxeu60fif9cs5igqwwlbeok8qvogfydxlgiprsijea1whyy+gh1mofsa7u 0wEvooCzohFf4DBv06I4q9aCNBnTo4yki1yFhBm71r60hlAas6aK6TZ+NUoFWwPypMP617SlHdy8 QlFx1sV+rIt2hxUUGddid/FXDKtuUCRqKqx6x8J8bI7DecZsCS7ijPCApjJ84HB8UASRzdGtEwc 97hvnAqXjpCS/tHAVcVvmPisNDu4WtV2LQfL/TIY8zMxUebv/E5JyBKAw= SHA256withRSA ISA CA FNMT-RCM ES (SIGN) AGNIESZKA BAJNO EUROPEAN COMMISSION BE Fri Dec 19 09:42:9 CET 2014 Wed Dec 19 09:42:9 CET 2018 Subject Alternative Name 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:A2:0E:A7:41:07:28:E:51:CE:AF:05:D8:0C:F:B0:8F:7F:25:C2:7D:7:6D:A9:5:4C:92:FB:C9:6D:CD:EC:E8:0E:F7: F7:92:08:86:9:9C:68:1F:9E:C9:5A:A4:2D:FA:BD:2:BD:45:B4:B1:5B:77:15:E0:22:42:7F:69:C6:65:DB:19:1F:1:49:A5:FE:08:1B:80:84:B0:1C:AE:8B:7D:14:18:50:0D:B4:1:E5:16:F:EB:E5:AB:DF:D0:EA:C:18:A4:C8: D8:7F:FA:B0:DD:AC:C2:0B:8:DE:0A:DC:44:54:9:CA:DF:D9:E:1:88:82:5:E:CC:AE:2C:DF:A2:05:0:11:B5:18:64:50:51:20:C9:A:EB:AF:DD:C6:EE:05:C:6:74:5A:E8:DD:99:A6:F5:C:A9:0E:FD:7D:E1:FD:4D: C1:74:5B:14:EA:27:D5:6B:5A:22:C2:4D:2B:C:8:F8:C2:82:0:20:FD:04:15:40:4D:0C:46:2D:87:82:4F:6B:59:B7:70:C5:6D:24:97:65:B0:5F:4A:77:F0:19:EE:DE:1:CF:7D:4B:5D:87:AF:F:0:00:F2:61:5:06:59:A6:27:A7: 69:D5:4D:94:C:56:C7:0B:AD:C5:C0:CE:E4:7A:E6:9:DB:71:BF:C5:61:F4:C2:A5:0:0B:CD:E1:02:0:01:00:01 Basic Constraints IsCA: false 87:BC:12:A:F9:B:16:E2:6:B4:8A:C2:0:42:D:41:6C:49:F9:2 Authority Key Identifier 47:ED:F8:6:F0:99:AF:5E:FE:7E:0E:5C:58:CB:FE:E2:5:7:A6:BD CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 9

10 Policy OID: CPS pointer: CPS text: [Qualified certificate. Under the usage conditions asserted in the FNMT-RCM CPS (106, Jorge Juan street,28009, Madrid, Spain).] Policy OID: Authority Info Access QCStatements - crit. = false id_etsi_qcs_qccompliance id_etsi_qcs_retentionperiod: 15 id_etsi_qcs_limitevalue Value: 200 Currency: EUR id_etsi_qcs_qcsscd CRL Distribution Points ldap://ldapisaca.cert.fnmt.es/cn=crl1,cn=isa%20ca,o=fnmt- RCM,C=ES?certificateRevocationList;binary?base?objectclass=cRLDistributionPoint nonrepudiation 55:F5:07:DE:A:84:C6:F:29:F0:46:9:F7:0:AD:D1:7:CA:DF:A0:9B:76:AB:07:F5:F9:74:84:12: FD:9A:AA X509SubjectName (SIGN) AGNIESZKA BAJNO EUROPEAN COMMISSION BE EU TSL digital identities TSL Scheme Operator certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 10

11 MIIHYDCCBUigAwIBAgIQLc4fd1CtIihUFtlELwMLDDANBgkqhkiG9w0BAQsFADAxMQswCQYDVQQG EwJFUzERMA8GA1UECgwIRk5NVC1SQ00xDzANBgNVBAMMBklTQSBDQTAeFw0xNDA5MTUxMjE5MTVa Fw0xODA5MTUxMjE5MTVaMFQxCzAJBgNVBAYTAkJFMRwwGgYDVQQKDBNFVVJPUEVBTiBDT01NSVNT SU9OMScwJQYDVQQDDB4oU0lHTikgSk9MQU5EQSBWQU4gRUlKTkRUSE9WRU4wggEiMA0GCSqGSIb DQEBAQUAA4IBDwAwggEKAoIBAQC0sin8VvNtcuOnUuGDWtXjZlTx5SoZzJiDG4/6bOtgeyPIvqH zci8hslijb1yqjnimglti6blhelr/skf8regueyn/ijgio2/89b82rsfm1r+ehsjklmvuu+kj7uu nhrcdlahgnohmpwidedixy4jw0rbdjtyewv7cndedoc4le9iuj71zlsphmedtlfldwif0ay/r5b x1vaiapmzxjdicarsqlhnmnpkyshw+poahzn8tj9vowjhtdsw/ftbnbqaszuk0l2iwd0pxrszso +yw86dx0kan1qsmwxdwz0pax+n9ml2ggug8stirpvlmzdggn6g52msz2grniaulagmbaagjggnp MIIDSzBrBgNVHREEZDBigSRKT0xBTkRBLlZBTi1FSUpORFRIT1ZFTkBFQy5FVVJPUEEuRVWkOjA4 MR4wHAYJKwYBBAGsZgECDA9WQU4gRUlKTkRUSE9WRU4xFjAUBgkrBgEEAaxmAQEMB0pPTEFOREEw CQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBkAwHQYDVR0OBBYEFIz+jZkpky2xCorjhNpu1m1pDZ76 MB8GA1UdIwQYMBaAFEft+GPwma9e/n4OXFjL/uI1N6a9MIHgBgNVHSAEgdgwgdUwgcgGCisGAQQB rgydbaewgbkwkqyikwybbquhagewhwh0dha6ly9dcuy2vydc5mbm10lmvzl2rwymvmiglbggr BgEFBQcCAjB/DH1RdWFsaWZpZWQgY2VydGlmaWNhdGUuIFVuZGVyIHRoZSB1c2FnZSBjb25kaXRp b25zigfzc2vydgvkigluihrozsbgtk1ulvjdtsbdufmgkdewniwgsm9yz2ugsnvhbibzdhjlzxqs MjgwMDksIE1hZHJpZCwgUBhaW4pLjAIBgYEAIswAQEwgYYGCCsGAQUFBwEBBHoweDBBBggrBgEF BQcwAYY1aHR0cDovL29jcBJU0FjYS5jZXJ0LmZubXQuZXMvb2NzcElTQWNhL09jcBSZXNwb25k ZXIwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9dcuY2VydC5mbm10LmVzL2NlcnRzL0lTQUNBLmNydDBG BggrBgEFBQcBAwQ6MDgwCAYGBACORgEBMAsGBgQAjkYBAwIBDzAVBgYEAI5GAQIwCxMDRVVSAgEC AgECMAgGBgQAjkYBBDCBzAYDVR0fBIHEMIHBMIG+oIG7oIG4hoGIbGRhcDovL2xkYXBJU0FjYS5j ZXJ0LmZubXQuZXMvQ049Q1JMNixjbj1JU0ElMjBDQSxvPUZOTVQtUkNNLEM9RVM/Y2VydGlmaWNh dgvszxzvy2f0aw9utglzddtiaw5hcnk/ymfzzt9vymplyrjbgfzcz1jukxeaxn0cmlidxrpb25q b2ludiyrahr0cdovlddy5jzxj0lmzubxquzxmvyjsc19ju0fjys9dukw2lmnybdanbgkqhkig 9w0BAQsFAAOCAgEAYnVYxWeb57eq6qGlVE9f7tiEPUGqmKm2cXlRLY50Hat4O/dVDv9teyNd/fv cak4uhdhraf+ehoodsm9rtkrkc4vzwiua8xbgjl8nljd1odvgdik0kui7qvqq/x4c9ptyk0ucbw5 MNWyr97UO68rOBNiF+tS2mrOMJqjQS6vX7tf/HOvyPg9dLY/+KiiuijnAFS9+DPJNWQh8UkvSEqg Bkydy0pDFLLOREFHiBY7cOflfjoQm+tKxsPt8Mw/z/p5OLeg8cMyVprtVZ2LohgkJP/Do0SB1lge nlvway7f/7swsgn4y6yd99hb74mkdgreqpbvin5syrgpfzfkyyelz9/q7fhddrtvxlsdcjlia5+ 5D8iprdw70vstU9pmMPXNvBFSmVeGNDVm2jszt7oD254nj5dm/8tXdXqeq4MEi1wHRposKRc6 pptapfrtcizrlq8brkteka6subeshjyiia0942/zefro/h+cemtqz1zuchosmwm6qjh0cesz0tm UpHzrNltR5WPo0IKiqqaDxdxN/9OuTId+P5zLRdwsVSduvUm+5krW8Pxn2pkyTg16NN2wLQ7p/Xn sepwbvv2leujt8n0obhvyzvbzsuchbcplqaqxmbig5dpzfxxbygxsumhufseoauomhxpm9n2uyf J5fwcoXHZPNI1Uw= SHA256withRSA ISA CA FNMT-RCM ES (SIGN) JOLANDA VAN EIJNDTHOVEN EUROPEAN COMMISSION BE Mon Sep 15 14:19:15 CEST 2014 Sat Sep 15 14:19:15 CEST 2018 Subject Alternative Name 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:B4:B2:29:FC:56:F:6D:72:E:A7:52:E1:8:5A:D5:E:66:54:F1:E5:2A:19:CC:98:8:1B:8F:FA:6C:EB:77:81:EC:8F:2 2:FA:87:CD:C8:BC:1D:29:48:24:1D:58:AA::62:98:69:6D:2:A0:65:1D:E9:51:FE:C9:1F:F2:B1:20:B8:46:27:FC:88:E0:8A:8D:BF:F:D6:FC:DA:BB:05::54:7E:7A:1B:2:90:B:2F:BA:EF:8A:8F:B5:2E:9E:14:42:74:B0:0 7:82:7:A1:98:FC:08:0D:ED:DD:2:16:8:27:0D:2B:05:D8:ED:C8:4C:15:ED:C:4:79:D:82:E2:51:D:8A:E2:7B:D7:9:6C:A4:7:1E:76:D2:DF:2D:DC:08:17:46:B2:FE:BE:41:C7:5B:DA:89:AA:66:CF:18:C:21:C0:2B:B1 :09:47:6:6:69:2B:7C:AC:1D:6F:A9:A0:08:7:7:C4:E:F5:5A:0:8E:14:C:4B:0F:C5:4C:1:5B:40:04:B:B8:AD:0B:D8:85:8:D0:F5:EB:B1:94:8E:FB:25:BC:E8:C:74:90:0:75:A9:29:96:C5:DC:19:D0:F0:17:FA:7D:FD: 98:BD:86:1A:E1:BC:4A:D2:2B:A6:F2:CC:64:1:A0:7:A1:B9:DA:6B::DA:0A:E7:20:0B:A5:02:0:01:00:01 Basic Constraints IsCA: false 8C:FE:8D:99:29:9:2D:B1:0A:8A:E:84:DA:6E:D6:6D:69:0D:9E:FA Authority Key Identifier 47:ED:F8:6:F0:99:AF:5E:FE:7E:0E:5C:58:CB:FE:E2:5:7:A6:BD Policy OID: CPS pointer: CPS text: [Qualified certificate. Under the usage conditions asserted in the FNMT-RCM CPS (106, Jorge Juan street,28009, Madrid, Spain).] Policy OID: Authority Info Access CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 11

12 QCStatements - crit. = false id_etsi_qcs_qccompliance id_etsi_qcs_retentionperiod: 15 id_etsi_qcs_limitevalue Value: 200 Currency: EUR id_etsi_qcs_qcsscd CRL Distribution Points ldap://ldapisaca.cert.fnmt.es/cn=crl6,cn=isa%20ca,o=fnmt- RCM,C=ES?certificateRevocationList;binary?base?objectclass=cRLDistributionPoint nonrepudiation F0:E7:C9:5C:09:A5:F6:79:91:A0:5:E:BB:DC:E8:20:1:9:49:EB:1F:F5:7E:6D:2D:F9:62:E8:02: A2:E4:0C X509SubjectName (SIGN) JOLANDA VAN EIJNDTHOVEN EUROPEAN COMMISSION BE TSL Type Scheme Operator Name European Commission Scheme Type Community Rules URI [ en ] Scheme Territory EU Mime Type List Issue Date Time application/vnd.etsi.tsl+xml T09:00:00Z Next Update date Time T09:00:00Z Distribution Points URI CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 12

13 1 - TSP: First certification authority, a.s. TSP Name First certification authority, a.s. První certifikační autorita, a.s. TSP Trade Name I.CA VAT PostalAddress Street Address [ en ] Podvinny mlyn 2178/6 Locality [ en ] Prague 9 Postal Code [ en ] Country PostalAddress Street Address [ cs ] Podvinný mlýn 2178/6 Locality [ cs ] Praha 9 Postal Code [ cs ] Country ElectronicAddress URI mailto:[email protected] URI URI TSP Information URI URI [ en ] URI [ cs ] URI [ sk ] CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 1

14 1.1 - Service : (1) I.CA - issuing qualified certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name (1) I.CA - issuing qualified certificates (1) I.CA - vydávání kvalifikovaných certifikátů Service digital identities Certificate fields details MIIGWjCCBUKgAwIBAgIEAJiWgTANBgkqhkiG9w0BAQUFADCCAQ0xYTBfBgNVBAMMWEkuQ0EgLSBR dwfsawzpzwqgcm9vdcbjzxj0awzpy2f0zsaoazhbglmawtvdmfuw70gy2vydglmawvdoxqgcg9z al0bzhdgvszskglsbqu0vvre9owu0xczajbgnvbaytaknams8wlqydvqqhdqb2r2aw5uw70g bwzdvw4gmjeoc82lcaxotagmdaguhjhagegotesmcoga1uecgwjuhj2bsotignlcnrpzmlrycsn bsotigf1dg9yaxrhigeucy4xpda6bgnvbasmm0frcmvkaxrvdmfuw70gcg9zal0bzhdgvsignl cnrpzmlrycsnbsoty2ggc2x1xb5lyjaefw0wmjazmjiwmdawmdbafw0wodazmjiwmdawmdbamiib DTFhMF8GA1UEAwxYSS5DQSAtIFF1YWxpZmllZCByb290IGNlcnRpZmljYXRlIChrdmFsaWZpa292 YW7DvSBjZXJ0aWZpa8OhdCBwbNreXRvdmF0ZWxlKSAtIFBTRVVET05ZTTELMAkGA1UEBhMCQ1ox LzAtBgNVBAcMJlBvZHZpbm7DvSBtbMO9biAyMTc4LzYsIDE5MCAwMCBQcmFoYSA5MSwwKgYDVQQK DCNQcnZuw60gY2VydGlmaWthxI1uw60gYXV0bJpdGEgYS5zLjE8MDoGA1UECwwzQWtyZWRpdG92 YW7DvSBwbNreXRvdmF0ZWwgY2VydGlmaWthxI1uw61jaCBzbHXFvmViMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAxY4zPwz5OskTfhoAjgk8PLTZ+h2D9FNwdSCVfxtgbzkBD7LV ajozhoym0bfsgrqjrhm0cwb/x0zbbskeomqkja7sbxqvxw4cqk6zccqli1aeltek+lil8ybiyvav A6DOX0SNHe5fLB5DF+57jhoLE4jFyLrV6cCtIEspPrSRajcUpfUnIAwgv7xlnNsiqtrxsih1iW TtKt6TV/6Al6L6v5xvrsx9k8q0BSZLC21sVN0yP0e2KfyGoH+YaOnObup61zD2e0TXJgUVgQLLC 21yTWgqEuDRECdq6VpIyFZLswBjYdoFlMcJiL5C8zXLHKkTvZQmaDZPN7eIxQIDAQABo4IBvDCC AbgwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwKQYDVR0RBCIwIIELbBlckBpY2Eu YqGEWh0dHA6Ly9dcuaWNhLmN6MGkGA1UdHwRiMGAwHqAcoBqGGGh0dHA6Ly9xLmljYS5jei9x awnhlmnybdaeobyggoyyahr0cdovl2iuawnhlmn6lfpy2euyjsmb6ghkaahhhodhrwoi8vci5p Y2EuYovcWljYS5jcmwwgcUGA1UdIASBvTCBujCBtwYKKwYBBAGzYQEBBDCBqDAvBggrBgEFBQcC ARYjaHR0cDovLddy5pY2EuYovcWNwL2NwcXJpY2EwMS5wZGYwdQYIKwYBBQUHAgIwaRpnVGVu dg8gy2vydglmawthdcbqzsb2ewrhbibqywtviet2ywxpzmlrbzhbnkgy2vydglmawthdcbwbnr exrvdmf0zwxlihygc291bgfkdsbzzsb6ywtvbmvtidiyny8ymdawifniljadbgnvhq4efgquk1ok fvvldyusztbyvgn701mca/uwgayikwybbquhaqmeddakmaggbgqajkybatanbgkqhkig9w0baquf AAOCAQEAUHd7gP8KdZZOtsQ6WCaenOmkTP7yVbwaXNAzsuUn0aI7w9rZn/rodHkjc58M+R5uLqAJ ilkzn2mifteqqw9yn2hpvfkww0y1g8yyqxzbjuwesumrlryypvdbs0aobsjmuicrfggxvmjbro2t 5Rfpn69INijg6iSmOtFoQuwlPbbxnUJoEe+VoHSNpwvbMPk8PGuGC2VxvZFSUOkLxjMbiXLJRI 5dASq77NS8Hntu42rQA2rhYF41BbjiR5N2i8toiWDM4z7Utbqh4RT7m/s25rdNXKBcl/vARfAf lbhoy4kibffjow8wffb8gjfd5ld88yvcbnia0+axun2w== SHA1withRSA Issuer OU: Akreditovaný poskytovatel certifikačních služeb První certifikační autorita a.s. Issuer L: Podvinný mlýn 2178/6, Praha 9 I.CA - Qualified root certificate (kvalifikovaný certifikát poskytovatele) - PSEUDONYM Subject OU: Akreditovaný poskytovatel certifikačních služeb První certifikační autorita a.s. Subject L: Podvinný mlýn 2178/6, Praha 9 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 14

15 I.CA - Qualified root certificate (kvalifikovaný certifikát poskytovatele) - PSEUDONYM Fri Mar 22 01:00:00 CET 2002 Sat Mar 22 01:00:00 CET 2008 Basic Constraints 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:C5:8E::F:0C:F7:DF:9:AC:91:7:E1:A0:08:E0:9:C:CB:4D:9F:A1:D8:F:45:7:7C:1D:48:25:5F:C6:D8:1B:CE: 40:4:EC:BD:D5:6A::99:1E:8C:8C:D1:B7:EC:1A:B4:09:44:7:4:0B:06:FF:C7:4C:C1:05:29:04:8:CA:A4:8D:AE:EC:6D:7A:AF:5D:6E:1C:AA:4E:99:08:24:25:8B:50:04:2E:D7:A4:FA:58:A5:F:20:48:62:F6:AF:0:A0:C E:5F:44:8D:1D:EE:5F:2C:1E:4:17:EE:7B:8E:1A:0B:1:88:C5:C8:BA:D5:E9:C0:AD:2:71:2C:A4:FA:D2:45:A8:DC:52:97:D4:9C:80:0:82:FE:F1:96:7:6C:8A:AB:6B:C6:C8:A1:D6:25:B7:4E:D2:AD:E9:5:7F:E8:09:7A:2 F:AB:F9:C6:FA:EC:C7:D9:C:AB:40:52:64:B0:B6:D6:C5:4D:D:2:F4:7B:62:9F:DF:21:A8:1F:E6:1A:A:7:9B:BA:9E:B5:CC:D:9E:D1:5:C9:81:45:60:40:B2:C2:DB:5C:9:5A:0A:84:B8:4:44:0B:77:6A:E9:5A:48:C8:5 6:4B:B:00:6:61:DA:05:94:C7:09:88:BE:42:F:5:CB:1C:A9:1:BD:94:26:68:6:4F:7:B7:88:C5:02:0:01:00:01 IsCA: true Subject Alternative Name [email protected] CRL Distribution Points Policy OID: CPS pointer: CPS text: [Tento certifikat je vydan jako Kvalifikovany certifikat poskytovatele v souladu se zakonem 227/2000 Sb.] 2B:5A:0A:7E:FB:E5:0D:85:2C:65:0:72:BC:6:7B:D:59:9C:6B:F5 QCStatements - crit. = false id_etsi_qcs_qccompliance keycertsign - crlsign Service Status 5D:FF:58:6C:9B:78:49:B9:0A:DB:A:99:79:44:7D:00:2C:E:CF:B7:10:EF:8A:A0:E8:26:EC:0C:0 A:89:B0:0 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T00:00:00Z Extension (critical): Qualifiers [QCNoSSCD] Qualifier type description [en] it is ensured by the trust service provider and controlled (supervision model) or audited (accreditation model) by the referenced Member State (respectively its Supervisory Body or Accreditation Body) that all Qualified Certificates issued under the service identified in "Service digital identity" and further identified by the filters information used to further identify under the "Sdi" identified trust service that precise set of Qualified Certificates for which this additional information is required with regards to the presence or absence of Secure Signature Creation Device (SSCD) support ARE NOT supported by an SSCD (i.e. that that the private key associated with the public key in the certificate is not stored in a Secure Signature Creation Device conformant with the applicable European legislation). Qualifier Criteria list assert=atleastone CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 15

16 Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier Service : (2) I.CA - issuing qualified certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name (2) I.CA - issuing qualified certificates (2) I.CA - vydávání kvalifikovaných certifikátů Service digital identities Certificate fields details MIIEODCCAyCgAwIBAgIEAJodIDANBgkqhkiG9w0BAQUFADBoMQswCQYDVQQGEwJDWjEqMCgGA1UE AwwhSS5DQSAtIFF1YWxpZmllZCByb290IGNlcnRpZmljYXRlMS0wKwYDVQQKDCRQcnZuw60gY2Vy dglmawthxi1uw60gyxv0bjpdgesigeucy4whhcnmduwnjaxmdawmdawwhcnmtewnjaxmdawmdaw WjBoMQswCQYDVQQGEwJDWjEqMCgGA1UEAwwhSS5DQSAtIFF1YWxpZmllZCByb290IGNlcnRpZmlj YXRlMS0wKwYDVQQKDCRQcnZuw60gY2VydGlmaWthxI1uw60gYXV0bJpdGEsIGEucy4wggEiMA0G CSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQDwM/o7kB8GPi+JDF5A12G4+UryCybpTeHU1Pa6cSQN 6zDjSReYEfqLuTGsNEDVs76Eu0qOQpJ9lLQjWnaTL4SaG575z17Zt+gOhwt0UjJQhv6AQb2totz BJOGFL7tE/nE0yav1/yB7l2FwFNcWw/8alnDj6T07boH2T82cash/Z0up4VbgeFprLwHpYpeVO GmYcJYxgLOhfeV4OBbSpoKjLOly4L2ChEsDbmB88gxew4dorgyKuL0k1ClCLtKgp/rNHxTskLKcx J2KpyFOdQL4QtLC2l9RdvDwdzGRcmA78H7eoiuBDsSxkI9uFAaGbmqhc9LoLzwjAhKeSKFAgMB AAGjgekwgeYwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwgaMGA1UdIASBmzCBmDCB lqylkwybbagzyqebbauwgyuwgyigccsgaqufbwicmhyadfrlbnrvignlcnrpzmlryxqgamugdnlk YW4gamFrbyBzeXN0ZW1vdnkgaZhbGlmaWtvdmFueSBjZXJ0aWZpa2F0IHYgc291bGFkdSBzZSB6 YWtvbmVtIDIyNy8yMDAwIFNiLiB2IHBsYXRuZW0gem5lbmkuMB0GA1UdDgQWBBRRLl9ZgSX/0f6G 6Icu1o0NWTQrvTANBgkqhkiG9w0BAQUFAAOCAQEAOEbPkZXGrEFoe1iRTp5shex+cA+2zguFTD2I quqr1pfq1aoij4sqboijbfctlngu8i1e6ycys2x9j2rmcnyb0j7ostc6zzxjyxvjpesgx1wyyh tvwzpq2i9g1umva6iu44s69zyz7rex7+2v2ptzpj8ofeqoukkie0bky5y/itxoq2wwclzssh0a0 PE7y1SUcdkDWgTcSOWZIqnsaRRAN7H7+V0Zm1ppv86uZa6w9VTWh7blmhw9NIZuO7qBPDRKpd hn+guuzxxwmjvm2uwwyksyvtishif25w++p+r9j557znww5zcvojaylkyxdzisu96cnb4yyhphg sq== SHA1withRSA První certifikační autorita, a.s. I.CA - Qualified root certificate První certifikační autorita, a.s. I.CA - Qualified root certificate CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 16

17 Wed Jun 01 02:00:00 CEST 2005 Wed Jun 01 02:00:00 CEST 2011 Basic Constraints 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:F0::FA:B:90:1F:06:E:2F:89:0C:5E:40:D7:61:B8:F9:4A:F2:0B:26:E9:4D:E1:D4:D4:F6:BA:71:24:0D:EB:0:E:4 9:17:98:11:FA:8B:B9:1:AC:4:40:D5:B:BE:84:BB:4A:8E:4:7A:49:F6:52:D0:8D:69:DA:4C:BE:12:68:6E:7B:E7:D:7B:66:DF:A0:A:1C:2D:D1:48:C9:42:1B:FA:01:06:F6:B6:8B:7:04:9:86:14:BE:ED:1:F9:C4:D:26: AF:D7:FC:81:EE:5D:85:C0:5:5C:5B:0F:FC:6A:59:C:8F:A4:F4:ED:BA:07:09:9D:9:F:67:1A:B2:1F:D9:D2:EA:78:55:B8:1E:16:9A:CB:C0:7A:58:A5:E5:4E:1A:66:1C:25:8C:60:2C:E8:5F:79:5E:0E:05:B4:A9:A0:A8:CB: A:5C:B8:2F:60:A1:12:C0:DB:98:1F:C:8:17:B0:E1:DA:2B:8:22:AE:2F:49:5:0A:50:8B:B4:A8:29:FE:B:47:C5:B:24:2C:A7:1:27:62:A9:C8:5:9D:40:BE:10:B4:B0:B7:DA:5F:51:76:F0:F0:77:1:91:72:6D:C0:EF:C1:F B:7A:88:AE:04:B:12:C6:42:D:B8:50:1A:19:B9:AA:85:CF:4B:A0:BC:F0:8C:08:4A:79:22:85:02:0:01:00:01 IsCA: true Policy OID: CPS text: [Tento certifikat je vydan jako systemovy kvalifikovany certifikat v souladu se zakonem 227/2000 Sb. v platnem zneni.] 51:2E:5F:59:81:25:FF:D1:FE:86:E8:87:2E:D6:8D:0D:59:4:2B:BD keycertsign - crlsign Service Status EE:71:1E:70:E:77:05:0E:5C:BF:18:6A:81:EB:8D:16:9D:05:BF:04:8:DB:C6:55:E7:0E:FF:17:4: 6E:0E:A2 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T00:00:00Z Extension (critical): Qualifiers [QCNoSSCD] Qualifier type description [en] it is ensured by the trust service provider and controlled (supervision model) or audited (accreditation model) by the referenced Member State (respectively its Supervisory Body or Accreditation Body) that all Qualified Certificates issued under the service identified in "Service digital identity" and further identified by the filters information used to further identify under the "Sdi" identified trust service that precise set of Qualified Certificates for which this additional information is required with regards to the presence or absence of Secure Signature Creation Device (SSCD) support ARE NOT supported by an SSCD (i.e. that that the private key associated with the public key in the certificate is not stored in a Secure Signature Creation Device conformant with the applicable European legislation). Qualifier Criteria list assert=atleastone Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 17

18 Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier Service : (11) I.CA - issuing qualified certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name (11) I.CA - issuing qualified certificates (11) I.CA - vydávání kvalifikovaných certifikátů Service digital identities Certificate fields details MIIEOTCCAyGgAwIBAgIEAJ0qYDANBgkqhkiG9w0BAQUFADBoMQswCQYDVQQGEwJDWjEqMCgGA1UE AwwhSS5DQSAtIFF1YWxpZmllZCByb290IGNlcnRpZmljYXRlMS0wKwYDVQQKDCRQcnZuw60gY2Vy dglmawthxi1uw60gyxv0bjpdgesigeucy4whhcnmdgwndaxmdawmdawwhcnmtgwndaxmdawmdaw WjBoMQswCQYDVQQGEwJDWjEqMCgGA1UEAwwhSS5DQSAtIFF1YWxpZmllZCByb290IGNlcnRpZmlj YXRlMS0wKwYDVQQKDCRQcnZuw60gY2VydGlmaWthxI1uw60gYXV0bJpdGEsIGEucy4wggEiMA0G CSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCrCIik8HTyn/jb1neNMBk+psXHisW9eYCro49UHW4 r02q/717qhntackmmedy4hr8hs2ixralcjegsq/uyj9bp06hrufrjwagqagyyf1kivcshaahzso 0R9J/Ww4bWqsuEWfvBTXZtQh4ycKjXXgWi8KS7TnfnOjKr1w8ZGGCI+/kIQch6n1mSUllMHjbgfB SwdbVPw0y0YnMWhIM6mrIepgzw4T8BA8+n/m9c5duQTIW1/6FCrlyGT8VOQ7aZC1JTIKizwkzT ACwV0llsCp8htXMWeR6GJe4a+5OerWPxTOJ2MV47/zQqTbk+RHpevxQ50EjAzS4fboOz91TAgMB AAGjgeowgecwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwgaQGA1UdIASBnDCBmTCB lgymkwybbagbuegbbaabmigfmigcbggrbgefbqccajb2gnruzw50bybjzxj0awzpa2f0igplihz5 ZGFuIGpha28gaZhbGlmaWtvdmFueSBzeXN0ZW1vdnkgY2VydGlmaWthdCB2IHNvdWxhZHUgc2Ug emfrb25lbsaymjcvmjawmcbtyi4gdibwbgf0bmvtihpuzw5pljadbgnvhq4efgquaj1+1sqlofs7 odfwt9ym0xrwvlkwdqyjkozihvcnaqefbqadggebahl1vaan0iyw8olbwhth8ebk5s4b7/rg+tpx ckgbrpki9n6ygvoe51or+cxn1aus8ewb8arsip1mfnsasoowubl62xntdal8ksoprilv/rqxb+j fuxrdpgkkk5cnlauussgyfrrdcukitm5l7bpszcecgcj1t8lctvamewt0hkgznk21hkn87kijs UYF/UXyOLn+d6bzBND2LrYGt8R50ZkM8QU24LjNPsToe2xLfNo5x/1djsdaPtD2GEmrPQjC0kxbq meocw/4i7rjpcl8zaod6sjih8kirph7li7i4nfausaljifzlzy46z0wmjaviqrflb/+xh7ouzl6 pg= SHA1withRSA První certifikační autorita, a.s. I.CA - Qualified root certificate První certifikační autorita, a.s. I.CA - Qualified root certificate CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 18

19 Tue Apr 01 02:00:00 CEST 2008 Sun Apr 01 02:00:00 CEST 2018 Basic Constraints 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:AB:08:88:A4:F0:74:F2:9F:F8:DB:D6:77:8D:0:19:E:A6:C5:C7:8A:C5:BD:DD:E6:02:AE:8E:D:50:75:B8:AF:7D: 6:AB:FE:F5:ED:08:67:B4:00:8A:98:C1:0:6:88:51:F2:1B:6:89:74:5A:2D:C8:C4:82:C4:F:B9:88:FD:6C:FD:A:1D:15:05:44:95:80:1A:A6:86:CB:21:75:90:85:5C:B0:70:00:87:4:A8:D1:1F:49:FD:6C:8:6D:6A:AC:B8:45: 9F:BC:14:D7:66:D4:21:E:27:0A:8D:75:E0:5A:2F:0A:4B:B4:E7:7E:7:A:2A:BD:70:F1:91:86:08:8F:BF:90:84:1C:87:A9:F5:99:25:25:94:C1:E:6E:07:C1:4B:07:5B:54:FC:4:CB:46:7:9C:C5:A1:20:CE:A6:AC:87:A9:8: C:8:4F:C0:40:F:E9:FF:9B:D7:9:76:E4:1:2:75:B5:FF:A1:42:AE:5C:86:4F:C5:4E:4:B6:99:0B:52:5:20:A8:B:C2:4C:D:00:2C:15:D2:59:6C:0A:9F:21:B5:7:16:79:1E:86:25:EE:1A:FB:9:9E:AD:6:F1:4C:E2:76:1:5 E:7:EF:FC:D0:A9:6:E4:F9:11:E9:7A:FC:50:E7:41:2:0:4:B8:7D:BA:0E:CF:DD:5:02:0:01:00:01 IsCA: true Policy OID: CPS text: [Tento certifikat je vydan jako kvalifikovany systemovy certifikat v souladu se zakonem 227/2000 Sb. v platnem zneni.] 68:9D:7E:D6:C4:25:9:FB:B:A0:7:D6:4F:DC:8C:D1:7A:F0:56:59 keycertsign - crlsign Service Status 1A:A9:80:C8:C0:D:16:F2:50:29:97:89:82:F0::CB:B:A:F4:18:8D:66:9F:2D:E6:A8:D8:4E:E0: 0A:15:75 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T00:00:00Z Extension (critical): Qualifiers [QCNoSSCD] Qualifier type description [en] it is ensured by the trust service provider and controlled (supervision model) or audited (accreditation model) by the referenced Member State (respectively its Supervisory Body or Accreditation Body) that all Qualified Certificates issued under the service identified in "Service digital identity" and further identified by the filters information used to further identify under the "Sdi" identified trust service that precise set of Qualified Certificates for which this additional information is required with regards to the presence or absence of Secure Signature Creation Device (SSCD) support ARE NOT supported by an SSCD (i.e. that that the private key associated with the public key in the certificate is not stored in a Secure Signature Creation Device conformant with the applicable European legislation). Qualifier Criteria list assert=atleastone Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier Service : (16) I.CA - issuing qualified certificates CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 19

20 Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name (16) I.CA - issuing qualified certificates (16) I.CA - vydávání kvalifikovaných certifikátů Service digital identities Certificate fields details MIIFHjCCBAagAwIBAgIEAKAoDANBgkqhkiG9w0BAQsFADCBtzELMAkGA1UEBhMCQ1oxOjA4BgNV BAMMMUkuQ0EgLSBRdWFsaWZpZWQgQ2VydGlmaWNhdGlvbiBBdXRobJpdHksIDA5LzIwMDkxLTAr BgNVBAoMJFBydm7DrSBjZXJ0aWZpa2HEjW7DrSBhdXRvcml0YSwgYS5zLjE9MDsGA1UECww0SS5D QSAtIEFjYJlZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczAeFw0wOTA5 MDEwMDAwMDBaFw0xOTA5MDEwMDAwMDBaMIGMQswCQYDVQQGEwJDWjE6MDgGA1UEAwwxSS5DQSAt IFF1YWxpZmllZCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSwgMDkvMjAwOTEtMCsGA1UECgwkUHJ2 bsotignlcnrpzmlrycsnbsotigf1dg9yaxrhlcbhlnmumt0wowydvqqlddrjlknbic0gqwnjcmvk axrlzcbqcm92awrlcibvzibdzxj0awzpy2f0aw9uifnlcnzpy2vzmiibijanbgkqhkig9w0baqef AAOCAQ8AMIIBCgKCAQEAtTaEy0KC8M9l4lSaWHMs4+sVV1LwzyJYiIQNeCrv1HHm/YpGIdY/Z640 ceankjqvix7m2bk4osc6ko8kzyazopoz6gfcokv2pvlukbc+c2imf6klhev6qna8wxhpbrxkw lhdwb2yhwzo7vqvgdrg8sugqqntkyclnltgbjpnp+az72gpo9ahun/ibhfk4ksc8lys2l9gcy 9CsmdKSBP78p9w8Lx7vDLqkDgt1/zBrcUWmSSb7AE/BPEeMryQV1IdI6nlGnBhWkXOYf6GSdayJw 86btuxC7viDKNrbp44HjQRaSxnp6Oeto1x4DfiYdw/YbJFe7EjkxSQBywIDAQABo4IBLjCCASow DwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwgecGA1UdIASBzCBDCB2QYEVR0gADCB 0DCBzQYIKwYBBQUHAgIwgcAagb1UZW50byBjZXJ0aWZpa2F0IGplIHZ5ZGFuIGpha28gaZhbGlm awtvdmfuesbzexn0zw1vdnkgy2vydglmawthdcbwb2rszsb6ywtvbmegyy4gmjilziwmdagu2iu IHYgcGxhdG5lbSB6bmVuaS9UaGlzIGlzIHF1YWxpZmllZCBzeXN0ZW0gY2VydGlmaWNhdGUgYWNj bjkaw5nihrvien6zwnoiefjdcboby4gmjilziwmdagq29sbc4whqydvr0obbyefhnl0cppomdw kxrp01hi4cd94sj7ma0gcsqgsibdqebcwuaa4ibaqb9lau214hyabhpzftbds/2diglwdmdsbj1 OZbJ8LIPBMxYjPoEMqzAR74tw96Ti6aWRa5WdOWaS6I/qibEKFZhJAVXX5mkx2ewGFLJ+0Go+eTx njlonhvf2v2s+57bm8c8j6/bs6ij6dspcheypfjjh64he2r0aspzdjgzkfm6ypqscjn8qye2x1qm GMLQwvNdjG+nPzCJOOuUEypIWt555ZDLXqS5F7ZjBjlfyDZjEfS2Es9Idok8alf56Mi9/o+Ba46 wmyokkp1ilu0rqcajdbliioackdztaqubonu1guzvzv8tumasvzbjel/gab7ectwe1rukrlytgl MKI9 SHA256withRSA Issuer OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Qualified Certification Authority, 09/2009 Subject OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Qualified Certification Authority, 09/2009 Tue Sep 01 02:00:00 CEST 2009 Sun Sep 01 02:00:00 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:B5:6:84:CB:42:82:F0:CF:65:E2:54:9A:58:7:2C:E:EB:15:57:52:F0:CF:22:58:88:84:0D:78:2A:EF:D4:71:E6:FD:8A :46:21:D6:F:67:AE:4:71:E6:A7:92:4:2F:21:7E:E6:DB:70:4A:E0:E4:82:E8:A:BC:91:96:00:DF:A:29:B:E:86:14:2:8A:57:6:EF:2E:E9:1B:7:E7:6:8A:61:7A:90:B1:C4:BF:AA:8D:0:C5:B1:84:F6:D1:DF:12:B0:94:7 0:F0:07:6C:A1:5B:A:B:57:74:15:80:4:46:F:7B:2E:82:A4:27:B4:A6:02:DC:B9:E5:4C:66:C9:A4:D:FE:0:E:F6:82:9:BD:00:75:27:FC:80:61:16:4E:24:B1:CF:25:61:2D:8B:F4:60:B2:F4:2B:26:74:A4:81:F:BF:29:F7:0F :0B:C7:BB:C:2E:A9:0:82:DD:7F:CC:1A:DC:51:69:92:49:BE:C0:1:F0:4F:11:E:2B:C9:05:75:21:D2:A:9E:51:A7:06:15:A4:5C:E6:1F:E8:64:9D:6B:22:70:F:A6:ED:BB:10:BB:BE:20:CA:6:B6:E9:E:81:E:41:16:92:C6 :7A:7A:B:77:AD:A:5C:78:0D:F8:98:77:0F:D8:6C:91:5E:EC:48:E4:C5:24:01:CB:02:0:01:00:01 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 20

21 Basic Constraints IsCA: true Policy OID: CPS text: [Tento certifikat je vydan jako kvalifikovany systemovy certifikat podle zakona c. 227/2000 Sb. v platnem zneni/this is qualified system certificate according to Czech Act No. 227/2000 Coll.] 79:CB:D0:2:E9:A:67:70:91:74:4F:D:51:E2:E0:20:FD:E1:28:FB keycertsign - crlsign Service Status C0:C0:5A:8D:8D:A5:5E:AF:27:AA:9B:91:0B:0A:6E:F0:D8:BB:DE:D:46:92:8D:B8:72:E1:82:C2: 07:E:98:02 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T00:00:00Z Extension (critical): Qualifiers [QCSSCDStatusAsInCert] Qualifier type description [en] it is ensured by the trust service provider and controlled (supervision model) or audited (accreditation model) by the referenced Member State (respectively its Supervisory Body or Accreditation Body) that all Qualified Certificates issued under the service (RootCA/QC or CA/QC) identified in "Service digital identity" and further identified by the filters information used to further identify under the"sdi" identified trust service that precise set of Qualified Certificates for which this additional information is required with regards to the presence or absence of Secure Signature Creation Device (SSCD) support DO contain the machineprocessable information indicating whether or not the Qualified Certificate is supported by an SSCD. Qualifier Criteria list assert=atleastone Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier Service : (9) I.CA - Qualified Time Stamping Authority, ncipher DSE200 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (9) I.CA - Qualified Time Stamping Authority, ncipher DSE200 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 21

22 (9) I.CA - autorita kvalifikovaných časových razítek, ncipher DSE200 Service digital identities Certificate fields details MIIFDDCCA/SgAwIBAgIEAJo2zDANBgkqhkiG9w0BAQUFADBoMQswCQYDVQQGEwJDWjEqMCgGA1UE AwwhSS5DQSAtIFF1YWxpZmllZCByb290IGNlcnRpZmljYXRlMS0wKwYDVQQKDCRQcnZuw60gY2Vy dglmawthxi1uw60gyxv0bjpdgesigeucy4whhcnmdywmjaxmdawmdawwhcnmtewmjaxmdawmdaw WjB+MQswCQYDVQQGEwJDWjEnMCUGA1UEAwweSS5DQSAtIFRpbWUgURhbXBpbmcgQXV0aG9yaXR5 MS0wKwYDVQQKDCRQcnZuw60gY2VydGlmaWthxI1uw60gYXV0bJpdGEsIGEucy4xFzAVBgNVBAsM Dm5DaXBoZXIgRFNFMjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFbYLQl+tUvY ++dg0z4jllkxo89yhta0cfj2ry77rljwvq/z+ntiyuh486shzrwimynxt7j2bhzqr8/4xzkw7vn v5l4zc1zstjxiwzsqhyqpkwh0+odss0bn6nd1po0vqztfqzennw/sblbgzilg7fm2tvawf/8efhi YZ65P0pZPnS2Bbs8hFbhyVRI912O9UbWpxUhkRIELbyGKKBS0J5qqMsFRgzx0vkJQRDb0Iap1UoD 6Iq1ML7TwgSa/H9Zby5im18Ii78sT45ESsNy2YQ0hIHTzeCP7mi6ex1aU9MigOqxBl8FcbOIb1Q jymkyxejlk7ww+ncrn8olawidaqabo4ibpjccaaiwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimigzbgnvhsaegzewgy4wgysgdcsgaqqbgbhiaqqnatb7mhkgccsgaquf BwICMG0aa1RlbnRvIGt2YWxpZmlrbZhbnkgclzdGVtbZ5IGNlcnRpZmlrYXQgVFNBIGplIHZ5 ZGFuIHYgc291bGFkdSBzZSB6YWtvbmVtIGMuIDIyNy8yMDAwIFNiLiB2IHBsYXRuZW0gem5lbmku MB0GA1UdDgQWBBTmfh7VaSxiwPnTJxxV5q0/JmlkjDAfBgNVHSMEGDAWgBRRLl9ZgSX/0f6G6Icu 1o0NWTQrvTCBgQYDVR0fBHoweDAmoCSgIoYgaHR0cDovLFjcmxkcDEuaWNhLmN6LFpY2EwNS5j cmwwjqakockgigh0dha6ly9xyjszhaylmljys5jei9xawnhmduuyjsmcagjkaihibodhrwoi8v cwnybgrwmy5py2euyovcwljyta1lmnybdaybggrbgefbqcbawqmmaowcaygbacorgebma0gcsqg SIbDQEBBQUAA4IBAQBPRRpXGvlbqAhk5tFos10jKQkKaOwUGcOmXatq7AR4nKIPkzGUVKl6SDzq +KS/hhKQ+FzlMHC1Fl8zTvgfqyj14UpTNU0yFNzpG6yRCLkJzIaw5J2szDOwQOqbGzZ18HXc/ogA HYenXtr+goxvOcmpk8mw7wlLcHssSj5hQpf5l97FqARRen0rHW8wgOxdjSycB2Ji/YtywAEUWDiI awmxheranfhsviixyn6h/ceqgykxg4xjdocliwgcpb2m9nhnkymkxwtrwcs+svq2poickjpmwqlw HuoJwyKXhSZa7oCGI7l2g2AicrRbvc6VB8Wk+s/a+E4ZxR4Bd+gdQtWF SHA1withRSA První certifikační autorita, a.s. I.CA - Qualified root certificate Subject OU: ncipher DSE200 První certifikační autorita, a.s. I.CA - Time Stamping Authority Wed Feb 01 01:00:00 CET 2006 Tue Feb 01 01:00:00 CET 2011 Extended Key Usage 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:C4:56:D8:2D:09:7E:B5:4B:D8:FB:E7:60:D:E:09:94:B2:97:A:CF:77:62:14:DA:D0:27:C9:DA:BC:BB:ED:12:C9:C 1:54:F:CF:E9:ED:2:25:21:E:CE:92:87:4:70:8A:6C:8D:5D:E:E:D8:18:7:A9:1F:F:E:16:64:5B:B5:67:BF:92:F8:64:2D:7:49:2:57:2:0C:EC:40:7C:AA:C:A5:A1:D:EA:1D:B1:2D:01:7:A9:C:D6:9:B4:BE:A6:5 :15:06:5E:6:75:BF:48:12:C1:1B:2:0B:1B:B1:4C:DA:D5:5A:59:FF:FC:79:F1:C8:61:9E:B9:F:4A:59:E:74:B6:05:BB:C:84:56:E1:C9:54:48:F7:5D:8E:F5:46:D6:A7:15:21:91:12:04:2D:BC:86:28:A0:52:D0:9E:6A:A8:CB: 05:46:0C:F1:D2:F9:09:41:10:DB:D0:86:A9:D5:4A:0:E8:8A:B5:0:BE:D:C2:04:9A:FC:7F:59:6F:2E:62:9B:5F:08:8B:BF:2C:4F:8E:44:4A:C:72:D9:84:4:84:81:D:CD:E0:8F:EE:68:BA:7B:1D:5A:5:D:22:80:EA:B1:06: 5F:05:71:B:B7:21:BD:50:8F:7C:8C:91:85:DE:8F:79:4A:ED:65:BE:5:CA:E7:F2:82:F7:6B:02:0:01:00:01 id_kp_timestamping Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat TSA je vydan v souladu se zakonem c. 227/2000 Sb. v platnem zneni.] E6:7E:1E:D5:69:2C:62:C0:F9:D:27:1C:55:E6:AD:F:26:69:64:8C Authority Key Identifier 51:2E:5F:59:81:25:FF:D1:FE:86:E8:87:2E:D6:8D:0D:59:4:2B:BD CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 22

23 CRL Distribution Points QCStatements - crit. = false id_etsi_qcs_qccompliance digitalsignature - nonrepudiation Service Status 20:E9:D7:B8:E:BE:1E:B0:BB:FB:CD:EE:B4:4A:9:87:04:F7:49:7F:A4:7:44:C2:12:1A:FB:EC: 5:A4:6A:C7 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T00:00:00Z Service : (10) I.CA - Qualified Time Stamping Authority, Time Stamp Server 1 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (10) I.CA - Qualified Time Stamping Authority, Time Stamp Server 1 (10) I.CA - autorita kvalifikovaných časových razítek, Time Stamp Server 1 Service digital identities Certificate fields details MIIFCjCCA/KgAwIBAgIEAJrUSjANBgkqhkiG9w0BAQUFADBoMQswCQYDVQQGEwJDWjEqMCgGA1UE AwwhSS5DQSAtIFF1YWxpZmllZCByb290IGNlcnRpZmljYXRlMS0wKwYDVQQKDCRQcnZuw60gY2Vy dglmawthxi1uw60gyxv0bjpdgesigeucy4whhcnmdcxmda0mtiwmdawwhcnmtixmda0mtiwmdaw WjB8MQswCQYDVQQGEwJDWjEgMB4GA1UEAwwXVGltZSBTdGFtcGluZyBBdXRobJpdHkxLTArBgNV BAoMJFBydm7DrSBjZXJ0aWZpa2HEjW7DrSBhdXRvcml0YSwgYS5zLjEcMBoGA1UECwwTVGltZSBT dgftccbtzxj2zxigmtccasiwdqyjkozihvcnaqebbqadggepadccaqocggebalmqluts77u7l1 tvegpnggtedhhaohxetoho5uamizeqflkrln51bvfenef8ndxgykfhc0pderd1viccx9xsrhvbx Cmu4nLFWTVHd9giyWFft1jAEYyg/DeSAOw5dEZir61PrkzcuR5K9TOytCqmHBKVkmQBSU0WyKGm wxezz15ngmitxobhbw8q4bm8d4/zjxt0rj7ww/xav+xhchc9zr0t508hralsi+tv/wwvz/cwo qs2m1xf/2bkdy9xpd7vtdmmlgnsoxgufhkqfsuhkmt/oic/ke2yzxj7tb6lvrjxhuvlp1qlakomm 6lde0MB5TuQ1cXaWoA9DrUCAwEAAaOCAaYwggGiMA4GA1UdDwEB/wQEAwIGwDAWBgNVHSUBAf8E DDAKBggrBgEFBQcDCDCBmQYDVR0gBIGRMIGOMIGLBgwrBgEEAYG4SAEEDQIwezB5BggrBgEFBQcC AjBtGmtUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZpa2F0IFRTQSBqZSB2eWRh bib2ihnvdwxhzhugc2ugemfrb25lbsbjliaymjcvmjawmcbtyi4gdibwbgf0bmvtihpuzw5pljad BgNVHQ4EFgQUUg8dzQRsLAN9tHQwfbZUFTiZu0wHwYDVR0jBBgwFoAUUS5fWYEl/9H+huiHLtaN DVk0K70wgYEGA1UdHwR6MHgwJqAkoCKGIGh0dHA6Ly9xYJsZHAxLmljYS5jei9xaWNhMDUuYJs MCagJKAihiBodHRwOi8vcWNybGRwMi5pY2EuYovcWljYTA1LmNybDAmoCSgIoYgaHR0cDovLFj cmxkcdmuawnhlmn6lfpy2ewns5jcmwwgayikwybbquhaqmeddakmaggbgqajkybatanbgkqhkig 9w0BAQUFAAOCAQEAEvbKCNpoxoJ9W5nAxXTxWaxF4OPQOqanKOG/Z8xTkHG684Pq8eKK1Voweo/ QALOBu9j17NpnhwT/SvaFBJjQyqORVeX0IUIgRdjHuMQeaequLsqDUSMzjYAuPZv4Ezod2YmlSY /h/m98co8q6b0ffmeu8udqra4u0rysbw8/o0ac/5fx8/er1l9riu2z29um0vclpcdbgctbmy84sk fmz5i40xqkwzdedz1sqjadfxcrz+/tm5aihczd4rleccspj/vnkhrfirttusvyhn0fmwubh4kw e6fmpkfocdsksidq18fvbxmiqyltoixerqjddreqrkblcfbsv4pa== SHA1withRSA CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 2

24 První certifikační autorita, a.s. I.CA - Qualified root certificate Subject OU: Time Stamp Server 1 První certifikační autorita, a.s. Time Stamping Authority Thu Oct 04 14:00:00 CEST 2007 Thu Oct 04 14:00:00 CEST 2012 Extended Key Usage 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:B9:AA:2E:E4:D2:EF:BD:EE:EC:BD:F5:B5:57:86:A4:D1:86:B5:E7:47:84:0:87:5C:4B:68:DE:1:B9:50:0:22:CC:44 :05:2E:44:65:9F:9D:41:BC:57:8D:78:5F:0D:77:11:B2:29:F8:5C:D2:97:44:AD:DD:6F:21:C0:B1:F5:7B:2B:86:F6:F1:0A:6B:B8:9C:B1:56:4D:51:DD:F6:08:B2:58:57:ED:D6:0:04:6:2D:E0:FC:7:92:00:EC:9:74:46:62:AF:A D:4F:AE:4C:DC:B9:1E:4A:F5::B2:B4:2A:A6:1C:12:95:92:64:01:49:4D:16:C8:A1:A6:C1:71::67:5E:67:80:C8:AD:5E:80:61:05:6F:10:E0:1:C:DC:E:F:CC:95:ED:D2:B2:7B:DF:05:BF:C5:AB:FE:5E:17:21:0B:D6:51: D1:E:74:F2:1A:C0:2E:C8:BE:B5:5F:F7:59:6B:D9:FC:2C:0E:AA:CD:8C:D7:17:FF:D8:12:8:6:D5:CF:77:BB:D:74:C:0B:80:D4:A8:5C:6B:9F:84:A4:1F:49:41:E4:2:DF:CE:88:2F:CA:7B:6C:99:5E:E:ED:07:A2:D5:AC: 95:E1:51:59:69:D6:A9:5A:90:E9:8C:EA:57:5E:D0:C0:79:DD:B:90:D5:C5:DA:5A:80:D:0E:B5:02:0:01:00:01 id_kp_timestamping Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat TSA je vydan v souladu se zakonem c. 227/2000 Sb. v platnem zneni.] 52:0F:1D:CD:04:6C:2C:0:7D:B7:71:D0:C1:F6:D9:50:54:E2:66:ED Authority Key Identifier 51:2E:5F:59:81:25:FF:D1:FE:86:E8:87:2E:D6:8D:0D:59:4:2B:BD CRL Distribution Points QCStatements - crit. = false id_etsi_qcs_qccompliance digitalsignature - nonrepudiation Service Status 00:87:62:1:F0:D:D0:5B:1D:55:7A:FB:F5:1A:60:6A:88:4D:F7:C8:8E:FE:A4:0E:02:D5:4F:D6:87: A9:B0:80 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T12:00:00Z CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 24

25 1.7 - Service : (12) I.CA - Qualified Time Stamping Authority, Time Stamp Server 2 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (12) I.CA - Qualified Time Stamping Authority, Time Stamp Server 2 (12) I.CA - autorita kvalifikovaných časových razítek, Time Stamp Server 2 Service digital identities Certificate fields details MIIFCjCCA/KgAwIBAgIEAJrt0jANBgkqhkiG9w0BAQUFADBoMQswCQYDVQQGEwJDWjEqMCgGA1UE AwwhSS5DQSAtIFF1YWxpZmllZCByb290IGNlcnRpZmljYXRlMS0wKwYDVQQKDCRQcnZuw60gY2Vy dglmawthxi1uw60gyxv0bjpdgesigeucy4whhcnmdcxmtiwmtuwmdawwhcnmtixmtiwmtuwmdaw WjB8MQswCQYDVQQGEwJDWjEgMB4GA1UEAwwXVGltZSBTdGFtcGluZyBBdXRobJpdHkxLTArBgNV BAoMJFBydm7DrSBjZXJ0aWZpa2HEjW7DrSBhdXRvcml0YSwgYS5zLjEcMBoGA1UECwwTVGltZSBT dgftccbtzxj2zxigmjccasiwdqyjkozihvcnaqebbqadggepadccaqocggebamycbm+sgquxgbe NRsQfWM+ai6k8YixTtYmY/oMHiMkYpkW66SMrRzQmSoHZGcD+MhD6AvLcBe2LAPZtGrxzVOoFd4 KCYE4XGYOjPYE6emBv8VhCUyYr7NZobQAAc2KaQnBCoCy0XPMsKRRkTGXwe57qGBODiRfcYl6TG KwssyGXfqyUiQb5dhAvYrZxTd+HEmqlahTvKV0pMYepBXdvDWvmXKXmGU1zbpLXxVpAx5n0PRh/F UQCDazXzdBowQ1nFmT0KR1ZYibqPPT0kJSo2Me+Fa09XC9B4dzLYvAuExjq4SeMwI7rHgWEPltPP GwtJ+DDquToP97MfT6PInuMCAwEAAaOCAaYwggGiMA4GA1UdDwEB/wQEAwIGwDAWBgNVHSUBAf8E DDAKBggrBgEFBQcDCDCBmQYDVR0gBIGRMIGOMIGLBgwrBgEEAYG4SAEEDQIwezB5BggrBgEFBQcC AjBtGmtUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZpa2F0IFRTQSBqZSB2eWRh bib2ihnvdwxhzhugc2ugemfrb25lbsbjliaymjcvmjawmcbtyi4gdibwbgf0bmvtihpuzw5pljad BgNVHQ4EFgQUMygooX8BhwzSSrGDXpcF1jpF5AwHwYDVR0jBBgwFoAUUS5fWYEl/9H+huiHLtaN DVk0K70wgYEGA1UdHwR6MHgwJqAkoCKGIGh0dHA6Ly9xYJsZHAxLmljYS5jei9xaWNhMDUuYJs MCagJKAihiBodHRwOi8vcWNybGRwMi5pY2EuYovcWljYTA1LmNybDAmoCSgIoYgaHR0cDovLFj cmxkcdmuawnhlmn6lfpy2ewns5jcmwwgayikwybbquhaqmeddakmaggbgqajkybatanbgkqhkig 9w0BAQUFAAOCAQEAZAwj1ACoHsIXSGII/ETo9vqHWVZximMwOIjkZ5rr8tDrTro6VEXuhHzDcRlp CWwwIejd4rIHKUhweykuAFVwEHFhMUjUiXkeb8GN17cr4IHyTPHkvcIJB0UkE54IOfj877pD06e /DjHFGnukKfcHqtv7tu0BKjHYyNiIkt1mDa9NjE05PuaNOv4X0iW6LqQXdfFRqnGPeXQ9Gx9hxRZ qnf9jeie4pm1xcjbqz70rkijyatqmsuw9yfwv8+ruegu+zknu5wnphktv7ghckdq/vtbf0ghy0v qqdrd8spvunlyd7to9dczdv+zambx7ltceklrrlrcv7izqa2qdw+w== SHA1withRSA První certifikační autorita, a.s. I.CA - Qualified root certificate Subject OU: Time Stamp Server 2 První certifikační autorita, a.s. Time Stamping Authority Tue Nov 20 16:00:00 CET 2007 Tue Nov 20 16:00:00 CET :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:CC:82:6E:6F:AC:19:0B:B1:18:11:7:5:1B:10:7D:6:E:6A:2E:A4:F1:88:B1:4E:D6:26:6:FA:0C:1E:2:24:62:99:16 :EB:A4:8C:AD:1C:D0:99:2A:07:64:67:0:F8:C8:4:E8:0B:CB:70:17:B6:2C:0:D9:B4:6A:F7:C7:5:4E:A0:57:78:28:26:04:E1:71:98:A::D8:1:A7:A6:06:FF:15:DE:10:94:C9:8A:FB:5:9A:1B:40:00:1C:D8:A6:90:9C:10: A8:0B:2D:17:C:CB:0A:45:19:1:19:7C:1E:E7:BA:86:04:E0:E2:45:F7:18:97:A4:C6:2B:0B:2C:C8:65:DF:AB:25:22:41:BE:5D:84:0B:D8:AD:9C:5:77:E1:C4:9A:A9:5A:85:B:CA:57:4A:4C:61:EA:41:5D:DB:C:5A:F9:97:2 9:79:86:5:5C:DB:A4:B5:F1:56:90:1:E6:7D:0F:46:1F:C5:51:00:8:6B:5:F:74:1A:0:4:59:C5:99:D:0A:47:56:58:89:BA:8F:D:D:24:25:2A:6:1:EF:85:6B:4F:57:0B:D0:78:77:2:D8:BC:0B:84:C6:A:B8:49:E:0:2: BA:C7:81:61:0F:96:D:CF:1B:0B:49:F8:0:EA:B9:A:0F:F7:B:1F:4F:A:C8:9E:E:02:0:01:00:01 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 25

26 Extended Key Usage id_kp_timestamping Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat TSA je vydan v souladu se zakonem c. 227/2000 Sb. v platnem zneni.] :28:28:A1:7F:01:87:0D:F:49:2A:C6:0D:7A:5C:17:58:E9:17:90 Authority Key Identifier 51:2E:5F:59:81:25:FF:D1:FE:86:E8:87:2E:D6:8D:0D:59:4:2B:BD CRL Distribution Points QCStatements - crit. = false id_etsi_qcs_qccompliance digitalsignature - nonrepudiation Service Status 61:B7:8A:D:94:57:66:67:5E:A:5F:F6:2F:B1:FF:A0:41:01:8B:9E:16:1E:E4:D7:98:A6:CF:28:FD: F:82:E4 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T15:00:00Z Service : (17) I.CA - Time Stamping Authority, TSS/TSU 1, 12/2009 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (17) I.CA - Time Stamping Authority, TSS/TSU 1, 12/2009 (17) I.CA - autorita časových razítek, TSS/TSU 1, 12/2009 Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 26

27 MIIGPDCCBSSgAwIBAgIEAKB5TDANBgkqhkiG9w0BAQsFADCBtzELMAkGA1UEBhMCQ1oxOjA4BgNV BAMMMUkuQ0EgLSBRdWFsaWZpZWQgQ2VydGlmaWNhdGlvbiBBdXRobJpdHksIDA5LzIwMDkxLTAr BgNVBAoMJFBydm7DrSBjZXJ0aWZpa2HEjW7DrSBhdXRvcml0YSwgYS5zLjE9MDsGA1UECww0SS5D QSAtIEFjYJlZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczAeFw0wOTEy MjEwMDAwMDBaFw0xNDEyMjEwMDAwMDBaMIG4MQswCQYDVQQGEwJDWjE7MDkGA1UEAwwySS5DQSAt IFRpbWUgURhbXBpbmcgQXV0aG9yaXR5LCBUU1MvVFNVIDEsIDEyLzIwMDkxLTArBgNVBAoMJFBy dm7drsbjzxj0awzpa2hejw7drsbhdxrvcml0yswgys5zlje9mdsga1uecww0ss5dqsatiefjyjl ZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAOAL09Bu7aBb8ATwFuENJGts+1qKlrfSqeF5YxXLgaPJNqG2JBRIkw Aix9kybMMf1H2RKzW0JNf80xTY5Mi/IcvCuxazysIS/QQ5RJH/Pf2H9a1ULUKZNyAOgjr90eOUW NiRLUTHyIHWOBaKBdmd08lkHWMC9iAp5rMDLBU5RFfSfePxur/t5MfqJuPxL22SlRQ/GGA84bF MFuHbs8ipZjgG5pKQ7F5fAV/sF8aXACQfAVsvExIDCz4U9W8TNNtmTTOS5zeDCRyQOD0LMmfYV hjz/pmdzb8jentrjgbkfkh9i0cnrvx9r16ljtwevoubxcio+67ait8oqjdkcaweaaaocakswggjh MA4GA1UdDwEB/wQEAwIGwDAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDCCAQEGA1UdIASB+TCB9jCB 4gYNKwYBBAGBuEgBAQoDATCB0DCBzQYIKwYBBQUHAgIwgcAagb1UZW50byBjZXJ0aWZpa2F0IGpl IHZ5ZGFuIGpha28gaZhbGlmaWtvdmFueSBzeXN0ZW1vdnkgY2VydGlmaWthdCBwb2RsZSB6YWtv bmegyy4gmjilziwmdagu2iuihygcgxhdg5lbsb6bmvuas9uaglziglzihf1ywxpzmllzcbzexn0 ZW0gY2VydGlmaWNhdGUgYWNjbJkaW5nIHRvIEN6ZWNoIEFjdCBOby4gMjILzIwMDAgQ29sbC4w DwYNK4EekZmEBQAAAAECAjAdBgNVHQ4EFgQUATQz1VE9CEHWLuddiAOe8EGLXzYwHwYDVR0jBBgw FoAUecvQI+k6ZCRdE/TUeLgIPhKPswgYEGA1UdHwR6MHgwJqAkoCKGIGh0dHA6Ly9xYJsZHAx LmljYS5jei9xaWNhMDkuYJsMCagJKAihiBodHRwOi8vcWNybGRwMi5pY2EuYovcWljYTA5LmNy bdamocsgioygahr0cdovlfjcmxkcdmuawnhlmn6lfpy2ewos5jcmwwgayikwybbquhaqmeddak MAgGBgQAjkYBATA6BggrBgEFBQcBAQQuMCwwKgYIKwYBBQUHMAKGHmh0dHA6Ly9xLmljYS5jei9j YV9uYnVzcjA5LnAYzANBgkqhkiG9w0BAQsFAAOCAQEACdsiKRUQMBfhs+QyPxrRV5DMZ4f4rA j7cwxu9jjl4ezejhmg7gurnwymm9ijncmjoz+u9i7dmuf6fflsrnxnfeepxua1+qrmhqc1q41na OFuVtNpqHZHKRVx8AmfYaN85oeH47P1yfWM4U6G8H+lbGoAXCWPpUD9A9QRX8/oZZfjQAj+6Dt TcM/SRfN8M2E6NUtRHWDWGNZ9gpFSsp0PIdZaw+NVyOSt5Lqcnfr/CS7rKNqcR6jnbmfxrcdf zklhv2zyahgpqkrdxtl56+8gzz1kmquosf2yxkqhmmv+dpyil4dafajqwgax01ra5lu+xtgocidq pd7o4g== SHA256withRSA Issuer OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Qualified Certification Authority, 09/2009 Subject OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Time Stamping Authority, TSS/TSU 1, 12/2009 Mon Dec 21 01:00:00 CET 2009 Sun Dec 21 01:00:00 CET 2014 Extended Key Usage 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:E0:0B:DF:7D:D:06:EE:DA:05:BF:00:4F:01:6E:10:D2:46:B6:CF:B5:A8:A9:6B:7D:2A:9E:17:96:1:5C:B8:1A:C:9 :6A:1B:62:41:44:89:0:02:2C:7D:9:26:CC:1:FD:47:D9:12:B:5B:42:4D:7F:CD:1:4D:8E:4C:8B:F2:1C:BC:2B:B1:6B:C:AC:21:2F:D0:4:94:49:1F:F:DF:D8:7F:5A:D5:42:D4:29:9:72:00:E8:2:AF:DD:1E:9:45:B7:6: 24:4B:51:1:F2:20:75:8E:05:A2:81:76:67:77:D:C9:64:1D:6:02:F6:20:29:E6:B:0:2C:1D:D4:E5:11:5F:49:F7:8F:C6:EA:FF:B7:9:1F:A8:9B:8F:C4:BD:B6:4A:54:50:FC:61:80:F:86:C5:0:5B:87:6E:CF:22:A5:98:E0:1B:9 A:4A:4:B1:79:7C:05:7F:B0:5F:1A:5C:00:90:7C:05:6C:BC:4C:48:0C:2C:F8:5:D5:BC:4C:D:6D:99:4:CE:4B:7E:7:78:0:91:C9:0:8:D0:B:26:7D:8D:D5:86:6:7F:E:67:7:07:C2:44:5:4:6:81:B2:85:92:1F:48:D0:2 9:EB:BF:1F:6B:D7:A9:49:B7:07:AF:9:40:71:08:8:BE:EB:B6:A2:B7:C:90:8C:9:02:0:01:00:01 id_kp_timestamping Policy OID: CPS text: [Tento certifikat je vydan jako kvalifikovany systemovy certifikat podle zakona c. 227/2000 Sb. v platnem zneni/this is qualified system certificate according to Czech Act No. 227/2000 Coll.] Policy OID: :4::D5:51:D:08:41:D6:2E:E7:5D:88:0:9E:F0:41:8B:5F:6 Authority Key Identifier 79:CB:D0:2:E9:A:67:70:91:74:4F:D:51:E2:E0:20:FD:E1:28:FB CRL Distribution Points CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 27

28 QCStatements - crit. = false id_etsi_qcs_qccompliance Authority Info Access digitalsignature - nonrepudiation Service Status D:FD:94:CE:11:B8:BE:C7:E7:B0:8F:C0:65:D5:1:A:12:07:E8:4D:4E:69:A5:07:05:94:21:C7:2E: 80:C:FC Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T00:00:00Z Service : (18) I.CA - Time Stamping Authority, TSS/TSU 2, 12/2009 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (18) I.CA - Time Stamping Authority, TSS/TSU 2, 12/2009 (18) I.CA - autorita časových razítek, TSS/TSU 2, 12/2009 Service digital identities Certificate fields details MIIGPDCCBSSgAwIBAgIEAKB5TTANBgkqhkiG9w0BAQsFADCBtzELMAkGA1UEBhMCQ1oxOjA4BgNV BAMMMUkuQ0EgLSBRdWFsaWZpZWQgQ2VydGlmaWNhdGlvbiBBdXRobJpdHksIDA5LzIwMDkxLTAr BgNVBAoMJFBydm7DrSBjZXJ0aWZpa2HEjW7DrSBhdXRvcml0YSwgYS5zLjE9MDsGA1UECww0SS5D QSAtIEFjYJlZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczAeFw0wOTEy MjEwMDAwMDBaFw0xNDEyMjEwMDAwMDBaMIG4MQswCQYDVQQGEwJDWjE7MDkGA1UEAwwySS5DQSAt IFRpbWUgURhbXBpbmcgQXV0aG9yaXR5LCBUU1MvVFNVIDIsIDEyLzIwMDkxLTArBgNVBAoMJFBy dm7drsbjzxj0awzpa2hejw7drsbhdxrvcml0yswgys5zlje9mdsga1uecww0ss5dqsatiefjyjl ZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAMyaXZ79ae2fhC7CENUiSGlE9DDQvUWvEdQAV5eT+5SSK8lxaEgAPJ TF/BVhbx0d2icjmkBjjTluzUYls8cLOppCMB4xsMZ8D9BESAnfAxhbnpDiTOA5oZEPGJOgxTd NrAHG1c5oEh8gZxFmlx9iSeaXHcNUymbpP1XiO9sKnO+omrDbwyyBPCjDcl4z8Ms5X4xehofb QR/JQmu8bOCdlim7+t7V6Xoa0fjzivFlFOCQE4CIZHD9jKXi1k+kF9k2eUdS2jDFFxkKPogD2aMJ cyefczdr69jbo6uq6yac24ztphvm1kn5srlotzjrcg9jheq82gjm0mckmkcaweaaaocakswggjh MA4GA1UdDwEB/wQEAwIGwDAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDCCAQEGA1UdIASB+TCB9jCB 4gYNKwYBBAGBuEgBAQoDATCB0DCBzQYIKwYBBQUHAgIwgcAagb1UZW50byBjZXJ0aWZpa2F0IGpl IHZ5ZGFuIGpha28gaZhbGlmaWtvdmFueSBzeXN0ZW1vdnkgY2VydGlmaWthdCBwb2RsZSB6YWtv bmegyy4gmjilziwmdagu2iuihygcgxhdg5lbsb6bmvuas9uaglziglzihf1ywxpzmllzcbzexn0 ZW0gY2VydGlmaWNhdGUgYWNjbJkaW5nIHRvIEN6ZWNoIEFjdCBOby4gMjILzIwMDAgQ29sbC4w DwYNK4EekZmEBQAAAAECAjAdBgNVHQ4EFgQUQvRV9kgkFHMHddWHurnCPvALEyowHwYDVR0jBBgw FoAUecvQI+k6ZCRdE/TUeLgIPhKPswgYEGA1UdHwR6MHgwJqAkoCKGIGh0dHA6Ly9xYJsZHAx LmljYS5jei9xaWNhMDkuYJsMCagJKAihiBodHRwOi8vcWNybGRwMi5pY2EuYovcWljYTA5LmNy bdamocsgioygahr0cdovlfjcmxkcdmuawnhlmn6lfpy2ewos5jcmwwgayikwybbquhaqmeddak MAgGBgQAjkYBATA6BggrBgEFBQcBAQQuMCwwKgYIKwYBBQUHMAKGHmh0dHA6Ly9xLmljYS5jei9j YV9uYnVzcjA5LnAYzANBgkqhkiG9w0BAQsFAAOCAQEAf9dNpnT6fkvVJJ1ZGwhv97XvszI+ZAA Rvo0RBvKkkM5+Fa8lP14qxlZZIV8bw460gG1kijH/sfodWDjeFhwTqIiRNky+PRo6YqeEf95/Mm usnoyuecniyzdqk4nhwnq7ls+ybbsoeeeybsdhma7ampshp11juyiwkllykt2ku+vpacyy0vtlf K+A7EHka+Y4Zst0B0qxfubqnu58lDKrsimicqy2fAZCoSl/51/RQJsD7RR0BngjJB0zDwiHvhp 8BzpKLK72qKKmgESZy8kVgxJydCp/N6278pMtTw0Eodh/m5j7GlzQXpBMwfUnhZnvwxoZNTeK8 KeWrtA== SHA256withRSA Issuer OU: I.CA - Accredited Provider of Certification Services CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 28

29 První certifikační autorita, a.s. I.CA - Qualified Certification Authority, 09/2009 Subject OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Time Stamping Authority, TSS/TSU 2, 12/2009 Mon Dec 21 01:00:00 CET 2009 Sun Dec 21 01:00:00 CET 2014 Extended Key Usage 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:CC:9A:5D:9E:FD:69:ED:9F:84:2E:F7:08:4:54:89:21:A5:1:D0:C:42:F5:16:BC:47:50:01:5E:5E:4F:EE:52:48:AF:25 :C5:A1:7:80:0:C9:4C:5F:C1:56:16:F1:D1:DD:A2:72:9:A4:06:8:D:96:EC:D4:62:5B:C:70:B:A9:A4:2:01:E:1B:0C:67:C0:FD:DF:70:44:48:09:DF:0:18:5B:9E:90:E2:4C:E0:9:A1:91:0F:18:9:A0:DF:14:DD:6:B0: 7:1C:6D:5C:E6:81:21:F:78:19:C4:59:A5:C7:D8:92:79:A5:C7:70:D5:2:99:BA:4F:D5:78:8E:F6:C2:A7:B:EA:26:AC:D:DB:C:2C:81:C:28:C:72:5E::F0:CB:9:5F:8C:5E:86:87:DB:41:1F:C9:42:6B:BC:6C:E0:9D:96:2 9:BB:FA:DE:D5:E9:7A:1A:D1:F8:F:8A:F1:65:14:E0:90:1:80:88:64:70:FD:8C:A5:E2:D6:4F:A4:17:D9:6:79:47:52:DA:0:C5:17:19:0A:E:88:0:D9:A:09:7:21:05:0B:7:6B:EB:D8:C1:B:AB:90:E9:86:82:DB:86:5:C :75:4C:D4:A:79:4A:B2:E8:4F:8:D1:0A:0F:6:85:ED:D0:F:61:A:9B:4:02:92:69:02:0:01:00:01 id_kp_timestamping Policy OID: CPS text: [Tento certifikat je vydan jako kvalifikovany systemovy certifikat podle zakona c. 227/2000 Sb. v platnem zneni/this is qualified system certificate according to Czech Act No. 227/2000 Coll.] Policy OID: :F4:55:F6:48:24:14:7:07:75:D5:87:BA:B9:C2:E:F0:0B:1:2A Authority Key Identifier 79:CB:D0:2:E9:A:67:70:91:74:4F:D:51:E2:E0:20:FD:E1:28:FB CRL Distribution Points QCStatements - crit. = false id_etsi_qcs_qccompliance Authority Info Access digitalsignature - nonrepudiation Service Status 2B:97:10:EC:C9:E7:5B:FA:7:AB:5:5C:18:FB:C9:58:7:A5:66:40:61:4D:A4:AA:12:A5:21:F9:9E :1B:E:E CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 29

30 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T00:00:00Z Service : (19) I.CA - Time Stamping Authority, TSS/TSU, 12/2009 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (19) I.CA - Time Stamping Authority, TSS/TSU, 12/2009 (19) I.CA - autorita časových razítek, TSS/TSU, 12/2009 Service digital identities Certificate fields details MIIGPDCCBSSgAwIBAgIEAKB5TjANBgkqhkiG9w0BAQsFADCBtzELMAkGA1UEBhMCQ1oxOjA4BgNV BAMMMUkuQ0EgLSBRdWFsaWZpZWQgQ2VydGlmaWNhdGlvbiBBdXRobJpdHksIDA5LzIwMDkxLTAr BgNVBAoMJFBydm7DrSBjZXJ0aWZpa2HEjW7DrSBhdXRvcml0YSwgYS5zLjE9MDsGA1UECww0SS5D QSAtIEFjYJlZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczAeFw0wOTEy MjEwMDAwMDBaFw0xNDEyMjEwMDAwMDBaMIG4MQswCQYDVQQGEwJDWjE7MDkGA1UEAwwySS5DQSAt IFRpbWUgURhbXBpbmcgQXV0aG9yaXR5LCBUU1MvVFNVIDMsIDEyLzIwMDkxLTArBgNVBAoMJFBy dm7drsbjzxj0awzpa2hejw7drsbhdxrvcml0yswgys5zlje9mdsga1uecww0ss5dqsatiefjyjl ZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAJYUOQ0JlJbW1qvziyE4OiAjWabAjj0qHD4FRSAW48e0Pq4jGia48Z8s 6hRXyU5TXJUTeYJ5wr6J9wU2/lZJBfffhFXHJwhhOZl++msbWokHi6xaUHO7sD1n5ec4deygmEnT i776kozr6om8za64vsfnslggvexyhknbcuiy01s+x/2roo+qmtxqqhgpcs96r6pbjeekhwnscr lnlxowznodhexajlvkion02rvuvkivehkxnylz5eloehfextfrob851alr7kssbgeqdstutltjzz nziv1rwu1sue85s/l0b/zxqahzs2ihhoh2xk5d1kqx16ujutidruzckfvscaweaaaocakswggjh MA4GA1UdDwEB/wQEAwIGwDAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDCCAQEGA1UdIASB+TCB9jCB 4gYNKwYBBAGBuEgBAQoDATCB0DCBzQYIKwYBBQUHAgIwgcAagb1UZW50byBjZXJ0aWZpa2F0IGpl IHZ5ZGFuIGpha28gaZhbGlmaWtvdmFueSBzeXN0ZW1vdnkgY2VydGlmaWthdCBwb2RsZSB6YWtv bmegyy4gmjilziwmdagu2iuihygcgxhdg5lbsb6bmvuas9uaglziglzihf1ywxpzmllzcbzexn0 ZW0gY2VydGlmaWNhdGUgYWNjbJkaW5nIHRvIEN6ZWNoIEFjdCBOby4gMjILzIwMDAgQ29sbC4w DwYNK4EekZmEBQAAAAECAjAdBgNVHQ4EFgQUKCcTR2PUTHVNlYI84SqxTHsA8wHwYDVR0jBBgw FoAUecvQI+k6ZCRdE/TUeLgIPhKPswgYEGA1UdHwR6MHgwJqAkoCKGIGh0dHA6Ly9xYJsZHAx LmljYS5jei9xaWNhMDkuYJsMCagJKAihiBodHRwOi8vcWNybGRwMi5pY2EuYovcWljYTA5LmNy bdamocsgioygahr0cdovlfjcmxkcdmuawnhlmn6lfpy2ewos5jcmwwgayikwybbquhaqmeddak MAgGBgQAjkYBATA6BggrBgEFBQcBAQQuMCwwKgYIKwYBBQUHMAKGHmh0dHA6Ly9xLmljYS5jei9j YV9uYnVzcjA5LnAYzANBgkqhkiG9w0BAQsFAAOCAQEAatPcx5bBmdgcFlZKgCyVdFgtb7mVer WBL2d2MS4ZnFpBatSLCQKaPEVHX9JpUnso4hLyB/JzuudaWolyTUd4hXnpi7ECIO5O9cURaSPejf 5czfSqTFh2+NxbPHcCQ9uVZ8jM9TwO7kzNeK0gRVtAf+FOnBxT74ZY1P6L6ongNHP/VSONHVvU jt6yqokrza2harbhyqeels8duu7+lf1m0sufwkbsibs2mj9akgi64baprifqgknetxnnzcj2lh zqtef0bydunnyzxofzmqgitodpzvsqf5gpwf5hmxb1o6df2/4+gsxwoxisbvbpcbvhktqkkl9zs bkgrra== SHA256withRSA Issuer OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Qualified Certification Authority, 09/2009 Subject OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Time Stamping Authority, TSS/TSU, 12/2009 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 0

31 Mon Dec 21 01:00:00 CET 2009 Sun Dec 21 01:00:00 CET 2014 Extended Key Usage 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:96:14:9:0D:09:94:96:D6:D6:AB:F:8B:21:8:A:20:2:59:A6:C0:8E:D:2A:1C:E:05:45:20:16:E:C7:B4:E:AE:2 :1A:26:B8:F1:9F:2C:EA:14:57:C9:4E:5:5C:95:1:79:82:79:C2:BE:89:F7:05:6:FE:56:49:05:F7:DF:84:55:C7:27:08:61:9:99:7E:FA:6B:1B:5A:89:07:8B:AC:5A:50:7:BB:B0:D:67:E5:E7:8:75:EC:A0:98:49:D:8B:BD:F B:EA:4A::DD:1E:A8::CC:C0:EB:85:6C:7E:7B:0B:82:05:44:5F:28:64:5:B7:14:21:8D:5:B:EC:7F:DA:BA:0E:F9:09:9:5D:0A:87:80:F7:12:F7:AA:FA:A5:B2:5E:78:A8:70:9E:C0:91:96:72:F1:9:66:4D:A0:1:C4:5C:0 2:4B:54:A8:8E:9F:4D:AB:55:4B:E4:21:57:A1:9:19:F2:2F:E:44:2E:87:A1:15:E5:D:7E:B:9B:F:9D:5A:2E:BE:CA:B1:26:C6:11:00:D2:B6:EB:4B:4E:C:D9:9F:8:AF:D5:1C:2E:D6:CB:84:F:94:BF:97:4D:C1:FF:5:EA: 00:7C:D2:DA:21:E1:8:7D:B1:9:90:F5:2A:A5:F5:EA:E8:EE:B4:80:EB:5:0:8A:15:5B:02:0:01:00:01 id_kp_timestamping Policy OID: CPS text: [Tento certifikat je vydan jako kvalifikovany systemovy certifikat podle zakona c. 227/2000 Sb. v platnem zneni/this is qualified system certificate according to Czech Act No. 227/2000 Coll.] Policy OID: :27:1:47:6:D4:4F:71:D5:6:56:08:DF:CE:12:AB:14:C7:B0:0F Authority Key Identifier 79:CB:D0:2:E9:A:67:70:91:74:4F:D:51:E2:E0:20:FD:E1:28:FB CRL Distribution Points QCStatements - crit. = false id_etsi_qcs_qccompliance Authority Info Access digitalsignature - nonrepudiation Service Status 7D:55:1:DA:0E:92:08:25:88:6B:5D:C:F4:C:81:96:A5:2C:99:41:0:B:FD:1:07:E4:8:A:40:B D:45:BA Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T00:00:00Z Service : (4) I.CA - Time Stamping Authority, TSS/TSU 1, 12/2011 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 1

32 (4) I.CA - Time Stamping Authority, TSS/TSU 1, 12/2011 (4) I.CA - autorita časových razítek, TSS/TSU 1, 12/2011 Service digital identities Certificate fields details MIIGIjCCBQqgAwIBAgIEAKMLjzANBgkqhkiG9w0BAQsFADCBtzELMAkGA1UEBhMCQ1oxOjA4BgNV BAMMMUkuQ0EgLSBRdWFsaWZpZWQgQ2VydGlmaWNhdGlvbiBBdXRobJpdHksIDA5LzIwMDkxLTAr BgNVBAoMJFBydm7DrSBjZXJ0aWZpa2HEjW7DrSBhdXRvcml0YSwgYS5zLjE9MDsGA1UECww0SS5D QSAtIEFjYJlZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczAeFw0xMTEy MjEwMDAwMDBaFw0xNjEyMjEwMDAwMDBaMIG4MQswCQYDVQQGEwJDWjE7MDkGA1UEAwwySS5DQSAt IFRpbWUgURhbXBpbmcgQXV0aG9yaXR5LCBUU1MvVFNVIDEsIDEyLzIwMTExLTArBgNVBAoMJFBy dm7drsbjzxj0awzpa2hejw7drsbhdxrvcml0yswgys5zlje9mdsga1uecww0ss5dqsatiefjyjl ZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAMUqG0g6Eq4K04wfhbb6kHD0wcxFyO2xFv/tX2neJFX0K0ZGtaBX9Sv IOgiga86UOOSTT8BlcpfF5VZ+njXlv6+suimf8M5Kvd199+O9QA7My55Pfbaq8aDcs82ism8ze7c 4bI07iVULlRAzNl1bwE2ose1vaIqPGbCBmsqR5Z5tJo41d2FkFsg6W01paWrgpBCnamS2FTV9u ViAYQKV8CDaAIFHzqwTYtq6Dwb//MBLAfSlY2V9ykZsRbImZ1hSbI0oP8A+QSFbCEGqQLO4i8X Ijg5BSdNPh59TFuWWiPQuzzC10GX6qCaO4ZguMddKEd5Ci/6eZ9spqRF2zcCAwEAAaOCAjEwggIt MA4GA1UdDwEB/wQEAwIGwDAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDCCAQEGA1UdIASB+TCB9jCB 4gYNKwYBBAGBuEgBAQoDAjCB0DCBzQYIKwYBBQUHAgIwgcAagb1UZW50byBjZXJ0aWZpa2F0IGpl IHZ5ZGFuIGpha28gaZhbGlmaWtvdmFueSBzeXN0ZW1vdnkgY2VydGlmaWthdCBwb2RsZSB6YWtv bmegyy4gmjilziwmdagu2iuihygcgxhdg5lbsb6bmvuas9uaglziglzihf1ywxpzmllzcbzexn0 ZW0gY2VydGlmaWNhdGUgYWNjbJkaW5nIHRvIEN6ZWNoIEFjdCBOby4gMjILzIwMDAgQ29sbC4w DwYNK4EekZmEBQAAAAECAjAdBgNVHQ4EFgQUvPd0KSCY02mVVxsZS+QOuG4+sNYwHwYDVR0jBBgw FoAUecvQI+k6ZCRdE/TUeLgIPhKPswgYEGA1UdHwR6MHgwJqAkoCKGIGh0dHA6Ly9xYJsZHAx LmljYS5jei9xaWNhMDkuYJsMCagJKAihiBodHRwOi8vcWNybGRwMi5pY2EuYovcWljYTA5LmNy bdamocsgioygahr0cdovlfjcmxkcdmuawnhlmn6lfpy2ewos5jcmwwogyikwybbquhaqeeljas MCoGCCsGAQUFBzAChh5odHRwOi8vcS5pY2EuYovY2FfbmJ1cIwOS5wN2MwDQYJKoZIhvcNAQEL BQADggEBAEf4uDT9qAWOEcLma46w9RDcdblvSKn16/lDgSXs0TcbIbNT8qT4Ob+t00D+zDbqgjG H1yLgkW2/2BwTitGgAAxkNbOKYljJhiYtMgIxKKySj5ACrxwN2/fC7RkvUajzc2MCmW1vmI6tbh 1HWQlPcC/4GPTgq+JUwgFNgnVBSIdAcQl7VeXObQ9gNrENefoumAaJydXf4bIVGvTsNRhsEf+l UZ5sUAxpQJXVsNNrKx4NLuqjXOwMdcsGhYJIbWEkupXP469cFNv1oZ42nHvjF+MfX+a8YYfE rl9ygzlykxyimeukfpq9pnsuzwqqjdlkx0emlidg8mowm= SHA256withRSA Issuer OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Qualified Certification Authority, 09/2009 Subject OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Time Stamping Authority, TSS/TSU 1, 12/2011 Wed Dec 21 01:00:00 CET 2011 Wed Dec 21 01:00:00 CET 2016 Extended Key Usage 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:C5:2A:1B:48:A:12:AE:0A:D:8C:1F:85:B6:FA:90:70:F4:C1:CC:45:C8:ED:B1:DC:5B:FF:B5:7D:A7:78:91:57:D0:A D:19:1A:D6:81:5F:D4:AF:20:E8:22:81:AF:A:50:E:92:4D:F:01:95:CA:5F:17:95:59:FA:78:D7:96:FE:BE:B2:E8:A6:7F:C:9:2A:F7:75:F7:DF:8E:F5:00:B::2E:79:D:F6:DA:AB:C6:8:72:CF:6:8A:C9:BC:CD:EE:DC: E1:B2:4:EE:25:54:2E:54:40:CC:D9:75:6F:01:6:A2:C7:B5:BD:A2:2A:C:66:C2:06:6B:2A:47:96:79:B4:9A:7:E:57:76:16:41:6C:8:A5:B4:D6:96:96:AE:0A:41:0A:76:A6:4B:6D:C5:4D:5F:6E:56:20:18:40:A5:7C:08:6:B7 :00:81:47:CE:AD:F0:4D:8B:6A:E8:C:1B:FF:F:01:2C:07:D2:95:8D:95:F7:29:19:B1:16:C8:99:9D:61:49:B2:4:A0:FF:00:F9:04:85:6C:21:06:A9:02:CE:E2:2F:17:22:8:9:05:27:4D:E:1E:7D:4C:5B:96:5A:2:D0:BB:C:C2 :D7:41:97:EA:A0:9A:B:86:60:B8:C7:5D:28:47:79:0A:2F:FA:79:9F:6C:A6:A4:45:DB:7:02:0:01:00:01 id_kp_timestamping CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 2

33 Policy OID: CPS text: [Tento certifikat je vydan jako kvalifikovany systemovy certifikat podle zakona c. 227/2000 Sb. v platnem zneni/this is qualified system certificate according to Czech Act No. 227/2000 Coll.] Policy OID: BC:F7:74:29:20:98:D:69:95:57:1B:19:4B:E4:0E:B8:6E:E:B0:D6 Authority Key Identifier 79:CB:D0:2:E9:A:67:70:91:74:4F:D:51:E2:E0:20:FD:E1:28:FB CRL Distribution Points Authority Info Access digitalsignature - nonrepudiation Service Status 2C:A5:ED:9F:16:6B:D8:E2:AD:D:C9:4:17:AA:C1:FC:D:2C:8F:49:CE:8A:95:72:A4:0D:F:9D: 7F:2F:CF:E6 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T00:00:00Z Service : (5) I.CA - Time Stamping Authority, TSS/TSU, 12/2011 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (5) I.CA - Time Stamping Authority, TSS/TSU, 12/2011 (5) I.CA - autorita časových razítek, TSS/TSU, 12/2011 Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page

34 MIIGIjCCBQqgAwIBAgIEAKMLkTANBgkqhkiG9w0BAQsFADCBtzELMAkGA1UEBhMCQ1oxOjA4BgNV BAMMMUkuQ0EgLSBRdWFsaWZpZWQgQ2VydGlmaWNhdGlvbiBBdXRobJpdHksIDA5LzIwMDkxLTAr BgNVBAoMJFBydm7DrSBjZXJ0aWZpa2HEjW7DrSBhdXRvcml0YSwgYS5zLjE9MDsGA1UECww0SS5D QSAtIEFjYJlZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczAeFw0xMTEy MjEwMDAwMDBaFw0xNjEyMjEwMDAwMDBaMIG4MQswCQYDVQQGEwJDWjE7MDkGA1UEAwwySS5DQSAt IFRpbWUgURhbXBpbmcgQXV0aG9yaXR5LCBUU1MvVFNVIDMsIDEyLzIwMTExLTArBgNVBAoMJFBy dm7drsbjzxj0awzpa2hejw7drsbhdxrvcml0yswgys5zlje9mdsga1uecww0ss5dqsatiefjyjl ZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAPf5pmpZOP9eNH5Bj6X0XFztP/RHYn6MnR7/6lSJjYSaOfYBKgnIs7 N+2euamASGD/b4rXeO8pTMH2qPpeJVCeIZW8xfYZHj+BdSCRhQex417WuioXkwjvrGszHsvnEguT S4/ki0Te5O8BSA+NkYEVKarArDupd6lL8eD6TslYr8Vq1Qhl9/ChTboWO0u6SiU7y10QeV4ABXBA inbk5see7iwh28gbm/ss7h/fetyoljr4isluximm6fti1qwlcdz9qp4vhtu7viu4zqce8ghfu9 1ycmAgX0fKueViDybELJEi4nxQkk/ydNdmShfAULANAfWF6IgBZqERLPxjECAwEAAaOCAjEwggIt MA4GA1UdDwEB/wQEAwIGwDAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDCCAQEGA1UdIASB+TCB9jCB 4gYNKwYBBAGBuEgBAQoDAjCB0DCBzQYIKwYBBQUHAgIwgcAagb1UZW50byBjZXJ0aWZpa2F0IGpl IHZ5ZGFuIGpha28gaZhbGlmaWtvdmFueSBzeXN0ZW1vdnkgY2VydGlmaWthdCBwb2RsZSB6YWtv bmegyy4gmjilziwmdagu2iuihygcgxhdg5lbsb6bmvuas9uaglziglzihf1ywxpzmllzcbzexn0 ZW0gY2VydGlmaWNhdGUgYWNjbJkaW5nIHRvIEN6ZWNoIEFjdCBOby4gMjILzIwMDAgQ29sbC4w DwYNK4EekZmEBQAAAAECAjAdBgNVHQ4EFgQUBfHCrjtYlv57DxyO7w1ZkLvCmuwwHwYDVR0jBBgw FoAUecvQI+k6ZCRdE/TUeLgIPhKPswgYEGA1UdHwR6MHgwJqAkoCKGIGh0dHA6Ly9xYJsZHAx LmljYS5jei9xaWNhMDkuYJsMCagJKAihiBodHRwOi8vcWNybGRwMi5pY2EuYovcWljYTA5LmNy bdamocsgioygahr0cdovlfjcmxkcdmuawnhlmn6lfpy2ewos5jcmwwogyikwybbquhaqeeljas MCoGCCsGAQUFBzAChh5odHRwOi8vcS5pY2EuYovY2FfbmJ1cIwOS5wN2MwDQYJKoZIhvcNAQEL BQADggEBAFB+JhaKGdIXvzdJ/ViXLp6OWFUMsdOHRrc4ir9RteLve5N2dfO120zWHrdjdXE25+Wr No61pziUDcjIbJ6Wdvj4d/t1qmCU8j7VA1OWmrGKrQQ6VNwqP7W8hi9T0byyypWUwAcNUSRCsazP earvd2bniwysryhktiuqtw6psnvmuk2zlyjbd7clymp4ldpb0no2lte5rbj6terhbawyl1av4/ dfjk88gvuyy1yagrdzwghn8punefbqu2wzdgb5vmrocmhik4jtrbwowlao8rshmlpw2qjdvkne1 FtJAxW86qRCdVtdCnwhNirp0fXfDvDNhT9ZnF1QwJ12/ftg= SHA256withRSA Issuer OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Qualified Certification Authority, 09/2009 Subject OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Time Stamping Authority, TSS/TSU, 12/2011 Wed Dec 21 01:00:00 CET 2011 Wed Dec 21 01:00:00 CET 2016 Extended Key Usage 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:F7:F9:A6:6A:59:8:FF:5E:4:7E:41:8F:A5:F4:5C:5C:ED:F:F4:47:62:7E:B7:2:74:7B:FF:A9:52:26:6:12:68:E7:D8: 04:A8:27:22:CD:FB:7:ED:9E:B9:A9:80:48:60:FF:6F:8A:D7:78:EF:29:4C:C1:F6:A8:FA:5E:25:50:9E:21:95:BC:C5:F6:19:1E:F:81:75:20:91:85:07:B1:E:5E:D6:BA:2A:17:9:08:EF:AC:6B::1E:CB:E7:12:0B:9:4B:8F:E 4:8B:44:DE:E4:EF:01:48:0F:8D:91:81:15:29:AA:C0:AC:B:A9:77:A9:4B:F1:E0:FA:4E:C9:58:AF:C5:6A:D5:08:65:F7:F0:A1:4D:BA:16:B:4B:BA:4A:25:B:CB:5D:10:79:5E:00:05:70:40:8A:76:CA:E6:C7:9E:EC:8C:07:D B:C8:1B::F4:AC:EC:7F:C5:1:7B:72:8:B2:51:E0:84:8B:B9:78:8C:9B:A1:6D:8B:5A:B0:2D:C7:7:F6:A:F8:DD:51:ED:BB:B5:62:5:8C:EA:71:EF:20:1D:FB:BD:D7:27:26:02:05:F4:7C:AB:9E:56:20:F2:6C:42:C9:12:2E: 27:C5:09:24:FF:27:4D:76:64:A1:7C:05:0B:00:D0:1F:58:5E:88:80:16:6A:11:12:CF:C6:1:02:0:01:00:01 id_kp_timestamping Policy OID: CPS text: [Tento certifikat je vydan jako kvalifikovany systemovy certifikat podle zakona c. 227/2000 Sb. v platnem zneni/this is qualified system certificate according to Czech Act No. 227/2000 Coll.] Policy OID: :F1:C2:AE:B:58:96:FE:7B:0F:1C:8E:EF:0D:59:90:BB:C2:9A:EC Authority Key Identifier 79:CB:D0:2:E9:A:67:70:91:74:4F:D:51:E2:E0:20:FD:E1:28:FB CRL Distribution Points CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 4

35 Authority Info Access digitalsignature - nonrepudiation Service Status 65:D:A1:6F:4:E0:5E:D6:14:1:6:D4:89:09:FE:6:D6:61:41:00:98:19:4:04:C7:62:BC:82:EC:C 0:1F:6 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T00:00:00Z Service : (6) I.CA - Time Stamping Authority, TSS/TSU 2, 12/2011 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (6) I.CA - Time Stamping Authority, TSS/TSU 2, 12/2011 (6) I.CA - autorita časových razítek, TSS/TSU 2, 12/2011 Service digital identities Certificate fields details MIIGIjCCBQqgAwIBAgIEAKMLkDANBgkqhkiG9w0BAQsFADCBtzELMAkGA1UEBhMCQ1oxOjA4BgNV BAMMMUkuQ0EgLSBRdWFsaWZpZWQgQ2VydGlmaWNhdGlvbiBBdXRobJpdHksIDA5LzIwMDkxLTAr BgNVBAoMJFBydm7DrSBjZXJ0aWZpa2HEjW7DrSBhdXRvcml0YSwgYS5zLjE9MDsGA1UECww0SS5D QSAtIEFjYJlZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczAeFw0xMTEy MjEwMDAwMDBaFw0xNjEyMjEwMDAwMDBaMIG4MQswCQYDVQQGEwJDWjE7MDkGA1UEAwwySS5DQSAt IFRpbWUgURhbXBpbmcgQXV0aG9yaXR5LCBUU1MvVFNVIDIsIDEyLzIwMTExLTArBgNVBAoMJFBy dm7drsbjzxj0awzpa2hejw7drsbhdxrvcml0yswgys5zlje9mdsga1uecww0ss5dqsatiefjyjl ZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAMTTMhpsmFpza0wMeN6tQY5O1b9IQNPlXbMPV5ASoKOT/oJjyR/eWR Dy0z6siuMzcbQusFO6iv60+whKtTTGgxGo6sy5nh8KIZUzVlOTa+XOF0HyO6XCMs7tCVbQPCs EDeX8X6q+8WXVRd4WCEhXMPU/8WoqhPteOlNXIFJj/T+krfnfjDXGO/RMIS9R/GourFIgjvu4ctu 9G5bE5MPXENurbS/pa5Nu0ZHnjTONgi6hBJ4x+HfRPTuLoszWmNvsHchcROVOK6RvyQukcUwE1f //efurznfpna9o24w7cicf8id6fp9n6hssye1+lvelwrzlnnnjia2s+d7iucaweaaaocajewggit MA4GA1UdDwEB/wQEAwIGwDAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDCCAQEGA1UdIASB+TCB9jCB 4gYNKwYBBAGBuEgBAQoDAjCB0DCBzQYIKwYBBQUHAgIwgcAagb1UZW50byBjZXJ0aWZpa2F0IGpl IHZ5ZGFuIGpha28gaZhbGlmaWtvdmFueSBzeXN0ZW1vdnkgY2VydGlmaWthdCBwb2RsZSB6YWtv bmegyy4gmjilziwmdagu2iuihygcgxhdg5lbsb6bmvuas9uaglziglzihf1ywxpzmllzcbzexn0 ZW0gY2VydGlmaWNhdGUgYWNjbJkaW5nIHRvIEN6ZWNoIEFjdCBOby4gMjILzIwMDAgQ29sbC4w DwYNK4EekZmEBQAAAAECAjAdBgNVHQ4EFgQUn/DdvxuZhJbG5OlGeip4juwz2wIwHwYDVR0jBBgw FoAUecvQI+k6ZCRdE/TUeLgIPhKPswgYEGA1UdHwR6MHgwJqAkoCKGIGh0dHA6Ly9xYJsZHAx LmljYS5jei9xaWNhMDkuYJsMCagJKAihiBodHRwOi8vcWNybGRwMi5pY2EuYovcWljYTA5LmNy bdamocsgioygahr0cdovlfjcmxkcdmuawnhlmn6lfpy2ewos5jcmwwogyikwybbquhaqeeljas MCoGCCsGAQUFBzAChh5odHRwOi8vcS5pY2EuYovY2FfbmJ1cIwOS5wN2MwDQYJKoZIhvcNAQEL BQADggEBAKGx2/X1dIHrsv+YaFIU/1UoI/VUAbBjGSleL4mXzcpFqpBFtG0+ZkhGz/xsqngZ2Tw SAwn8QPJN7U9PK4kmzGf50GIiLB+IaYd/EIQV8IpYcQsUrwYtj4ejJErtXiQcytlzD7y6DDiCS F6XDSYfwTtkcQbu1lxKTcFq6mBEKt6vgC+SIjiiK4oWcnjRsLmvAfa9SRdLI6/ABXet2kC mfdho16cssuge46ntuyc1nvh5k7u/xw/gqis5npqsynkjlqqu/+bwp+grdihepz0l1w0c5extdik ebcyporpgzx9ucrdk+kkkij1gjtdy+e6mtc4wtbvdqkwmf0= SHA256withRSA Issuer OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 5

36 I.CA - Qualified Certification Authority, 09/2009 Subject OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Time Stamping Authority, TSS/TSU 2, 12/2011 Wed Dec 21 01:00:00 CET 2011 Wed Dec 21 01:00:00 CET 2016 Extended Key Usage 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:C4:D:2:1A:6C:98:5A:7:6B:4C:0C:78:DE:AD:41:8E:4E:DF:56:FD:21:0:4F:95:76:F7:0:F5:79:01:2A:0A:9:F:E 8:26:C:91:FD:E5:91:0F:2D::EA:C8:AE::7:1B:42:EB:7:17:7:BA:8A:FE:B4:FB:08:4A:B5:4:C6:8:11:A8:EA:CC:B9:DE:78:7C:28:86:54:CD:59:4E:4D:AF:97:8:5D:07:C8:EE:97:08:CB:B:B4:25:5B:40:F0:AC:10: 7:97:F1:7E:AA:FB:C5:97:55:17:78:58:21:21:5C:C:D4:FF:C5:A8:AA:1:ED:78:E9:4D:5C:81:49:8F:F4:FE:92:B7:E7:7E:0:D7:18:EF:D1:0:84:BD:47:F1:A8:BA:B1:48:82:B:EE:E1:CB:6E:F4:6E:5B:1:9:0F:5C:4:6E: AD:B4:BF:A5:AE:4D:BB:46:47:9E:4:CE:6:08:BA:84:12:78:C7:E1:DF:44:F4:EE:2E:8B::5A:6:6F:B0:77:21:71:1:95:8:AE:91:BF:24:7:BA:47:14:C0:4D:5F:FF:F7:85:51:16:67:7E:9:5A:F4:ED:B8:C:B7:08:08:5F:22 :0F:A1:69:F4:DE:A1:B1:2C:9E:D7:E2:D5:7A:55:AB:CC:B9:E7:6:8:9A:DA:CF:9D:EC:85:02:0:01:00:01 id_kp_timestamping Policy OID: CPS text: [Tento certifikat je vydan jako kvalifikovany systemovy certifikat podle zakona c. 227/2000 Sb. v platnem zneni/this is qualified system certificate according to Czech Act No. 227/2000 Coll.] Policy OID: F:F0:DD:BF:1B:99:84:96:C6:E4:E9:46:7A:2A:78:8E:EC::DB:02 Authority Key Identifier 79:CB:D0:2:E9:A:67:70:91:74:4F:D:51:E2:E0:20:FD:E1:28:FB CRL Distribution Points Authority Info Access digitalsignature - nonrepudiation Service Status 9F:B5:F:19:FE:4B:7D:CD:BA:51:8:F7:9E:2B:12:5A:26:51:0:D:9A:09:06:84:82:8B:4F:4F:F5: F8:F:20 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T00:00:00Z CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 6

37 Service : (5) I.CA - Time Stamping Authority, TSS/TSU 1, 11/201 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (5) I.CA - Time Stamping Authority, TSS/TSU 1, 11/201 (5) I.CA - autorita časových razítek, TSS/TSU 1, 11/201 Service digital identities Certificate fields details MIIGIjCCBQqgAwIBAgIEAKXc5zANBgkqhkiG9w0BAQsFADCBtzELMAkGA1UEBhMCQ1oxOjA4BgNV BAMMMUkuQ0EgLSBRdWFsaWZpZWQgQ2VydGlmaWNhdGlvbiBBdXRobJpdHksIDA5LzIwMDkxLTAr BgNVBAoMJFBydm7DrSBjZXJ0aWZpa2HEjW7DrSBhdXRvcml0YSwgYS5zLjE9MDsGA1UECww0SS5D QSAtIEFjYJlZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczAeFw0xMzEx MDYwNzQyNDVaFw0xODExMDYwNzQyNDVaMIG4MQswCQYDVQQGEwJDWjE7MDkGA1UEAwwySS5DQSAt IFRpbWUgURhbXBpbmcgQXV0aG9yaXR5LCBUU1MvVFNVIDEsIDExLzIwMTMxLTArBgNVBAoMJFBy dm7drsbjzxj0awzpa2hejw7drsbhdxrvcml0yswgys5zlje9mdsga1uecww0ss5dqsatiefjyjl ZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAK1lVOCVu47By5BiOGzsG0XbJ55WvySjm2ZjoZPczK9EMo/XZct2A/Lq wtatottyhtoeuhccqdzyr8l+z6aabkmu8cy72to+nalzggozkfin5ullzuxhaq6mpeogjedtnp mpmhndg7mnd1tqsghsjqdapei+/qptutblohfnno9sjkt+t1yaqqbfdig2n7qcvs7jmak01qsv5m qnrnwyeua7atzckkhwhhfbocqtiqjcfr7z8+hfv4tlajaip/2dqgxodkemhrxcz50fwx6pzg5xq EvxhPUJJFf7FmlidT1Jkl6oB4cyV2eewALZ8AdgxbWaRyc865YwjVisuT8CAwEAAaOCAjEwggIt MA4GA1UdDwEB/wQEAwIGwDAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDCCAQEGA1UdIASB+TCB9jCB 4gYNKwYBBAGBuEgBAQoDAjCB0DCBzQYIKwYBBQUHAgIwgcAagb1UZW50byBjZXJ0aWZpa2F0IGpl IHZ5ZGFuIGpha28gaZhbGlmaWtvdmFueSBzeXN0ZW1vdnkgY2VydGlmaWthdCBwb2RsZSB6YWtv bmegyy4gmjilziwmdagu2iuihygcgxhdg5lbsb6bmvuas9uaglziglzihf1ywxpzmllzcbzexn0 ZW0gY2VydGlmaWNhdGUgYWNjbJkaW5nIHRvIEN6ZWNoIEFjdCBOby4gMjILzIwMDAgQ29sbC4w DwYNK4EekZmEBQAAAAECAjAdBgNVHQ4EFgQULjPA/zl0PC/HYE1viXET51w4WHowHwYDVR0jBBgw FoAUecvQI+k6ZCRdE/TUeLgIPhKPswgYEGA1UdHwR6MHgwJqAkoCKGIGh0dHA6Ly9xYJsZHAx LmljYS5jei9xaWNhMDkuYJsMCagJKAihiBodHRwOi8vcWNybGRwMi5pY2EuYovcWljYTA5LmNy bdamocsgioygahr0cdovlfjcmxkcdmuawnhlmn6lfpy2ewos5jcmwwogyikwybbquhaqeeljas MCoGCCsGAQUFBzAChh5odHRwOi8vcS5pY2EuYovY2FfbmJ1cIwOS5wN2MwDQYJKoZIhvcNAQEL BQADggEBAFMb2479AC6sTzm/PuSef5g+mfP1uKVh74dwsTzM/FP9IdP8+O+leWcRjf1cxqadj 9iHjXwem6RIsJCn8COaGupizTkkcLTs7kahPJJkO1T0YAjcV97go/ult27OFo+xkxOo52Nccx4f8 yfp1jng7e+e7snmhhgcly4tzlazpllmqdwnwvosu2xy4/i/02cbi8fk+eoxu9eupk+/x0sbz1 bvss5qutwzwdcsweew9zhc/dfspeb/p59s/1l2xm6ejz6df/nzrbd5k2z0h6khex4fape8sbrbi9 8JZQCGG5jkS2eVQLOLKxy/5SfYbhDJWMxlAMvvUVqy9hcEs= SHA256withRSA Issuer OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Qualified Certification Authority, 09/2009 Subject OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Time Stamping Authority, TSS/TSU 1, 11/201 Wed Nov 06 08:42:45 CET 201 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 7

38 Tue Nov 06 08:42:45 CET 2018 Extended Key Usage 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:AD:65:54:E0:95:BB:8E:C1:CB:90:62:8:6C:EC:1B:45:DB:27:9E:56:BF:24:A:9B:66:6:A1:9:DC:CC:AF:44:2:8F: D7:65:CB:76:0:F2:EA:C1:0:1:A1:B:58:85::B7:12:E1:DC:71:07:59:61:1F:0B:F9:9E:80:00:19:26:BB:C7:2:EF:64:CE:FA:70:0B:CE:01:8E:66:41:48:7:95:25:2F:5:7:5C:76:AA:E8:CA:5E:8:68:DE:0E:D9:E9:9A:9: 07:9D:D1:BB:98:D0:F5:4E:AB:06:86:C8:EA:74:0:DE:8B:EF:EA:A6:DB:AD:04:B:87:16:7:4E:F6:C8:E4:B7:E4:F5:C8:0A:AA:04:57:48:1B:69:FB:41:C5:6C:EC:9:1A:9:4D:50:49:5E:4C:A8:DD:D1:7:06:04:B8:0E:DA: 4D:97:24:92:1C:21:1C:50:4E:72:A4:E2:AA:7:1F:AF:B6:7C:FA:17:EF:E1:9:40:24:02:29:FF:67:6A:8:1:9D:91:E:21:47:10:B:E7:41:70:C7:A:D9:8:9C:50:12:FC:61:D:42:49:15:FE:C5:9A:58:9D:4F:52:64:97:AA:01:E 1:CC:95:D9:E7:B0:00:B6:7C:01:D8:1:6D:66:91:C9:CF:A:E5:8C:7:8D:58:AC:B9:F:02:0:01:00:01 id_kp_timestamping Policy OID: CPS text: [Tento certifikat je vydan jako kvalifikovany systemovy certifikat podle zakona c. 227/2000 Sb. v platnem zneni/this is qualified system certificate according to Czech Act No. 227/2000 Coll.] Policy OID: E::C0:FF:9:74:C:2F:C7:60:4D:6F:89:71:1:E7:5C:8:58:7A Authority Key Identifier 79:CB:D0:2:E9:A:67:70:91:74:4F:D:51:E2:E0:20:FD:E1:28:FB CRL Distribution Points Authority Info Access digitalsignature - nonrepudiation Service Status 6A:6:0D:5C:F0:78:8C:D:A6:C0:50:AD:01:F:9A:CA:E6:E9:DD:D:C1:50:01:7F:2D:7F:C4:B0: 1D:F7:6A:09 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T06:42:00Z Service : (54) I.CA - Time Stamping Authority, TSS/TSU 2, 11/201 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (54) I.CA - Time Stamping Authority, TSS/TSU 2, 11/201 (54) I.CA - autorita časových razítek, TSS/TSU 2, 11/201 Service digital identities CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 8

39 Certificate fields details MIIGIjCCBQqgAwIBAgIEAKXc6DANBgkqhkiG9w0BAQsFADCBtzELMAkGA1UEBhMCQ1oxOjA4BgNV BAMMMUkuQ0EgLSBRdWFsaWZpZWQgQ2VydGlmaWNhdGlvbiBBdXRobJpdHksIDA5LzIwMDkxLTAr BgNVBAoMJFBydm7DrSBjZXJ0aWZpa2HEjW7DrSBhdXRvcml0YSwgYS5zLjE9MDsGA1UECww0SS5D QSAtIEFjYJlZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczAeFw0xMzEx MDYwNzQzMzJaFw0xODExMDYwNzQzMzJaMIG4MQswCQYDVQQGEwJDWjE7MDkGA1UEAwwySS5DQSAt IFRpbWUgURhbXBpbmcgQXV0aG9yaXR5LCBUU1MvVFNVIDIsIDExLzIwMTMxLTArBgNVBAoMJFBy dm7drsbjzxj0awzpa2hejw7drsbhdxrvcml0yswgys5zlje9mdsga1uecww0ss5dqsatiefjyjl ZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAMt29xvkQdYtkiCOmSBB6jDK7Qe+c4BJlKB+KY6Yl2oBrzeYDjSXoKi fguqajrt/najmgn7ilo2xdarzik9fkytmxbc1nrbq1qpao7wsusjk/ddym68f/ob1d//hfnvs9cr 8dvxwucEA7cwq+4mWNlKhU1imBtoxCxxbVoVBHzCK98wDrpo6IUNylSj2vKHb9XUQ/YMxnnwhM piuduje01cmho2+xakhxx8zoyssizzhgufzds6ugrbmyai+vtvmnltyhzyv7sx0rsvy0uleyagf ijrxytfmsuqta1lnfwj/yucucsyazjpa4iuao7alfqe78bewq62rml0hwzkcaweaaaocajewggit MA4GA1UdDwEB/wQEAwIGwDAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDCCAQEGA1UdIASB+TCB9jCB 4gYNKwYBBAGBuEgBAQoDAjCB0DCBzQYIKwYBBQUHAgIwgcAagb1UZW50byBjZXJ0aWZpa2F0IGpl IHZ5ZGFuIGpha28gaZhbGlmaWtvdmFueSBzeXN0ZW1vdnkgY2VydGlmaWthdCBwb2RsZSB6YWtv bmegyy4gmjilziwmdagu2iuihygcgxhdg5lbsb6bmvuas9uaglziglzihf1ywxpzmllzcbzexn0 ZW0gY2VydGlmaWNhdGUgYWNjbJkaW5nIHRvIEN6ZWNoIEFjdCBOby4gMjILzIwMDAgQ29sbC4w DwYNK4EekZmEBQAAAAECAjAdBgNVHQ4EFgQUO+l6ZoaREq6zXhZGihkdmeXv4WowHwYDVR0jBBgw FoAUecvQI+k6ZCRdE/TUeLgIPhKPswgYEGA1UdHwR6MHgwJqAkoCKGIGh0dHA6Ly9xYJsZHAx LmljYS5jei9xaWNhMDkuYJsMCagJKAihiBodHRwOi8vcWNybGRwMi5pY2EuYovcWljYTA5LmNy bdamocsgioygahr0cdovlfjcmxkcdmuawnhlmn6lfpy2ewos5jcmwwogyikwybbquhaqeeljas MCoGCCsGAQUFBzAChh5odHRwOi8vcS5pY2EuYovY2FfbmJ1cIwOS5wN2MwDQYJKoZIhvcNAQEL BQADggEBAIWWcZJqP6L/aJJKgyzo5gXNAw7xhoDry2DIgS9nrnh1S/R7TkoPVC516tSIvB7Zqln c2hgmludqb5jsvubg458fiigi9nvlwralavtznxjzrsx1s8rk+adbd07aqgqtow1dc9zsvsb0pb AYs9ULIh5DQb7virky9PKjTnIgWL4w7aIrhQCTcyF8jR550kBoDB05zDVTXXcbto/JTBznOAnXp 4ncK0/uRh10u9HdDxLtIiNYUxBRrI7MKykiLtvGg/ICssnJ7GlIWzdbIOyt6ZB+Ea4UdFa8zaQP +UTuxrjxWAPjcRVc2+8e7FZQQSRPBRrDV1WP6zHBAYYBiM= SHA256withRSA Issuer OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Qualified Certification Authority, 09/2009 Subject OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Time Stamping Authority, TSS/TSU 2, 11/201 Wed Nov 06 08:4:2 CET 201 Tue Nov 06 08:4:2 CET 2018 Extended Key Usage 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:CB:76:F7:1B:E4:41:D6:2D:92:20:8E:99:20:41:EA:0:CA:ED:07:BE:7:80:49:94:A0:7E:29:8E:98:97:6A:01:AF:7:98 :0E:4:97:A:72:A2:7C:6B:90:6A:A:D:FE:76:89:9A:0:7B:88:BA:6:C4:6:AB:CE:29:D:7C:AC:AD:1:76:C2:D4:DA:DB:4:54:29:68:EE:D6:B2:EB:2:9:F7:4:C8:CE:BC:17:FA:1B:D5:DF:FF:85:F9:EF:B:D7:2B:F1 :DB:F1:C2:E7:04:DC:0E:DC:C2:AF:B8:99:6:65:2A:15:5:8A:60:6D:A:10:B1:C5:B5:68:54:11:F:08:AD:FD:F:00:EB:A6:8E:88:50:DC:A5:4A:D:AF:28:76:FD:5D:44:F:60:CC:67:9F:08:4C:A4:85:0:BA:7:B4:D4:29: A1:A:6F:B1:02:41:D7:5F:CC:CE:61:24:A2:CD:98:60:B9:FC:C:B:7E:AE:81:16:E6:61:A2:E:BE:D5:4C:6:5B:58:1D:9C:95:ED:25:F4:AE:CB:D8:D2:E2:C4:C8:01:85:88:94:71:61:1:4C:49:4A:9:6B:52:CD:15:68:FF:61: 40:AE:72:CC:9A:CE:A:40:E2:2B:9A:B:B0:25:16:A1:B:F1:B7:B0:4:AD:AB:9A:5D:21:5B:9:02:0:01:00:01 id_kp_timestamping Policy OID: CPS text: [Tento certifikat je vydan jako kvalifikovany systemovy certifikat podle zakona c. 227/2000 Sb. v platnem zneni/this is qualified system certificate according to Czech Act No. 227/2000 Coll.] Policy OID: B:E9:7A:66:86:91:12:AE:B:5E:16:46:8A:19:1D:99:E5:EF:E1:6A CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 9

40 Authority Key Identifier 79:CB:D0:2:E9:A:67:70:91:74:4F:D:51:E2:E0:20:FD:E1:28:FB CRL Distribution Points Authority Info Access digitalsignature - nonrepudiation Service Status 44:9C:F7:B1:76:92:A6:08:9:C1:4D:25:EA:16:1:BF:2F:B9:C0:1:BD:2F:0C:4A:64:14:E:EA:79: 4A:1D:0A Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T06:4:00Z Service : (55) I.CA - Time Stamping Authority, TSS/TSU, 11/201 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (55) I.CA - Time Stamping Authority, TSS/TSU, 11/201 (55) I.CA - autorita časových razítek, TSS/TSU, 11/201 Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 40

41 MIIGIjCCBQqgAwIBAgIEAKXc6TANBgkqhkiG9w0BAQsFADCBtzELMAkGA1UEBhMCQ1oxOjA4BgNV BAMMMUkuQ0EgLSBRdWFsaWZpZWQgQ2VydGlmaWNhdGlvbiBBdXRobJpdHksIDA5LzIwMDkxLTAr BgNVBAoMJFBydm7DrSBjZXJ0aWZpa2HEjW7DrSBhdXRvcml0YSwgYS5zLjE9MDsGA1UECww0SS5D QSAtIEFjYJlZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczAeFw0xMzEx MDYwNzQ0MTdaFw0xODExMDYwNzQ0MTdaMIG4MQswCQYDVQQGEwJDWjE7MDkGA1UEAwwySS5DQSAt IFRpbWUgURhbXBpbmcgQXV0aG9yaXR5LCBUU1MvVFNVIDMsIDExLzIwMTMxLTArBgNVBAoMJFBy dm7drsbjzxj0awzpa2hejw7drsbhdxrvcml0yswgys5zlje9mdsga1uecww0ss5dqsatiefjyjl ZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAM5yjHh4flC1OhCCsiVd4f8siLVxe+HlVvp7x17NszXd5ZHmbfaIcD GUwoEm2yga7Rh24UKV+ZUqM7oDCWfoDkN8fB4UxTfTszPdFv72XnHLTaKkqsPA5QV/Kr6bCCqK LDLZpZGzhDqCxhShzAdtrA20ZjNEUhfNprz2Dhvl+xcnsgBc2wz/jz7nom9VoLPVV1NzeTZ6Cz QtnEk11SFsB5u749OQrJNt28abJtwdYwkPDvZPHsD7a6tUaqnFjS5whtzM8M6bxGQQH+tXxdfO WdV78Khwiu/ZYqaoMGTkAApBXO8kq2V8Ku/hWZEQ0oiM9Z7FRTbTw8J1Fn8CAwEAAaOCAjEwggIt MA4GA1UdDwEB/wQEAwIGwDAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDCCAQEGA1UdIASB+TCB9jCB 4gYNKwYBBAGBuEgBAQoDAjCB0DCBzQYIKwYBBQUHAgIwgcAagb1UZW50byBjZXJ0aWZpa2F0IGpl IHZ5ZGFuIGpha28gaZhbGlmaWtvdmFueSBzeXN0ZW1vdnkgY2VydGlmaWthdCBwb2RsZSB6YWtv bmegyy4gmjilziwmdagu2iuihygcgxhdg5lbsb6bmvuas9uaglziglzihf1ywxpzmllzcbzexn0 ZW0gY2VydGlmaWNhdGUgYWNjbJkaW5nIHRvIEN6ZWNoIEFjdCBOby4gMjILzIwMDAgQ29sbC4w DwYNK4EekZmEBQAAAAECAjAdBgNVHQ4EFgQUDuDHElXcE+Fl5Yt69OccL9r1hBIwHwYDVR0jBBgw FoAUecvQI+k6ZCRdE/TUeLgIPhKPswgYEGA1UdHwR6MHgwJqAkoCKGIGh0dHA6Ly9xYJsZHAx LmljYS5jei9xaWNhMDkuYJsMCagJKAihiBodHRwOi8vcWNybGRwMi5pY2EuYovcWljYTA5LmNy bdamocsgioygahr0cdovlfjcmxkcdmuawnhlmn6lfpy2ewos5jcmwwogyikwybbquhaqeeljas MCoGCCsGAQUFBzAChh5odHRwOi8vcS5pY2EuYovY2FfbmJ1cIwOS5wN2MwDQYJKoZIhvcNAQEL BQADggEBAGbPZIUGlJohpH6D01jUExXUgzXOugmkXzhfJYD2VoRknuVD/2nEmRnML6fpNkUKuz jn9pq4qgs2ztehy1gjdioxdhwv+7svwuavofryn5qiap6zb4sfmrwjbqlffngodpvsmexyuw7bo+ gpfywrspkegtr6tr1mix5kitbfvlf1gy6han+fgub7xujgjborfn6b08pylppxgzyrurkd29xdrz py6qvjydiof9kwgw2jfxhja7ea/9sniwk66mfywontccdzariql5weeensqarazorx5qudq5arel 7Un80WLQvOTD6hYRnOfk/sdr8TOjCibTJv8Qd7y4bq0AQA= SHA256withRSA Issuer OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Qualified Certification Authority, 09/2009 Subject OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Time Stamping Authority, TSS/TSU, 11/201 Wed Nov 06 08:44:17 CET 201 Tue Nov 06 08:44:17 CET 2018 Extended Key Usage 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:CE:72:8C:78:78:7E:50:B5:A:10:82:B2:25:5D:E1:FF:2C:88:B5:71:7B:E1:F7:95:5B:E9:EF:1D:7B:6:CC:D7:77:96:4 7:DE:66:DF:68:87:0:19:4C:28:12:6D:B2:81:AE:D1:87:6E:14:29:5F:99:52:A:B:A0:0:96:7E:80:E4:7:C7:C1:E1:4C:5:7D:B::D:D1:6F:DF:BD:97:9C:72:D:68:A9:2A:B0:F0:9:41:5F:CA:AF:A6:C2:0A:AD:CA:2C: 2:D9:A5:91:B:84:A:82:C6:14:A1:CC:07:6D:AC:0D:B4:66::44:52:17:CD:A6:BD:F:D8:8:6F:97:EC:5C:9E:C8:01:7:6C::FE:C:FB:9E:89:BD:56:82:CF:55:5D:77:7:7:9:67:A0:B:42:D9:C4:9:5D:52:DC:5B:01: E6:EE:F8:F4:E4:2B:24:DB:76:F1:A6:C9:B7:07:58:C2:4:C:BD:9:C7:B0:E:DA:EA:D5:1A:AA:71:6:4B:9C:21:B7::C::A6:F7:C4:64:10:1F:EB:57:C5:D7:CE:59:D5:7B:F0:A8:70:8A:EF:D9:62:A6:A8:0:64:E4:00:0 A:41:5C:EF:24:AB:65:7C:2A:EF:E1:59:91:10:D2:88:8C:F5:9E:C5:45:6:D:C:C2:75:16:7F:02:0:01:00:01 id_kp_timestamping Policy OID: CPS text: [Tento certifikat je vydan jako kvalifikovany systemovy certifikat podle zakona c. 227/2000 Sb. v platnem zneni/this is qualified system certificate according to Czech Act No. 227/2000 Coll.] Policy OID: E:E0:C7:12:55:DC:1:E1:65:E5:8B:7A:F4:E7:1C:2F:DA:F5:84:12 Authority Key Identifier 79:CB:D0:2:E9:A:67:70:91:74:4F:D:51:E2:E0:20:FD:E1:28:FB CRL Distribution Points CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 41

42 Authority Info Access digitalsignature - nonrepudiation Service Status 57:8A:9:4E:88:54:5E:EC:16::74:2D:91:DE:A4:7A:07:22:2:D0:9F:5C:0:A2::5:97:51:55:11 :0C:AF Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T06:44:00Z Service : (56) I.CA - Time Stamping Authority, TSS/TSU 4, 11/201 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (56) I.CA - Time Stamping Authority, TSS/TSU 4, 11/201 (56) I.CA - autorita časových razítek, TSS/TSU 4, 11/201 Service digital identities Certificate fields details MIIGIjCCBQqgAwIBAgIEAKXc6jANBgkqhkiG9w0BAQsFADCBtzELMAkGA1UEBhMCQ1oxOjA4BgNV BAMMMUkuQ0EgLSBRdWFsaWZpZWQgQ2VydGlmaWNhdGlvbiBBdXRobJpdHksIDA5LzIwMDkxLTAr BgNVBAoMJFBydm7DrSBjZXJ0aWZpa2HEjW7DrSBhdXRvcml0YSwgYS5zLjE9MDsGA1UECww0SS5D QSAtIEFjYJlZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczAeFw0xMzEx MDYwNzQ1MDBaFw0xODExMDYwNzQ1MDBaMIG4MQswCQYDVQQGEwJDWjE7MDkGA1UEAwwySS5DQSAt IFRpbWUgURhbXBpbmcgQXV0aG9yaXR5LCBUU1MvVFNVIDQsIDExLzIwMTMxLTArBgNVBAoMJFBy dm7drsbjzxj0awzpa2hejw7drsbhdxrvcml0yswgys5zlje9mdsga1uecww0ss5dqsatiefjyjl ZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAI4wGFZM+q2lvc9ZhhU2EXrzbiR4fZRakwYuubYG4kkN4mwIP8TlKaUG aclabmcekre8prqbjd9jat4njvbempivgpp4yh48oml1l4yuo2gmygckygssphkyjgmmydg+su2h +YsjsLIF/MIpJDGkl62VEaMXIr6n2+KEh8JErfp25pEQuwwndzPWeWtxqrRM0LMvBGphYj8Cxvpy 5JOFJ56R1CIYW8trcv6hXVODpdcFEuoZrngVVyHCV6NOsslrivygPmKycMryTwxGcH5ZIy2Mpe cjqqmat0+aqb8zbwuq90nqt8hcklfhntwcbj1unkiyygbt49ipjpkj4huuucaweaaaocajewggit MA4GA1UdDwEB/wQEAwIGwDAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDCCAQEGA1UdIASB+TCB9jCB 4gYNKwYBBAGBuEgBAQoDAjCB0DCBzQYIKwYBBQUHAgIwgcAagb1UZW50byBjZXJ0aWZpa2F0IGpl IHZ5ZGFuIGpha28gaZhbGlmaWtvdmFueSBzeXN0ZW1vdnkgY2VydGlmaWthdCBwb2RsZSB6YWtv bmegyy4gmjilziwmdagu2iuihygcgxhdg5lbsb6bmvuas9uaglziglzihf1ywxpzmllzcbzexn0 ZW0gY2VydGlmaWNhdGUgYWNjbJkaW5nIHRvIEN6ZWNoIEFjdCBOby4gMjILzIwMDAgQ29sbC4w DwYNK4EekZmEBQAAAAECAjAdBgNVHQ4EFgQUS7pGq6+wldn+jg2T2WB96FHbJgwHwYDVR0jBBgw FoAUecvQI+k6ZCRdE/TUeLgIPhKPswgYEGA1UdHwR6MHgwJqAkoCKGIGh0dHA6Ly9xYJsZHAx LmljYS5jei9xaWNhMDkuYJsMCagJKAihiBodHRwOi8vcWNybGRwMi5pY2EuYovcWljYTA5LmNy bdamocsgioygahr0cdovlfjcmxkcdmuawnhlmn6lfpy2ewos5jcmwwogyikwybbquhaqeeljas MCoGCCsGAQUFBzAChh5odHRwOi8vcS5pY2EuYovY2FfbmJ1cIwOS5wN2MwDQYJKoZIhvcNAQEL BQADggEBAFuCYmHto6fQrhO82PH1fwMx9bmthqp7j7XHV2qk7LrRIgqTTwY82qpykvsypxfzwKU u/06an0c5srhwqmupyn4lhccmzt4uw8tgboqfqhygkrzvyxfy6gsgw2/q75lqomqyh2gwpebjnbt gjeadvhvjiupyawlynemmznhqax6cx5kflqtpz7wbgedjjv9/vxwtwbd0auke7v/wcq2hy7hqu F5vhZ5b61aA9D8yg2zWGXbcFihfxY+avsgytwE0kEyYtMckaJwiO5EkpzVnKyewXwkY6ix/FCgD ocdkyb1zik5vd8i/2qdd7qzoux+/kwralgoupynutmwcvww= SHA256withRSA Issuer OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 42

43 I.CA - Qualified Certification Authority, 09/2009 Subject OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Time Stamping Authority, TSS/TSU 4, 11/201 Wed Nov 06 08:45:00 CET 201 Tue Nov 06 08:45:00 CET 2018 Extended Key Usage 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:8E:0:18:56:4C:FA:AD:A5:BD:CF:59:86:15:6:11:7A:F:6E:24:78:7D:94:5A:9:06:2E:B9:B6:06:E2:49:0D:E2:6C:0 8:F:C4:E5:29:A5:06:68:29:40:6C:C0:9E:29:11:C:E:B4:01:8D:DF:6:69:E:0D:25:56:C4:2:92:2F:1A:9A:78:62:1E:C:A:69:75:2F:8C:AE:B:68:26:62:00:A4:C8:6B:12:A6:19:2:8C:69:8C:61:D1:BE:B1:4D:87:F9:8B:2 :B0:B2:05:FC:C2:29:24:1:A4:97:AD:95:11:A:17:22:BE:A7:DB:E2:84:87:C2:44:AD:FA:76:E6:91:10:BB:0C:27:77::D6:79:6B:71:AA:B4:4C:D0:B:2F:04:6A:61:62:F:02:C6:FA:72:E4:9:85:27:9E:91:D4:22:18:5B:CB :6B:72:FE:A1:5D:5:8:A5:D7:05:12:EA:19:AE:78:15:57:21:C2:57:A:4E:B2:C9:6B:8A:FC:A0:E:62:B2:70:CA:F2:4F:7C:1:19:C1:F9:64:8D:F2:D8:CA:5E:70:9A:90:0:04:F4:F8:0A:9B:F:6:D6:52:AF:74:5:04:FC:85: C2:A5:7C:79:ED:C1:C6:C9:D6:E:64:8B:26:20:6D:E:D:8A:92:69:92:E:07:BA:E5:02:0:01:00:01 id_kp_timestamping Policy OID: CPS text: [Tento certifikat je vydan jako kvalifikovany systemovy certifikat podle zakona c. 227/2000 Sb. v platnem zneni/this is qualified system certificate according to Czech Act No. 227/2000 Coll.] Policy OID: B:BA:46:AB:AF:B0:95:D9:F7:FA:8:6:4F:65:81:F7:A1:47:6C:98 Authority Key Identifier 79:CB:D0:2:E9:A:67:70:91:74:4F:D:51:E2:E0:20:FD:E1:28:FB CRL Distribution Points Authority Info Access digitalsignature - nonrepudiation Service Status 64:0F:E0:4F:A8:D9:5D:F1:C:64:4:0E:89:A6:B2:B:6E:D8:D0:4D::18:E:85:2:59:CE:89:5:8 6:4D:20 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T06:45:00Z CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 4

44 2 - TSP: The Czech Post, s.p. TSP Name The Czech Post, s.p. Česká pošta, s.p. TSP Trade Name PostSignum QCA VAT PostalAddress Street Address [ en ] Politickych veznu 909/4 Locality [ en ] Prague 1 Postal Code [ en ] Country PostalAddress Street Address [ cs ] Politických vězňů 909/4 Locality [ cs ] Praha 1 Postal Code [ cs ] Country ElectronicAddress URI mailto:[email protected] URI URI TSP Information URI URI [ en ] 8&layout=2&eotf=1&sl=cs&tl=en&u= URI [ cs ] CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 44

45 2.1 - Service : (4) PostSignum - issuing qualified certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name (4) PostSignum - issuing qualified certificates (4) PostSignum - vydávání kvalifikovaných certifikátů Service digital identities Certificate fields details 28 MIIGLjCCBRagAwIBAgIBHDANBgkqhkiG9w0BAQUFADBZMQswCQYDVQQGEwJDWjEsMCoGA1UECgwj xixlc2vdosbwb8whdgesihmucc4gw0nejca0nzexndk4m10xhdaabgnvbamte1bvcrtawdudw0g Um9vdCBRQ0EwHhcNMDUwNDAMDgzMzEWhcNMjAwNDAMDgzMjI2WjBdMQswCQYDVQQGEwJDWjEs MCoGA1UECgwjxIxlc2vDoSBwb8WhdGEsIHMucC4gW0nEjCA0NzExNDk4M10xIDAeBgNVBAMTF1Bv crtawdudw0guxvhbglmawvkienbmiibijanbgkqhkig9w0baqefaaocaq8amiibcgkcaqeaswvw IoOTm8tAM8GOrDPt752/qvT4rh7iDWPKP7PIHNnvIY7l1HJIenOWA0qPqtccu1VZxtg+PAIrSw2 CbopaWOPiDG8W5WFZbxI0xPAHr1mPvla4rSW84Gk0iptmHtfMHBVTJxRtBAd6+WFThuELG8qoN1h qu/9q77mb891wklr5q1gbsbf0+wxusn5lu0smpzsszyfpyx1wjo1cubdajfu69jjnz+5lbc KliZhcDhEhdDQFTDglwc5MB/hxR7J4pzPgvIlmUipQlHefVmvCdwnutm/oLLDpLUT77EFiBB0j 5MoQPiP5DSzziWvGuJf58VlFbY/QveyFKwIDAQABo4IC+zCCAvcwgaEGA1UdIASBmTCBljCBkwYE VR0gADCBijCBhwYIKwYBBQUHAgIwexp5VGVudG8gY2VydGlmaWthdCBieWwgdnlkYW4gamFrbyBr dmfsawzpa292yw55ihn5crlbw92esbjzxj0awzpa2f0ihzlihntexnsdsb6ywtvbmegmjilziw MDAgU2IuIGEgbmF2YXp1amljaWNoIHByZWRwaXN1LjAPBgNVHRMECDAGAQH/AgEAMA4GA1UdDwEB /wqeawibbjcbgqydvr0jbhoweiaukxrnxn11xgeajycsujd7kovkushxarbmfkxczajbgnvbayt AkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEcMBoGA1UE AxMTUG9zdFNpZ251bSBSb290IFFDQYIBATCCAYsGA1UdHwSCAYIwggF+MDCgLqAshipodHRwOi8v ddlnbvcrzawdudw0uyovyjslbzcm9vdhfjys5jcmwwmkauocygkmh0dha6ly9wbn0c2ln bnvtlnr0yy5jei9jcmwvchnyb290cwnhlmnybdcbiqcbh6cbhiabgwxkyxa6ly9xy2eucg9zdhnp Z251bS5jei9jbiUzZFBvcRTaWdudW0lMjBSb290JTIwUUNBLG8lM2RDZXNrYSUyMHBvcRhJTIw cy5wliuymftjqyuymdqmte0otgzxsxjjtnkq1o/y2vydglmawnhdgvszxzvy2f0aw9utglzddcb iqcbh6cbhiabgwxkyxa6ly9wbn0c2lnbnvtlnr0yy5jei9jbiuzzfbvcrtawdudw0lmjbsb290 JTIwUUNBLG8lM2RDZXNrYSUyMHBvcRhJTIwcy5wLiUyMFtJQyUyMDQMTE0OTgzXSxjJTNkQ1o/ Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDAdBgNVHQ4EFgQUp5+2jomTmmV2qV+ER+aYJqgsw DQYJKoZIhvcNAQEFBQADggEBACkRE++TGTBboYXi1SkhlR66Y9Eo4xvJctW4Pao6VJlU5McHy 2dM1Du4OvHwlKHvcP/w66xo++ves0sCrg7OQaqLR8KfJsX4wkvBKYC6D2K7aZqUAfCVABcWZkVd r9fwmp+59yl9uycxrlpvh1unhylo/ibsxh9lsl+n0iofugmw50vyefp4vy6blrpmw5akwa+sp00 vv2yejrn5i6rhxv/nq9a0ggxbzq4u4ssbg+ols0szbqtwt4eeylmleexttp+7h1eoxspsnwodb hcswxdyvjr29ezbhs5lo6aaqsl5zl8h8l1aicsufg/smwjjmnpcgdrrweszxr0= SHA1withRSA PostSignum Root QCA PostSignum Qualified CA Thu Apr 07 10::17 CEST 2005 Tue Apr 07 10:2:26 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:B1:6B:F0:22:8:9:9B:CB:40::C1:8E:AC::ED:EF:9D:F6:FE:AB:D:E2:B8:7B:88:5:8F:28:FE:CF:20:7:67:BC: 86:B:97:51:C9:21:E9:CE:58:0D:2A:E:AB:5C:72:ED:55:67:1B:60:F8:F0:08:AD:2C:6:09:BA:29:69:6:8F:88:1:BC:5B:95:85:65:BC:48:D:1:C0:1E:BD:66:E:F9:5A:E2:B4:96:F:81:A4:D2:2A:6D:98:7B:5F:0:70:55:4 C:9C:51:B4:10:1D:EB:E5:85:4E:1B:84:2C:6F:2A:A0:DD:61:AA:EF:FD:4:BE:E6:6F:CF:75:58:A9:51:E6:AD:46:06:C6:DF:D:E5:97:B9:2D:CD:E4:B5:4:B0:C:F:4A:CC:D8:16:9C:97:D7:02:4E:DF:7D:42:B9:B7:5A:DC: 91:54:EB:D2:6:9F:F:B9:97:76:DC:2A:58:99:85:C0:E1:12:17:4:40:54:C:82:5C:1C:E4:C0:7F:87:14:7B:27:8A:7:E:0B:C8:96:65:22:A5:09:47:79:F5:66:BC:27:70:9E:ED:ED:9B:FA:0B:2C:A:4B:51:E:FB:DC:41:62:04: 1D:2:E4:CA:10:E:2:F9:0D:2C:F:89:6B:C6:B8:97:F9:F1:59:45:6D:8F:D0:BD:EC:85:2B:02:0:01:00:01 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 45

46 Policy OID: CPS text: [Tento certifikat byl vydan jako kvalifikovany systemovy certifikat ve smyslu zakona 227/2000 Sb. a navazujicich predpisu.] Basic Constraints IsCA: true - Path length: 0 Authority Key Identifier 2B:1D:D1:9D:79:F5:D5:78:1E:02:C:82:4A:E8:DD:EE:4:AF:29:44 CRL Distribution Points ldap://qca.postsignum.cz/cn%dpostsignum%20root%20qca,o%dceska%20posta%20s.p.%20[i C% ],c%d?certificateRevocationList ldap://postsignum.ttc.cz/cn%dpostsignum%20root%20qca,o%dceska%20posta%20s.p.%20[i C% ],c%d?certificateRevocationList A7:9F:B6:8E:89:9:9A:65:76:09:9A:95:F8:44:7E:69:82:6A:DE:0B keycertsign - crlsign Service Status 6E:79:2:E2:86:CF:C4:A7:90:7:CF:C9:12:5E:1C:66:71:88:7B:1A:A5:E:67:A:F9:8F:8:A4:67: DF:96:C Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T22:00:00Z Extension (critical): Qualifiers [QCNoSSCD] Qualifier type description [en] it is ensured by the trust service provider and controlled (supervision model) or audited (accreditation model) by the referenced Member State (respectively its Supervisory Body or Accreditation Body) that all Qualified Certificates issued under the service identified in "Service digital identity" and further identified by the filters information used to further identify under the "Sdi" identified trust service that precise set of Qualified Certificates for which this additional information is required with regards to the presence or absence of Secure Signature Creation Device (SSCD) support ARE NOT supported by an SSCD (i.e. that that the private key associated with the public key in the certificate is not stored in a Secure Signature Creation Device conformant with the applicable European legislation). Qualifier Criteria list assert=atleastone Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier Policy Identifier nodes: CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 46

47 Identifier Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier Service : (21) PostSignum - issuing qualified certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name (21) PostSignum - issuing qualified certificates (21) PostSignum - vydávání kvalifikovaných certifikátů Service digital identities Certificate fields details 11 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 47

48 MIIGXzCCBUegAwIBAgIBcTANBgkqhkiG9w0BAQsFADBbMQswCQYDVQQGEwJDWjEsMCoGA1UECgwj xixlc2vdosbwb8whdgesihmucc4gw0nejca0nzexndk4m10xhjacbgnvbamtfvbvcrtawdudw0g Um9vdCBRQ0EgMjAeFw0xMDAxMTkxMTMxMjBaFw0yMDAxMTkxMTMwMjBaMF8xCzAJBgNVBAYTAkNa MSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZ UG9zdFNpZ251bSBRdWFsaWZpZWQgQ0EgMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKbRReVFlmMooQD/ZzJA9M79LcZivHRvWEG8jsEpp2xTayR17ovs8OMeoYKjvGo6PDfkCJs+sBY S0q5WQFApdWkyl/tUOw1oZ2SPSq6uYLJUyOYSKPMOgKz4uXuB4Ki1Z+i8Fb7zeRye6eqahK+tql ZAJnrJKgC4X2Ta1RKkxK+Hu1bdhWJAgwL+WkIZbL/PYIzjet++T8ssWK1PWdBXsSfKOTikNzZt 2VPETAQDBpOYxqAgLfCRbcb9KU2WIMTNNxILusNl+OM9gV/GWO94JHsOMAVyJSQREaZksG5KD zznzqs/lsbykftnjammh7g9p9ci6cej+pfbttmecaweaaaocaygwggmkmihxbgnvhsaegekwgeyw gemgbfudiaawgdowgdcgccsgaqufbwicmihkgohhvgvudg8gazhbglmawtvdmfuesbzexn0zw1v dnkgy2vydglmawthdcbiewwgdnlkyw4gcg9kbgugemfrb25hidiyny8ymdawu2iuigegbmf2yxpu ewnoihbyzwrwaxn1l1roaxmgcxvhbglmawvkihn5crlbsbjzxj0awzpy2f0zsbyxmgaxnzdwvk IGFjY29yZGluZyB0byBMYXcgTm8gMjILzIwMDBDb2xsLiBhbmQgcmVsYXRlZCByZWd1bGF0aW9u czasbgnvhrmbaf8ecdagaqh/ageamig8bggrbgefbqcbaqsbrzcbrdabggrbgefbqcwaoyrahr0 cdovlddy5wbn0c2lnbnvtlmn6l2nydc9wcjvbrxy2eylmnydda4bggrbgefbqcwaoysahr0 cdovlddziucg9zdhnpz251bs5jei9jcnqvchnyb290cwnhmi5jcnqwnwyikwybbquhmakgk2h0 dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcnqvchnyb290cwnhmi5jcnqwdgydvr0paqh/baqdageg MIGDBgNVHSMEfDB6gBQVKYzFRWmruLPD6v5LuDHYPDndqFfpF0wWzELMAkGA1UEBhMCQ1oxLDAq BgNVBAoMI8SMZXNrw6EgcG/FoXRhLCBzLnAuIFtJxIwgNDcxMTQ5ODNdMR4wHAYDVQQDExVQbN0 U2lnbnVtIFJvbQgUUNBIDKCAWQwgaUGA1UdHwSBnTCBmjAxoC+gLYYraHR0cDovLddy5wbN0 c2lnbnvtlmn6l2nybc9wcjvbrxy2eylmnybdayodcgloysahr0cdovlddziucg9zdhnpz251 bs5jei9jcmwvchnyb290cwnhmi5jcmwwmaavoc2gk2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9j cmwvchnyb290cwnhmi5jcmwwhqydvr0obbyefinotn+ljjk+1yqueg565+yn5daxma0gcsqgsib DQEBCwUAA4IBAQB17M2VB48AXCVfVeeOLo0LIJZcg5EyHUKurbnff6tQOmyT7gzpkJNYIijW2E rbfum/6hefmxykkwss4jxqgsk5qfxg0b0ougfhps4wfftapsanwk1tijz4c4+zsjcchn9pdm vt8n0j+6cqaziwh4pppmkvugun4e0bzzhnh2ukzmvpvne6wkml6ov+pufpaspiyqw9gfeancmzp 10hXJHrnOo0alPklymZdTVssBXwdzhSBsFel1eVBSvVOx6+y8zdbrkRLOvTVnSMb6zH+fsygU40m imdo0ry/6n+tdqhbm/stcxgdway2g0elan1zi9jx6aq76wodcn+ SHA256withRSA PostSignum Root QCA 2 PostSignum Qualified CA 2 Tue Jan 19 12:1:20 CET 2010 Sun Jan 19 12:0:20 CET :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:A6:D1:45:E5:45:96:6:28:A1:00:FF:67:2:40:F4:CE:FD:DC:B7:19:8A:F1:D1:BD:61:06:F2:B:04:A6:9D:B1:4D:AC: 91:D7:BA:2F:B:C:8C:7A:86:0A:8E:F1:A8:E8:F0:DF:90:22:6C:FA:C0:58:4B:4A:B9:59:01:40:A5:D5:A4:CA:5F:ED:50:EC:5:A1:9D:92:D:2A:BA:B9:82:C9:5:2:98:48:A:CC:A:02:B:E2:ED:D7:B8:1E:0A:8B:56:7E: 8B:C1:5B:EF:7:91:C9:EE:9E:A9:A8:4A:FA:DA:A5:DD:90:09:9E:B2:4A:80:2E:17:D9:6:B5:44:A9:1:2B:E1:EE:D5:B7:61:58:90:7:8:02:FE:5A:42:19:6C:BF:CF:60:8C:E:7A:DF:BE:4F:CB:2C:58:AD:4F:59:D0:57:B1:2 7:CA:9:8:A4:7:6:6D:D9:5:C4:4C:04:0:06:9:98:C6:A0:20:2D:F0:91:6D:C6:FD:29:4D:96:20:C4:F7:4:DC:48:2E:ED:EC:6:5F:8E::D8:15:FC:65:8E:F7:8D:C9:1E:C:8C:01:5C:89:49:04:44:69:99:2C:1B:92:8:CF: :7:41:2F:CB:B1:B6:24:16:D9:C9:02:69:A1:EE:0F:69:F4:28:BA:70:42:7E:A5:F0:5:B4:C1:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] Basic Constraints IsCA: true - Path length: 0 Authority Info Access Authority Key Identifier 15:29:8C:C5:45:69:AB:B8:B:C:EA:FE:4B:B8:1:D8:DC:F0:E7:76 CRL Distribution Points :E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 48

49 keycertsign - crlsign Service Status A:E4:F4:DE:5F:E:20:70:A1:18:45:BD:FE:6D:CA:6E:41:2B:B7:E4:ED:84:FD:4F:1B:7B:49:6C:A D:FF:2C:AC Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T11:1:20Z Extension (critical): Qualifiers [QCNoSSCD] Qualifier type description [en] it is ensured by the trust service provider and controlled (supervision model) or audited (accreditation model) by the referenced Member State (respectively its Supervisory Body or Accreditation Body) that all Qualified Certificates issued under the service identified in "Service digital identity" and further identified by the filters information used to further identify under the "Sdi" identified trust service that precise set of Qualified Certificates for which this additional information is required with regards to the presence or absence of Secure Signature Creation Device (SSCD) support ARE NOT supported by an SSCD (i.e. that that the private key associated with the public key in the certificate is not stored in a Secure Signature Creation Device conformant with the applicable European legislation). Qualifier Criteria list assert=atleastone Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier Service : (1) PostSignum - Qualified Time Stamping Authority, TSU 1 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (1) PostSignum - Qualified Time Stamping Authority, TSU 1 (1) PostSignum - autorita kvalifikovaných časových razítek, TSU 1 Service digital identities CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 49

50 Certificate fields details MIIHGjCCBgKgAwIBAgIDA862MA0GCSqGSIbDQEBCwUAMF0xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4GA1UEAxMXUG9zdFNpZ251 bsbrdwfsawzpzwqgq0ewhhcnmdkwnjiymdg0mjmwwhcnmtiwnjiymdg0mte2wjb+mqswcqydvqqg EwJDWjEsMCoGA1UECgwjxIxlc2vDoSBwb8WhdGEsIHMucC4gW0nEjCA0NzExNDk4M10xIDAeBgNV BAsTF1RpbWUgURhbXBpbmcgQXV0aG9yaXR5MR8wHQYDVQQDExZQbN0U2lnbnVtIFRTQSAtIFRT VSAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j5zSERTjerTE0RyGy/SuBKWDtKF zla9ac1c9brebf0lnqjwyxcltydenswty6ges4hknypv6z7hwy0ris1iqhr8a7lucap0qihk0270 AQJow9y6qGinv7hR1Fitn/SkVUe8X2PE4ir6zeny9zRUxXhER40Am/2YV2Shsim4UYSrVG9eec+p Et0HadVzo8OZhSIqmRInFL0Qa9F4gSAjOxuMlsIlSinwaItKg0zYLCSowTgLzsVvsH6rzJrs4g 1eTWlMQI0HWexwlcTanNgE5nKmpSjbrykR5j+YYJ+VyIoIZXxFWtRRvIhbhBQV+atLoQ9IAl 4hC9ByO2LwIDAQABo4IDwDCCA7wwCQYDVR0TBAIwADCCAR8GA1UdIASCARYwggESMIIBDgYIZ4EG AQQBB24wggEAMIHXBggrBgEFBQcCAjCByhqBx1RlbnRvIGt2YWxpZmlrbZhbnkgclzdGVtbZ5 IGNlcnRpZmlrYXQgYnlsIHZ5ZGFuIHBvZGxlIHpha29uYSAyMjcvMjAwMFNiLiBhIG5hdmF6bnlj acbwcmvkcglzds9uaglzihf1ywxpzmllzcbzexn0zw0gy2vydglmawnhdgugd2fziglzcvlzcbh Y2NvcmRpbmcgdG8gTGFIE5vIDIyNy8yMDAwQ29sbC4gYW5kIHJlbGF0ZWQgcmVndWxhdGlvbnMw JAYIKwYBBQUHAgEWGGh0dHA6Ly9dcucG9zdHNpZ251bS5jejAaBggrBgEFBQcBAwQOMAwwCgYI KwYBBQUHCwIwDgYDVR0PAQH/BAQDAgbAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMIGBBgNVHSME ejb4gbsnn7aoizoazxyjmpx4rh5pgmrec6fdpfswwtelmakga1uebhmcq1oxldaqbgnvbaomi8sm ZXNrw6EgcG/FoXRhLCBzLnAuIFtJxIwgNDcxMTQ5ODNdMRwwGgYDVQQDExNQbN0U2lnbnVtIFJv bqguunbggecmiibowydvr0fbiibmjccazywnkayodcglmh0dha6ly9dcucg9zdhnpz251bs5j ei9jcmwvchnxdwfsawzpzwrjys5jcmwwnkayodcglmh0dha6ly9wbn0c2lnbnvtlnr0yy5jei9j cmwvchnxdwfsawzpzwrjys5jcmwwgzkggy+ggyyggylszgfwoi8vcwnhlnbvcrzawdudw0uyov Y24lM2RQbN0U2lnbnVtJTIwUXVhbGlmaWVkJTIwQ0EsbyUzZENlc2thJTIwcG9zdGElMjBzLnAu JTIwJTViSUMlMjA0NzExNDk4MyU1ZCxjJTNkQ1o/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDCB kqcbj6cbjiabiwxkyxa6ly9wbn0c2lnbnvtlnr0yy5jei9jbiuzzfbvcrtawdudw0lmjbrdwfs awzpzwqlmjbdqsxvjtnkq2vza2elmjbwbn0ysuymhmucc4lmjalnwjjqyuymdqmte0otgzjtvk LGMlM2RDWj9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MB0GA1UdDgQWBBTcxgSTyd4iNsepHxiq APPqrIl/zANBgkqhkiG9w0BAQsFAAOCAQEAe6PaIHnaMrx0uFi17VAo7EiA1jHQmxdYoTBEkdv1 mopxc7gquuzm4c2kms1n9wifjyy6sx6cjo8giqotxnhc1iwkome6pqvmnxw80jen98mrynlfq k6elardxznitadlyhfrrz4wtqhu6eslmcssgcee62bv5gqdzz0s1wia7zt2ulmy89kyzw6hgt0jh zgkjta1e6py1hqyhrx1gx+9qmja16yblutq5dyqnd6rvzy/ctlszcjbsx9jtp+xqcsiysuhqfex YsPuDUid09v82iFScMC078cq+a7LE9TNkjlMO4aKTOUxBAkebNyQpewYmvwDqbbIafIIqI44Q== SHA256withRSA PostSignum Qualified CA PostSignum TSA - TSU 1 Subject OU: Time Stamping Authority Mon Jun 22 10:42:0 CEST 2009 Fri Jun 22 10:41:16 CEST 2012 Basic Constraints 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:D2:E:7:48:44:5:8D:EA:D:1:44:72:1B:2F:D2:B8:12:96:0E:D2:85:CE:50:D:00:2D:5C:F5:BA:DE:6D:FD:25:9E: A2:70:C9:77:25:B5:87:44:9D:25:AD:CB:A1:84:B:88:4A:9F:2A:6F:E9:9E:C7:C1:8D:2B:22:CD:48:40:74:7C:6B:B2:D4:71:A:F4:A8:81:E4:D:6E:F4:01:02:68:C:DC:BA:A8:68:A7:BF:B8:51:D4:58:AD:9F:F4:A4:55:47:B C:5F:6:C4:E2:2A:FA:CD:E9:F2:F7:4:54:C5:78:44:47:8D:00:9B:FD:98:57:64:A1:B2:29:B8:51:84:AB:54:6F:5E:79:CF:A9:12:DD:07:69:D5:7:A:C:99:85:2D:C8:AA:64:48:9C:52:F4:41:AF:45:E2:04:80:DE::B1:B8:C9: 6C:22:54:A2:9F:06:88:B4:A8:4:CD:82:C2:4A:8C:1:80:BC:EC:56:FB:07:EA:BC:C9:AE:CE:20:D5:E4:D6:94:C4:08:D0:7D:C2:65:67:B1:C2:57:1:6A:7:60:1:99:CA:9A:94:A:6E:BC:A4:47:98:FE:61:82:7E:57:22:28:21: 95:F1:15:6B:51:46:F2:21:6E:10:50:57:E6:AD:2E:84:D:DC:80:25:E2:10:BD:07:2:B6:2F:02:0:01:00:01 IsCA: false Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Extended Key Usage id_kp_timestamping CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 50

51 Authority Key Identifier A7:9F:B6:8E:89:9:9A:65:76:09:9A:95:F8:44:7E:69:82:6A:DE:0B CRL Distribution Points ldap://qca.postsignum.cz/cn%dpostsignum%20qualified%20ca,o%dceska%20posta%20s.p.%2 0%5bIC% %5d,c%d?certificateRevocationList ldap://postsignum.ttc.cz/cn%dpostsignum%20qualified%20ca,o%dceska%20posta%20s.p.%20 %5bIC% %5d,c%d?certificateRevocationList DC:C6:04:9:C9:DE:22:6:C7:A9:1F:18:AA:00:FD:CF:AA:B2:25:FF digitalsignature - nonrepudiation Service Status 2:94:C6:82:09:27:D7:19:54:4D:B2:1A:27:02:C4:A5:A0:0C:2B:E9:01:50:CB:A5:47:C:1A:C:82: 88:75:B0 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T2:00:00Z Service : (14) PostSignum - Qualified Time Stamping Authority, TSU 2 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (14) PostSignum - Qualified Time Stamping Authority, TSU 2 (14) PostSignum - autorita kvalifikovaných časových razítek, TSU 2 Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 51

52 MIIHGjCCBgKgAwIBAgIDA88TMA0GCSqGSIbDQEBCwUAMF0xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4GA1UEAxMXUG9zdFNpZ251 bsbrdwfsawzpzwqgq0ewhhcnmdkwnjiymtaxndm1whcnmtiwnjiymtaxmzawwjb+mqswcqydvqqg EwJDWjEsMCoGA1UECgwjxIxlc2vDoSBwb8WhdGEsIHMucC4gW0nEjCA0NzExNDk4M10xIDAeBgNV BAsTF1RpbWUgURhbXBpbmcgQXV0aG9yaXR5MR8wHQYDVQQDExZQbN0U2lnbnVtIFRTQSAtIFRT VSAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJhuaXD6j4+mHjkAI5AsO+cq0r58 7lLglJVMwqOAeN0kYIx8lVM/WOBHoLM4G7LWSOcC+9jXG51NZQ9t4wu2nU9OGlZStT1GWzhAWH ugwbuedasxshjo5wwyx7zojn+erzppngdudanrv7xxyeo2qiksfpe1mtyj4uyaldwpn7xtajr1+ 4S42AHk5aYZboHPYwu5TzBSscYTHbYzEmdYjgys6BAzTdVjselGqtcB6xlxRyC08Qe0VxwlowXY mzx+dsehbqrs+hwtpvidkocvdm4rtqzgnvzy/vvzyibjnl82lrldje0s4kdrlmifuuuvqa+idyw 4ChGmFXwQQIDAQABo4IDwDCCA7wwCQYDVR0TBAIwADCCAR8GA1UdIASCARYwggESMIIBDgYIZ4EG AQQBB24wggEAMIHXBggrBgEFBQcCAjCByhqBx1RlbnRvIGt2YWxpZmlrbZhbnkgclzdGVtbZ5 IGNlcnRpZmlrYXQgYnlsIHZ5ZGFuIHBvZGxlIHpha29uYSAyMjcvMjAwMFNiLiBhIG5hdmF6bnlj acbwcmvkcglzds9uaglzihf1ywxpzmllzcbzexn0zw0gy2vydglmawnhdgugd2fziglzcvlzcbh Y2NvcmRpbmcgdG8gTGFIE5vIDIyNy8yMDAwQ29sbC4gYW5kIHJlbGF0ZWQgcmVndWxhdGlvbnMw JAYIKwYBBQUHAgEWGGh0dHA6Ly9dcucG9zdHNpZ251bS5jejAaBggrBgEFBQcBAwQOMAwwCgYI KwYBBQUHCwIwDgYDVR0PAQH/BAQDAgbAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMIGBBgNVHSME ejb4gbsnn7aoizoazxyjmpx4rh5pgmrec6fdpfswwtelmakga1uebhmcq1oxldaqbgnvbaomi8sm ZXNrw6EgcG/FoXRhLCBzLnAuIFtJxIwgNDcxMTQ5ODNdMRwwGgYDVQQDExNQbN0U2lnbnVtIFJv bqguunbggecmiibowydvr0fbiibmjccazywnkayodcglmh0dha6ly9dcucg9zdhnpz251bs5j ei9jcmwvchnxdwfsawzpzwrjys5jcmwwnkayodcglmh0dha6ly9wbn0c2lnbnvtlnr0yy5jei9j cmwvchnxdwfsawzpzwrjys5jcmwwgzkggy+ggyyggylszgfwoi8vcwnhlnbvcrzawdudw0uyov Y24lM2RQbN0U2lnbnVtJTIwUXVhbGlmaWVkJTIwQ0EsbyUzZENlc2thJTIwcG9zdGElMjBzLnAu JTIwJTViSUMlMjA0NzExNDk4MyU1ZCxjJTNkQ1o/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDCB kqcbj6cbjiabiwxkyxa6ly9wbn0c2lnbnvtlnr0yy5jei9jbiuzzfbvcrtawdudw0lmjbrdwfs awzpzwqlmjbdqsxvjtnkq2vza2elmjbwbn0ysuymhmucc4lmjalnwjjqyuymdqmte0otgzjtvk LGMlM2RDWj9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MB0GA1UdDgQWBBSEx/S2hXHG79nQBEzi 8zgvmahXMTANBgkqhkiG9w0BAQsFAAOCAQEAlUUZ/yvLWp9Bm2bz2Ft0Q1y2tEfd062sqSN6d QNJP5lE8tuslXg4y1M+ljEnfNgDJ1sjITLPj+MnXd4DTw/kp5stAl0UINt5qddcUhcTX6XhA9o yuotxbyrkbww9jnxxhenqlxiu2ax4uxd8ul2lavh1ide2rm/qaxukvuh/7kvui/lmdar7ujq7ls /7ivyxSn/SSSzbpS/hdXdAeN4KHv84LI60E0AYFeX+uufxdM5VOT/zmWKfyFjSUhSiLX6bb6J HO8jOd0FXidkrJUQuh7CSMUtXgw2eHr6Zd9s1bL4s5AWXEAvSDh8poQLP2Tu6cP/lUzvEIZ+w== SHA256withRSA PostSignum Qualified CA PostSignum TSA - TSU 2 Subject OU: Time Stamping Authority Mon Jun 22 12:14:5 CEST 2009 Fri Jun 22 12:1:00 CEST 2012 Basic Constraints 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:A8:98:6E:69:70:FA:8F:8F:A6:1E:9:00:2:90:2C:B:E7:2A:D2:BE:7C:EE:52:E0:94:95:4C:C2:A:80:78:DD:24:60:8 C:7C:95:5:F:58:E0:47:A0:B:8:1B:B2:D6:48:E7:02:FB:D8:D7:1B:9D:4D:65:0F:6D:E:0B:B6:9D:4F:4E:1A:56:52:B5:D:F5:DC:65:B:84:05:87:BA:0C:01:50:4D:DD:69:25:D2:84:9:B9:5B:06:1:ED:9A:09:9F:E1:11:C E:9:CD:18:B:9D:00:D4:55:ED:75:D8:12:8D:AA:20:A4:9F:A5:ED:4C:4F:22:78:B9:80:0B:0D:6:CD:EF:1B:40:26:BD:7E:E1:2E:6:00:79:9:69:86:5B:A0:7D:CF:6:0B:B9:4F:0:52:B1:C6:1:1D:B6::12:67:58:8E:0C:A C:E8:10::4D:D5:6:B1:E9:46:AA:D7:01:EB:19:71:47:20:B4:F1:07:B4:57:1C:25:A:05:D8:99:95:FE:75:21:07:6D:04:6C:FA:15:AD:A6:F8:9D:90:E0:95:DC:9:B8:AD:A:B:82:75:59:CB:FB:D5:CF:28:81:26:79:7C:DA:5 4:4B:76:1:4:B:89:1D:AE:5:08:7E:E5:14:56:A0:E:20:6:16:E0:28:46:98:55:F0:41:02:0:01:00:01 IsCA: false Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Extended Key Usage id_kp_timestamping Authority Key Identifier A7:9F:B6:8E:89:9:9A:65:76:09:9A:95:F8:44:7E:69:82:6A:DE:0B CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 52

53 CRL Distribution Points ldap://qca.postsignum.cz/cn%dpostsignum%20qualified%20ca,o%dceska%20posta%20s.p.%2 0%5bIC% %5d,c%d?certificateRevocationList ldap://postsignum.ttc.cz/cn%dpostsignum%20qualified%20ca,o%dceska%20posta%20s.p.%20 %5bIC% %5d,c%d?certificateRevocationList 84:C7:F4:B6:85:71:C6:EF:D9:D0:04:4C:E2:F:8:2F:99:A8:57:1 digitalsignature - nonrepudiation Service Status A5:CD:7E:6D:F5:18:C:BB:2A:C0:D6:ED:97:95:FF:99:0C:9E:E6:9:62:E2:B4:8E:81:9D:87:48:D 6:81:12:A0 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T22:00:00Z Service : (15) PostSignum - Qualified Time Stamping Authority, TSU Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (15) PostSignum - Qualified Time Stamping Authority, TSU (15) PostSignum - autorita kvalifikovaných časových razítek, TSU Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 5

54 MIIHGjCCBgKgAwIBAgIDA9S1MA0GCSqGSIbDQEBCwUAMF0xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4GA1UEAxMXUG9zdFNpZ251 bsbrdwfsawzpzwqgq0ewhhcnmdkwnji1mtiwnde2whcnmtiwnji1mtiwmze5wjb+mqswcqydvqqg EwJDWjEsMCoGA1UECgwjxIxlc2vDoSBwb8WhdGEsIHMucC4gW0nEjCA0NzExNDk4M10xIDAeBgNV BAsTF1RpbWUgURhbXBpbmcgQXV0aG9yaXR5MR8wHQYDVQQDExZQbN0U2lnbnVtIFRTQSAtIFRT VSAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSE5GHYB/EOz47Fl049bCuco9OUo ycofeqy+ejjthlxxb5r+mb59ks//nvryure/0rnhfvmz8k5hoxswjkhmm9jghbqeg8yexofu ukdbffku1c8svlxkszvflsuzdqfmb6orygj2nrxackuvbvntwmazyblqmv6x5q0ublywv6emapn LAPZsJJSFNR8y8j00mH8XBVndzT5HvTcsqkg0g9o0AyahsNtze4UFVe7ZcI9FHtg+aYal+eINTJ 6RKKUVpOfU+npWAEI9aTXunZF7s6mBSnwfB7WWDiclO9kSPZnCcsbmtRnZ5WQR6CGttGP8a/ukF N1Rv7amrAQIDAQABo4IDwDCCA7wwCQYDVR0TBAIwADCCAR8GA1UdIASCARYwggESMIIBDgYIZ4EG AQQBB24wggEAMIHXBggrBgEFBQcCAjCByhqBx1RlbnRvIGt2YWxpZmlrbZhbnkgclzdGVtbZ5 IGNlcnRpZmlrYXQgYnlsIHZ5ZGFuIHBvZGxlIHpha29uYSAyMjcvMjAwMFNiLiBhIG5hdmF6bnlj acbwcmvkcglzds9uaglzihf1ywxpzmllzcbzexn0zw0gy2vydglmawnhdgugd2fziglzcvlzcbh Y2NvcmRpbmcgdG8gTGFIE5vIDIyNy8yMDAwQ29sbC4gYW5kIHJlbGF0ZWQgcmVndWxhdGlvbnMw JAYIKwYBBQUHAgEWGGh0dHA6Ly9dcucG9zdHNpZ251bS5jejAaBggrBgEFBQcBAwQOMAwwCgYI KwYBBQUHCwIwDgYDVR0PAQH/BAQDAgbAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMIGBBgNVHSME ejb4gbsnn7aoizoazxyjmpx4rh5pgmrec6fdpfswwtelmakga1uebhmcq1oxldaqbgnvbaomi8sm ZXNrw6EgcG/FoXRhLCBzLnAuIFtJxIwgNDcxMTQ5ODNdMRwwGgYDVQQDExNQbN0U2lnbnVtIFJv bqguunbggecmiibowydvr0fbiibmjccazywnkayodcglmh0dha6ly9dcucg9zdhnpz251bs5j ei9jcmwvchnxdwfsawzpzwrjys5jcmwwnkayodcglmh0dha6ly9wbn0c2lnbnvtlnr0yy5jei9j cmwvchnxdwfsawzpzwrjys5jcmwwgzkggy+ggyyggylszgfwoi8vcwnhlnbvcrzawdudw0uyov Y24lM2RQbN0U2lnbnVtJTIwUXVhbGlmaWVkJTIwQ0EsbyUzZENlc2thJTIwcG9zdGElMjBzLnAu JTIwJTViSUMlMjA0NzExNDk4MyU1ZCxjJTNkQ1o/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDCB kqcbj6cbjiabiwxkyxa6ly9wbn0c2lnbnvtlnr0yy5jei9jbiuzzfbvcrtawdudw0lmjbrdwfs awzpzwqlmjbdqsxvjtnkq2vza2elmjbwbn0ysuymhmucc4lmjalnwjjqyuymdqmte0otgzjtvk LGMlM2RDWj9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MB0GA1UdDgQWBBSqypcxDztc4E8EHUbj qqtbpzfk8danbgkqhkig9w0baqsfaaocaqeatsgrxvu6ta1v8snz8tjhmmx1fpn8b6ldqrjezuq JYnPTl9dP5ILU5HpM/wG9GPbvR2zjr0rnt7B6e7iXzSsP2kSiFD2E2QKluK6i569rsgBofhBQBM MDb87kWnlOuPu6f+T7Z7VvEsalN0/Flrvaiodb8UMvvrJZtFJ8eOZ0N7QFYA4yG1+22YPLdL17LJ ybwqxzcjr4kmh2wfqgxyb1ekrutjxtwabeu6a95l6hnhfgwgm2rffpl1tfj/ii448lrnlpwophk OzlOOA9YyQtxyJ2J4I2Unx+IwXcTP7ntJBRM0qg5X5aDGTu45y52ZgRqaGk85s+MmHG4aI4dg== SHA256withRSA PostSignum Qualified CA PostSignum TSA - TSU Subject OU: Time Stamping Authority Thu Jun 25 14:04:16 CEST 2009 Mon Jun 25 14:0:19 CEST 2012 Basic Constraints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sCA: false Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Extended Key Usage id_kp_timestamping Authority Key Identifier A7:9F:B6:8E:89:9:9A:65:76:09:9A:95:F8:44:7E:69:82:6A:DE:0B CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 54

55 CRL Distribution Points ldap://qca.postsignum.cz/cn%dpostsignum%20qualified%20ca,o%dceska%20posta%20s.p.%2 0%5bIC% %5d,c%d?certificateRevocationList ldap://postsignum.ttc.cz/cn%dpostsignum%20qualified%20ca,o%dceska%20posta%20s.p.%20 %5bIC% %5d,c%d?certificateRevocationList AA:CA:97:1:0F:B:5C:E0:4F:04:1D:46:E:A9:0B:41:A7:7:E4:F0 digitalsignature - nonrepudiation Service Status D:D5:2E:E:AD:12:A9:5F:2F:1D:A1:F:92:1A:B7:C6:64:2:D7:8E:0:0F:8F:89:F1:68:A9:49:8: 48:1E:66 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T22:00:00Z Service : (25) PostSignum - Qualified Time Stamping Authority, TSU 1 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (25) PostSignum - Qualified Time Stamping Authority, TSU 1 (25) PostSignum - autorita kvalifikovaných časových razítek, TSU 1 Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 55

56 MIIGkTCCBXmgAwIBAgIDD+lTMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmda2mjmxmti0mjvafw0xmza2mjmxmtizntdamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDEwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQDQrmiZlsSOK7L8yVyBjmN+yHrL h500pssmhn+psvkheshzio6p+nx1xgfutsgj8ent2dltqj1uevjuc2fqxhheupbhjfv79buz58w N11K7phpeAifSfH1y9+yuHenISBdNJWdIH+AWdYvi0SM0+TufB6GGiM70Q7Vy4jVlYfxdc2Ga DKgJo5zwu7Zt8P/1NJj4xAP+RiUY28wj9Qte2so8P8xoe7kkqaYm5PZf4ZGdS5DGQdxGWqVaLKM HxyTI8PLWNVBGrrPIcHDuOEVVxxEbH8mH04lOYdlMR8W+zkcfhIv/+XTZdQh4fzHkZmURxKF1ux ar81vcoz5jt5agmbaagjggm1miidmtajbgnvhrmeajaamiibhwydvr0gbiibfjccariwggeobghn gqybbafledccaqawgdcgccsgaqufbwicmihkgohhvgvudg8gazhbglmawtvdmfuesbzexn0zw1v dnkgy2vydglmawthdcbiewwgdnlkyw4gcg9kbgugemfrb25hidiyny8ymdawu2iuigegbmf2yxpu ewnoihbyzwrwaxn1l1roaxmgcxvhbglmawvkihn5crlbsbjzxj0awzpy2f0zsbyxmgaxnzdwvk IGFjY29yZGluZyB0byBMYXcgTm8gMjILzIwMDBDb2xsLiBhbmQgcmVsYXRlZCByZWd1bGF0aW9u czakbggrbgefbqccaryyahr0cdovlddy5wbn0c2lnbnvtlmn6mbogccsgaqufbwedba4wddak BggrBgEFBQcLAjCByAYIKwYBBQUHAQEEgbswgbgwOwYIKwYBBQUHMAKGL2h0dHA6Ly9dcucG9z dhnpz251bs5jei9jcnqvchnxdwfsawzpzwrjytiuyj0mdwgccsgaqufbzachjbodhrwoi8vdd Mi5wbN0c2lnbnVtLmN6L2NydC9wcF1YWxpZmllZGNhMi5jcnQwOwYIKwYBBQUHMAKGL2h0dHA6 Ly9wbN0c2lnbnVtLnR0Yy5jei9jcnQvcHNxdWFsaWZpZWRjYTIuYJ0MA4GA1UdDwEB/wQEAwIG wdawbgnvhsubaf8eddakbggrbgefbqcdcdafbgnvhsmegdawgbsj6ezfiyy5ptcklhioeufmj+xw lzcbsqydvr0fbigpmigmmdwgm6axhi9odhrwoi8vddlnbvcrzawdudw0uyovyjslbzcxvh bglmawvky2eylmnybda2odsgmoywahr0cdovlddziucg9zdhnpz251bs5jei9jcmwvchnxdwfs awzpzwrjytiuyjsmdwgm6axhi9odhrwoi8vcg9zdhnpz251bs50dgmuyovyjslbzcxvhbglm awvky2eylmnybdadbgnvhq4efgqugiqdollmuq0boofiakrdhud/1awdqyjkozihvcnaqelbqad ggebahtnwveeha72iy74l5mrn6xrlderrmc7kaybohx/s7a92zkj0jk8lfc8msqccxhyhne4eh zmzmcspheqe5asjm2qjlwezqogik71hp6orr+g8axbtbdlwhtespi7jsxtkysdvvx2ti6k6brml brguogiphj54m+cwgkscg/qzpxmypgyum/aiai5pjmbsjqmluegveaknrte97xbhke55xd5hewlj kertqezqr9ltwmihqv0on/ecqardwwaw7buxgoekse+jo17+mwhi6zzdsnbtwory64ak/efy7u7o VR74qnF0UP6+z1W+Yy/hEnU+SmKgtJMoreXpFc7d0dQ= SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 1 Subject OU: Time Stamping Authority Wed Jun 2 1:24:25 CEST 2010 Sun Jun 2 1:2:57 CEST 201 Basic Constraints 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:D0:AE:68:99:96:C4:8E:2B:B2:FC:C9:5C:81:8E:6:7E:C8:7A:CB:87:9D:4:D:24:8C:1E:7F:A9:4A:F2:A1:12:C8:59: 22:8E:8F:F8:D5:F5:5C:67:EE:B5:21:A:F0:4:5:D9:D2:ED:A8:9D:54:7A:F2:54:7:61:6A:5C:71:C4:BA:90:61:25:F5:7B:F5:BB:B:E7:CD:F0:7:5D:77:2B:BA:61:A5:E0:22:7D:27:C7:D7:2F:7E:CA:E1:DE:9C:84:81:74:D2 :56:74:81:FE:01:67:58:BE:2D:12::4F:9:B9:FD:C1:E8:61:A2::7E:F4:4:B5:72:E2:5:65:61:FC:5D:7:61:9A:0C:A8:09:A:9C:F0:BB:B6:6D:F0:FF:F5:4:98:F8:C4:0:FE:46:25:18:DB:CC:2:F5:0B:5E:DA:CA:C:F:C C:77:A1:EE:E4:92:A6:98:9B:9:D9:7F:86:46:75:2E:4:19:07:71:19:6A:95:68:B2:8C:1F:1C:9:2:C:CB:58:D5:41:1A:BA:CF:21:C1:C:B8:E1:15:57:1C:44:6C:7F:26:1F:4E:25:DC:E6:1D:94:C4:7C:5B:EC:E4:71:F8:48:BF: FF:97:4D:97:50:87:87:F:1E:46:66:51:1C:4A:17:5B:B1:69:1F:5:54:2A::E4:94:F9:02:0:01:00:01 IsCA: false Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 56

57 CRL Distribution Points :8A:8:A0:B2:CC:B9:0D:01:A2:8D:DF:89:A9:2B:74:7B:8:FF:50 digitalsignature - nonrepudiation Service Status FC:E4:64:6B:4C:6A:7A:CD:A7:FD:77:0:70:A2:CF:18:A5:D2:64:89:A4:65:14:5:A0:95:78:B0:5D :89:A7:5A Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T11:24:25Z Service : (26) PostSignum - Qualified Time Stamping Authority, TSU 2 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (26) PostSignum - Qualified Time Stamping Authority, TSU 2 (26) PostSignum - autorita kvalifikovaných časových razítek, TSU 2 Service digital identities Certificate fields details MIIGkTCCBXmgAwIBAgIDD+lXMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmda2mjmxmti1mjvafw0xmza2mjmxmti1mdnamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDIwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQDCk/g5/hQ/pVT/h+ZUjXBsxOQQ ae4qtwav1klbvqbpcxweeoac79ez7blb6bul06yh1wverwniddv/2yr+8zbfrrqx5stsswxsuf iuqsxmqolfte25wwyc4f++wjopengojdvpktx6oe1+7k1f/2dysfi7pxwqczhkigwqfqh418z5s ux5eku1qxt2z415+8el6y1w9drgpfchfwrjnqxzjg202jdyiuahuinmzck9vkxoaqx6wfvtd0b ktijculswm7tpnsf2sqxo/wbt9jnbttqn6nyfzxieacqgp4pgu68bdarncibhlq7gzyw/vxdf5n Lgtujb6qW1yRAgMBAAGjggM1MIIDMTAJBgNVHRMEAjAAMIIBHwYDVR0gBIIBFjCCARIwggEOBghn gqybbafledccaqawgdcgccsgaqufbwicmihkgohhvgvudg8gazhbglmawtvdmfuesbzexn0zw1v dnkgy2vydglmawthdcbiewwgdnlkyw4gcg9kbgugemfrb25hidiyny8ymdawu2iuigegbmf2yxpu ewnoihbyzwrwaxn1l1roaxmgcxvhbglmawvkihn5crlbsbjzxj0awzpy2f0zsbyxmgaxnzdwvk IGFjY29yZGluZyB0byBMYXcgTm8gMjILzIwMDBDb2xsLiBhbmQgcmVsYXRlZCByZWd1bGF0aW9u czakbggrbgefbqccaryyahr0cdovlddy5wbn0c2lnbnvtlmn6mbogccsgaqufbwedba4wddak BggrBgEFBQcLAjCByAYIKwYBBQUHAQEEgbswgbgwOwYIKwYBBQUHMAKGL2h0dHA6Ly9dcucG9z dhnpz251bs5jei9jcnqvchnxdwfsawzpzwrjytiuyj0mdwgccsgaqufbzachjbodhrwoi8vdd Mi5wbN0c2lnbnVtLmN6L2NydC9wcF1YWxpZmllZGNhMi5jcnQwOwYIKwYBBQUHMAKGL2h0dHA6 Ly9wbN0c2lnbnVtLnR0Yy5jei9jcnQvcHNxdWFsaWZpZWRjYTIuYJ0MA4GA1UdDwEB/wQEAwIG wdawbgnvhsubaf8eddakbggrbgefbqcdcdafbgnvhsmegdawgbsj6ezfiyy5ptcklhioeufmj+xw lzcbsqydvr0fbigpmigmmdwgm6axhi9odhrwoi8vddlnbvcrzawdudw0uyovyjslbzcxvh bglmawvky2eylmnybda2odsgmoywahr0cdovlddziucg9zdhnpz251bs5jei9jcmwvchnxdwfs awzpzwrjytiuyjsmdwgm6axhi9odhrwoi8vcg9zdhnpz251bs50dgmuyovyjslbzcxvhbglm awvky2eylmnybdadbgnvhq4efgqudlodziwdlsqyiopf5faskye+zbkwdqyjkozihvcnaqelbqad ggebaf9ehobhhvwtdzt9kycpdn4zomxkc295flbwy08y1b1tmikcxn4nb2zmr8h8kvvyh4fms USrOQ25EEEqgokPZaPqp7saP+5PkGB6kTEgOXBjlxVMyCG45akgI9emn9iwDygmLaZ0jKxyGmWdc A90lO/XuV/yrcCNvCja09Ov2EVQ51d/ZJGvhCv48korAGKMasCABFMgQCHGNqkuvUX4TLArUGjDF RpT0Fusv1WIN5SMvbChsxf4HCQVUZ0ZnEC8rR2loTCsjLuYomrF0HWitWAqy2x+TDDf85PWxbo7 RBHQBr9RukUN5DxFRUrtLipTLLemKb/uhzR9xIjGfvU= CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 57

58 SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 2 Subject OU: Time Stamping Authority Wed Jun 2 1:25:25 CEST 2010 Sun Jun 2 1:25:0 CEST 201 Basic Constraints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sCA: false Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points :BA:0:64:85:9D:2E:CA:98:88:E:C5:E4:50:2C:9:21:E:64:19 digitalsignature - nonrepudiation CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 58

59 Service Status 84:C2:71:11:7:5B:7:4:46:56:11:61:AD:F0:42:D:0B:C5:0:99:59:C8:5D:8F:21:74:96:E:E0:E2: 74:51 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T11:25:25Z Service : (27) PostSignum - Qualified Time Stamping Authority, TSU Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (27) PostSignum - Qualified Time Stamping Authority, TSU (27) PostSignum - autorita kvalifikovaných časových razítek, TSU Service digital identities Certificate fields details MIIGkTCCBXmgAwIBAgIDD+bJMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmda2mjixmdazmtlafw0xmza2mjixmdayntlamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDMwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCz7FDm/Ucn1HKrVEHa7g++yQwV +pyykr/vw7lhfqef/u+hexvdrp0syimu51yfy7ytqdjm5fmwxsnkwuz/w+sbgnfrk2rjbc9yxex IhpC2OHPa2fYvuRK1DJPteXo8jSjcOInRPKi0+NQB1fQDJf+mHqkFIB9jDPvCW44UUMUT9ukMw NRmdPM8WACMQ94R+grRsRUuUc/ehNPG/Q1qLz/R4D2pRQ1TgDC2q4opXfyZCdaeTKDpAQPMB/E6H nlmicnvw2hhawnbrdcddklztjk6ql7giobub1/2knlm8ibs1e1qmj1+mr7b2x7k1noqpcjni4x FgymA0XwAETAgMBAAGjggM1MIIDMTAJBgNVHRMEAjAAMIIBHwYDVR0gBIIBFjCCARIwggEOBghn gqybbafledccaqawgdcgccsgaqufbwicmihkgohhvgvudg8gazhbglmawtvdmfuesbzexn0zw1v dnkgy2vydglmawthdcbiewwgdnlkyw4gcg9kbgugemfrb25hidiyny8ymdawu2iuigegbmf2yxpu ewnoihbyzwrwaxn1l1roaxmgcxvhbglmawvkihn5crlbsbjzxj0awzpy2f0zsbyxmgaxnzdwvk IGFjY29yZGluZyB0byBMYXcgTm8gMjILzIwMDBDb2xsLiBhbmQgcmVsYXRlZCByZWd1bGF0aW9u czakbggrbgefbqccaryyahr0cdovlddy5wbn0c2lnbnvtlmn6mbogccsgaqufbwedba4wddak BggrBgEFBQcLAjCByAYIKwYBBQUHAQEEgbswgbgwOwYIKwYBBQUHMAKGL2h0dHA6Ly9dcucG9z dhnpz251bs5jei9jcnqvchnxdwfsawzpzwrjytiuyj0mdwgccsgaqufbzachjbodhrwoi8vdd Mi5wbN0c2lnbnVtLmN6L2NydC9wcF1YWxpZmllZGNhMi5jcnQwOwYIKwYBBQUHMAKGL2h0dHA6 Ly9wbN0c2lnbnVtLnR0Yy5jei9jcnQvcHNxdWFsaWZpZWRjYTIuYJ0MA4GA1UdDwEB/wQEAwIG wdawbgnvhsubaf8eddakbggrbgefbqcdcdafbgnvhsmegdawgbsj6ezfiyy5ptcklhioeufmj+xw lzcbsqydvr0fbigpmigmmdwgm6axhi9odhrwoi8vddlnbvcrzawdudw0uyovyjslbzcxvh bglmawvky2eylmnybda2odsgmoywahr0cdovlddziucg9zdhnpz251bs5jei9jcmwvchnxdwfs awzpzwrjytiuyjsmdwgm6axhi9odhrwoi8vcg9zdhnpz251bs50dgmuyovyjslbzcxvhbglm awvky2eylmnybdadbgnvhq4efgqujd+eibbil6ky+nplmdbhibqwu74wdqyjkozihvcnaqelbqad ggebagl0xhoehcknkxwyro5vskaquxbmypfyywprilvqmeajcr76fzpzbqxqg9vjbssjealbin HigsoejmlPWbFDkSl8AsvlJKOyVaMYPw7ZNqZusQFularKVwPQplPjgxXIa+XnsxDNw1+jwNoSP BcI5WBEVZsIMubHi80UGhjqRwr/CCiQGjNjwCV0BzCgQ4C8zH+nNMtsbxUxUHemZsFKe5HnMLV VrF6RixEDEU9cOYODriY/58PmyJ2LlKNsWVvT66Qoss1ZEhSOFhpfp8fC4UxZiv60lxN+WAWYe o6bubnqfq+znnvkx502p4npgqqlyigf2xlaks2wpzg= SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 59

60 Subject OU: Time Stamping Authority Tue Jun 22 12:0:19 CEST 2010 Sat Jun 22 12:02:59 CEST 201 Basic Constraints 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:B:EC:50:E6:FD:47:27:D4:72:AB:54:41:DA:EE:0F:BE:C9:0C:15:FA:9C:98:29:1F:EF:5B:B2:C7:16:A7:9F:FD:4F:A1 :79:75:5D:44:FD:12:60:89:AE:E7:56:1F:6:BC:9:40:2:4C:E5:F9:96:5E:C9:E4:5A:EC:FF:C:E4:B7:6E:0:45:46:4D:AB:24:17:D:61:77:97:22:1A:77:0B:6:87:D:AD:F6:7D:8B:EE:44:AD:4:24:FB:5E:5E:8F:2:4A:7:0 E:22:74:4F:2A:2D:E:5:00:75:7D:00:C9:7F:E9:87:AA:41:48:07:D8:C:E:F0:96:E:85:14:1:44:FD:BA:4:0:5:19:9D:C:CF:16:00:2:10:F7:84:7E:82:B4:6C:45:4B:94:7:F7:A1:4:F1:BF:4:5A:8B:CF:F4:78:0F:6A:51: 4:54:E0:0C:2D:AA:E2:8A:57:7F:26:42:75:A7:9:28:A:40:40:F:01:FC:4E:87:9C:B:08:08:DB:F0:DA:11:C0:C2:70:6B:0D:C0:F7:74:A9:59:4C:99:A:AA:5E:E0:8A:80:54:6F:5F:F6:28:D9:4C:F2:20:52:D4:4D:6A:0:9D:7 E:9A:BE:DB:D9:7E:CA:D6:7:AA:A5:C2:4D:2:8C:77:16:0C:B7:98:0D:17:C0:01:1:02:0:01:00:01 IsCA: false Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points C:F:9E:21:B0:48:2F:A2:98:FA:7:CB:99:D0:47:21:BA:B0:5:BE digitalsignature - nonrepudiation Service Status 7D:4C:7E:2A:21:84:CA:0:29:B:4C:EC:A8:86:5F:D5:91:55:9:D4:EB:5C:62:66:D1:1B:CB:70: A:89:00:50 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T10:0:19Z CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 60

61 2.9 - Service : (28) PostSignum - Qualified Time Stamping Authority, TSU 1 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (28) PostSignum - Qualified Time Stamping Authority, TSU 1 (28) PostSignum - autorita kvalifikovaných časových razítek, TSU 1 Service digital identities Certificate fields details MIIGkTCCBXmgAwIBAgIDEd7FMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmta1mjmxmjqxmdzafw0xnda1mjmxmjqxmdzamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDEwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCTQZVBZ+XN0uPrfkwm0kaXFpy G4xPhQLH4AcwN0E2xcYMNt4SwJf4bTKsLttAS+YsGkYwbIgoDmHaivy6yQIkDLJWLqnrQ+/uGFQU yn5viraumte4winkmlgb5bmjjohrp8jgvle45hsn4uwh+zf9cqrh5hjm2ycoaaggpa7oihq49ls wkrm9uivxij4ugs0uyolzn+u4/adwjpo1bv57hq6uh7y/aqwkyi52in/ngtvwyl8hawvcyqb+vsv 4trxFsNv8ACHOONOXBgyeEHsVwQLeXG+Q4QwgkzNpMnaxuj5wSioEUosjiYhh4DldOWAVClDXRUA YcdZEdzlAeK1AgMBAAGjggM1MIIDMTAJBgNVHRMEAjAAMIIBHwYDVR0gBIIBFjCCARIwggEOBghn gqybbafledccaqawgdcgccsgaqufbwicmihkgohhvgvudg8gazhbglmawtvdmfuesbzexn0zw1v dnkgy2vydglmawthdcbiewwgdnlkyw4gcg9kbgugemfrb25hidiyny8ymdawu2iuigegbmf2yxpu ewnoihbyzwrwaxn1l1roaxmgcxvhbglmawvkihn5crlbsbjzxj0awzpy2f0zsbyxmgaxnzdwvk IGFjY29yZGluZyB0byBMYXcgTm8gMjILzIwMDBDb2xsLiBhbmQgcmVsYXRlZCByZWd1bGF0aW9u czakbggrbgefbqccaryyahr0cdovlddy5wbn0c2lnbnvtlmn6mbogccsgaqufbwedba4wddak BggrBgEFBQcLAjCByAYIKwYBBQUHAQEEgbswgbgwOwYIKwYBBQUHMAKGL2h0dHA6Ly9dcucG9z dhnpz251bs5jei9jcnqvchnxdwfsawzpzwrjytiuyj0mdwgccsgaqufbzachjbodhrwoi8vdd Mi5wbN0c2lnbnVtLmN6L2NydC9wcF1YWxpZmllZGNhMi5jcnQwOwYIKwYBBQUHMAKGL2h0dHA6 Ly9wbN0c2lnbnVtLnR0Yy5jei9jcnQvcHNxdWFsaWZpZWRjYTIuYJ0MA4GA1UdDwEB/wQEAwIG wdawbgnvhsubaf8eddakbggrbgefbqcdcdafbgnvhsmegdawgbsj6ezfiyy5ptcklhioeufmj+xw lzcbsqydvr0fbigpmigmmdwgm6axhi9odhrwoi8vddlnbvcrzawdudw0uyovyjslbzcxvh bglmawvky2eylmnybda2odsgmoywahr0cdovlddziucg9zdhnpz251bs5jei9jcmwvchnxdwfs awzpzwrjytiuyjsmdwgm6axhi9odhrwoi8vcg9zdhnpz251bs50dgmuyovyjslbzcxvhbglm awvky2eylmnybdadbgnvhq4efgque5k9vn6wuci4w1xe5o1ukfgkngwdqyjkozihvcnaqelbqad ggebajdhy2uuwg5dgdkgovd4saz/jso9g6h8+8he+jue0wvdy7jchoaxagzx0cgscefis7upwdw bgw6xubwvbcwda8vp0cr0man4tj+ii2noyas9gvr+pzu7tppu9y5leappofuihgnolesavrt A0e6uZ9XOw1/O1EYlRqkz7lsQXnXZRgswEjNjtkPCfPFFtWZbfh6e7FwUvgmITlvQDY0xVE8f2 Z/Mtz5gCFZ+xiyHamSM8T2dox+KmtAVMJIr5F2DwS/GCziUILohIyQtgTMUlt2POdW9eebAlZqcP BdIKJV58WLKaiVcIQcbJUJhVmn1uTllW/zrfg2Dnp0= SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 1 Subject OU: Time Stamping Authority Mon May 2 14:41:06 CEST 2011 Fri May 2 14:41:06 CEST 2014 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 61

62 Basic Constraints 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:9:41:95:41:67:7F:97:7:4B:8F:AD:F9:0:9B:49:1A:5C:5A:72:1B:8C:4F:85:02:C7:E0:07:0:7:41:6:C5:C6:0C:6: DE:12:C0:97:F8:6D:2:AC:2E:DB:40:4B:E6:2C:1A:46:0:6C:88:28:0E:61:DA:8A:FC:BA:C9:02:24:0C:B2:56:2E:A9:EB:4:EF:EE:18:54:14:C8:DE:6F:89:16:AE:1:7:B8:C0:89:CA:9A:58:1B:E4:19:A:26:81:D1:A7:C8:E 0:56:57:B8:E6:14:8D:E2:EC:7:1F:EC:C5:F5:CA:91:1F:91:C9::6C:9C:8:00:20:18:F0:B:A2:28:50:E:D2:EC:C2:4A:E6:F6:E2:2F:5E:22:78:52:04:B4:51:8A:25:64:DF:AE:E:F6:9D:C2:A:4E:D4:15:79:EE:14:A:52:1E: F2:FD:AA:B0:2B:22:9:DA:2:7F:9C:6B:55:C1:89:7C:1D:A5:AF:09:84:1B:F9:5B:2F:E2:DA:F1:16:C:6F:F0:00:87:8:E:4E:5C:18:2:78:41:EC:57:04:0B:79:71:BE:4:84:0:82:4C:CD:A4:C9:DA:C6:E8:F9:C1:28:A8:11:4 A:2C:8E:26:21:87:80:E5:74:E5:80:54:29:4:5D:15:00:61:C7:59:11:DC:E5:01:E2:B5:02:0:01:00:01 IsCA: false Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points :99:D:BE:7E:B7:C2:E7:22:E1:6D:57:1:9:B5:50:A1:46:90:D8 digitalsignature - nonrepudiation Service Status A5:46:C4:CB:8:C9:2:6D:A:2:2D:F0:9D:42:90:B4:98:74:B7:E9:C9:58:56:C2:97:48:56:D4:A9: 50:C6:FA Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T12:41:06Z Service : (29) PostSignum - Qualified Time Stamping Authority, TSU 2 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (29) PostSignum - Qualified Time Stamping Authority, TSU 2 (29) PostSignum - autorita kvalifikovaných časových razítek, TSU 2 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 62

63 Service digital identities Certificate fields details MIIGkTCCBXmgAwIBAgIDEd7KMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmta1mjmxmjqzmdrafw0xnda1mjmxmjqzmdramh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDIwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQrK0902FeioIjDcRu1CxpET6+ Dod/APvDBP8Rj7OU6sN2+HB6ldowITc8tk4CkhqTkQMlPuTPKpYzR7WFbA2fOKVSimiMzuCWo XkK2fx1v7UDg9gdONQFZPPL+r6zkYmTdz14JCOMRAgCinObbVQgaUf6u9nLCw61uZHSdzsgf1PXh 97ShGz7VQeCCritoc8E1W4Kwp1DcOQyJ214Q5PgdL4Pj0HL5rYsabgtb24vbRCOJwHX4iWqYmNPj ctbwk4ypwezvm8kpii7wrh+kvypypdm+lsieeeamjemfdbsyyht4cwewtdlptlcf2bfssg5ql 4AFWOpqBdgXVAgMBAAGjggM1MIIDMTAJBgNVHRMEAjAAMIIBHwYDVR0gBIIBFjCCARIwggEOBghn gqybbafledccaqawgdcgccsgaqufbwicmihkgohhvgvudg8gazhbglmawtvdmfuesbzexn0zw1v dnkgy2vydglmawthdcbiewwgdnlkyw4gcg9kbgugemfrb25hidiyny8ymdawu2iuigegbmf2yxpu ewnoihbyzwrwaxn1l1roaxmgcxvhbglmawvkihn5crlbsbjzxj0awzpy2f0zsbyxmgaxnzdwvk IGFjY29yZGluZyB0byBMYXcgTm8gMjILzIwMDBDb2xsLiBhbmQgcmVsYXRlZCByZWd1bGF0aW9u czakbggrbgefbqccaryyahr0cdovlddy5wbn0c2lnbnvtlmn6mbogccsgaqufbwedba4wddak BggrBgEFBQcLAjCByAYIKwYBBQUHAQEEgbswgbgwOwYIKwYBBQUHMAKGL2h0dHA6Ly9dcucG9z dhnpz251bs5jei9jcnqvchnxdwfsawzpzwrjytiuyj0mdwgccsgaqufbzachjbodhrwoi8vdd Mi5wbN0c2lnbnVtLmN6L2NydC9wcF1YWxpZmllZGNhMi5jcnQwOwYIKwYBBQUHMAKGL2h0dHA6 Ly9wbN0c2lnbnVtLnR0Yy5jei9jcnQvcHNxdWFsaWZpZWRjYTIuYJ0MA4GA1UdDwEB/wQEAwIG wdawbgnvhsubaf8eddakbggrbgefbqcdcdafbgnvhsmegdawgbsj6ezfiyy5ptcklhioeufmj+xw lzcbsqydvr0fbigpmigmmdwgm6axhi9odhrwoi8vddlnbvcrzawdudw0uyovyjslbzcxvh bglmawvky2eylmnybda2odsgmoywahr0cdovlddziucg9zdhnpz251bs5jei9jcmwvchnxdwfs awzpzwrjytiuyjsmdwgm6axhi9odhrwoi8vcg9zdhnpz251bs50dgmuyovyjslbzcxvhbglm awvky2eylmnybdadbgnvhq4efgqudjfemdy0zd0r09un20rowjoizwwwdqyjkozihvcnaqelbqad ggebaeoh8wdxb1jxa0ujgxkollcrsrlvktep2qwexoh1l7mcczuooh1f8knrntl8oocxbgbzy sgeafjna/f0u8aabcrvaxcmvt0pjnssbjaepatkirqkyss8umgfscyu/p5vqaajvaamas8mk/fzk cyv91/xuxj+mqz/mktueteeo4/b75++gz9blzddtmaoij1pbgbamsqr1jgux0ky1aflwmcqkhkss eszm0zknz7mlxtinlnucuce45osnkgheanowfedvdxqtmuvbrwdpbszhf5sfstjmvbyxushhci esul9xse5bjwpfc4jy+tfaebcrsfgdtcmnhlyvq8bn4= SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 2 Subject OU: Time Stamping Authority Mon May 2 14:4:04 CEST 2011 Fri May 2 14:4:04 CEST 2014 Basic Constraints 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:99:AC:AD:D:D:61:5E:8A:82:2:0D:C4:6E:D4:2C:69:11:E:BE:0E:87:7F:00:FB:C:04:FF:11:8F:B:94:EA:C:76: F8:70:7A:95:DA:0:21:7:C:B4:26:64:E0:29:7:86:A4:E4:40:C9:4F:B9::CA:A5:8C:D1:ED:61:5B:0:67:CE:29:54:A2:9A:2::B8:25:A8:5E:42:B6:7F:1D:6F:ED:40:E0:F6:07:4E:5:01:59:C:F2:FE:AF:AC:E4:62:64:D D:CF:5E:09:08:E:11:02:00:A2:9C:E6:DB:55:08:1A:51:FE:AE:F6:72:C2:C:AD:6E:64:74:9D:CE:C8:1F:D4:F5:E1:F7:B4:A1:1B:E:D5:41:E0:82:AE:2B:68:7:C1:5:5B:82:B0:A7:50:DC:9:0C:89:DB:5E:10:E4:F8:1D:2F:8 :E:D0:72:F9:AD:8B:1A:6E:0B:5B:DB:8B:DB:44:2:89:C0:75:F8:89:6A:98:98:D:E:71:6:D6:2B:8C:8F:C:77:B:BE:6F:24:A6:28:BB:C2:B1:FE:29:56:0F:60:F0:E6:F8:BB:22:78:41:00:0:97:8C:14:6:D2:C9:88:5:E1: C5:84:C2:D7:65:A6:D9:42:17:60:45:B2:CD:E0:E5:0D:CB:E0:01:56:A:9A:81:76:05:D5:02:0:01:00:01 IsCA: false Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 6

64 Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points :1:5E:0:6:4:CC:D:11:D:D5:0D:DB:44:68:C0:9A:22:CD:6C digitalsignature - nonrepudiation Service Status 00:AE:EC:1F:25:6C:15:B:BB:8C:CF:55:DA:DE:CA:21:4:F1:05:70:F1:DB:B8:95:A1:92:85:AC: CD:F2:8:C5 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T12:4:04Z Service : (0) PostSignum - Qualified Time Stamping Authority, TSU Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (0) PostSignum - Qualified Time Stamping Authority, TSU (0) PostSignum - autorita kvalifikovaných časových razítek, TSU Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 64

65 MIIGkTCCBXmgAwIBAgIDEd7MMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmta1mjmxmjq0ndhafw0xnda1mjmxmjq0ndhamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDMwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQDDbjtJ9syWTJuL/JZdLPTIKsxl UKpGUR6UapFfn82SJqZsumWIq8x57GKvpxyTzj9xEMHiFAU0JEevY1EARwYMLhh1hEgofmfYWr o2d2yzr7qshgn+2vv6inl/gheqcvmhx1ar/g50dx2zipdhqmv1dv664u/ouxl+frrjytkj5a42b W9y4Nwcq/PLb86mN4s0Dgkmq+//fQ1DRCpx1YGY9gNywNx4a0CRC2kWoCfx/lUUHWcbTYhqWnjZ cqm90xtda1x+f6uontvd0cr1mcj2lesqcashecisiokak90s+lokkbkszvrcqldlnwoafxuhj2 hv4ydl1rehzhagmbaagjggm1miidmtajbgnvhrmeajaamiibhwydvr0gbiibfjccariwggeobghn gqybbafledccaqawgdcgccsgaqufbwicmihkgohhvgvudg8gazhbglmawtvdmfuesbzexn0zw1v dnkgy2vydglmawthdcbiewwgdnlkyw4gcg9kbgugemfrb25hidiyny8ymdawu2iuigegbmf2yxpu ewnoihbyzwrwaxn1l1roaxmgcxvhbglmawvkihn5crlbsbjzxj0awzpy2f0zsbyxmgaxnzdwvk IGFjY29yZGluZyB0byBMYXcgTm8gMjILzIwMDBDb2xsLiBhbmQgcmVsYXRlZCByZWd1bGF0aW9u czakbggrbgefbqccaryyahr0cdovlddy5wbn0c2lnbnvtlmn6mbogccsgaqufbwedba4wddak BggrBgEFBQcLAjCByAYIKwYBBQUHAQEEgbswgbgwOwYIKwYBBQUHMAKGL2h0dHA6Ly9dcucG9z dhnpz251bs5jei9jcnqvchnxdwfsawzpzwrjytiuyj0mdwgccsgaqufbzachjbodhrwoi8vdd Mi5wbN0c2lnbnVtLmN6L2NydC9wcF1YWxpZmllZGNhMi5jcnQwOwYIKwYBBQUHMAKGL2h0dHA6 Ly9wbN0c2lnbnVtLnR0Yy5jei9jcnQvcHNxdWFsaWZpZWRjYTIuYJ0MA4GA1UdDwEB/wQEAwIG wdawbgnvhsubaf8eddakbggrbgefbqcdcdafbgnvhsmegdawgbsj6ezfiyy5ptcklhioeufmj+xw lzcbsqydvr0fbigpmigmmdwgm6axhi9odhrwoi8vddlnbvcrzawdudw0uyovyjslbzcxvh bglmawvky2eylmnybda2odsgmoywahr0cdovlddziucg9zdhnpz251bs5jei9jcmwvchnxdwfs awzpzwrjytiuyjsmdwgm6axhi9odhrwoi8vcg9zdhnpz251bs50dgmuyovyjslbzcxvhbglm awvky2eylmnybdadbgnvhq4efgquduatbj2xqv6xvkvzvjmv+epgsxmwdqyjkozihvcnaqelbqad ggebad2obbl+o+prrv2u2kpi8izux7lydvxcrge5gxyklzh+2/ljvlzi+ynnyh/gwxy2zwwzm0r squiocwoskcuyf4vzlbeg+kc9vw05wg8dqq1/m0op/ijgqdnki/cjoalt7rsxfvgwnwna15wzn KRNN6M0VsPNghEfR2PWjEqYOGjtafd7JYDuw7qz7qR4kwWKw9d8/2mJeipWe/F/OMKdIUnsf2I MmRdDIIqw4+NWwkqdb4qDoSWilq+lb/k0pKjEIoPgybDdC2w9VOiIhyalEpu1nzMqsXuzBIt8TS0 if0/kbj6msex8incvgkrvtrpnzzjkdds2sokfsmyvy= SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU Subject OU: Time Stamping Authority Mon May 2 14:44:48 CEST 2011 Fri May 2 14:44:48 CEST 2014 Basic Constraints 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:C:6E:B:49:F6:CC:96:4C:9B:8B:FC:96:5D:2C:F4:C8:2A:CC:65:50:AA:46:51:1E:94:6A:91:77:7E:7F:6:48:9A:99:B 2:E9:96:22:AF:1:E7:B1:8A:BE:9C:72:4F:8:FD:C4:4:07:88:50:14:D0:91:1E:BD:8D:44:01:1C:18:0:B8:61:D6:11:7:82:87:E6:7D:85:AB:A:67:76:C9:9A:FB:41:21:C6:7:ED:AF:57:A2:27:2F:F8:21:79:07:2F:0:75:F5:69 :1F:F7:1B:9D:0:C7:6C:E2:A5:D8:50:9A:FD:5D:BF:AE:B8:BB:F:94:5E:5F:9F:AD:18:F2:B4:A8:F9:6B:8D:81:5B:DC:B8:7:07:2A:FC:F2:DB:F:A9:8D:E2:CD:0:82:49:AA:FB:FF:DF:4:50:D1:0A:9C:75:60:66:D:80:D C:B0:7:1E:1A:D0:24:42:DA:45:A8:0B:77:F1:FE:55:14:1D:67:1B:4D:88:6A:5A:78:D9:71:09:BD:D1:74:DD:6B:55:FE:7F:AB:A8:5:5:4:D1:CA:F5:98:22:76:2C:44:90:DC:20:2C:DC:71:02:8A:C2:0E:28:09:D:D1:2F:A5: A2:42:9B:29:2C:EF:44:24:25:0E:5:70:8:07:F1:BA:18:F6:85:5E:18:76:5D:51:10:7C:C7:02:0:01:00:01 IsCA: false Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 65

66 CRL Distribution Points :E6:9:06:D:B1:41:5E:B1:BE:4B:D9:56:9:AF:F9:E:E0:4B:1 digitalsignature - nonrepudiation Service Status B2:00:F0:B4:B7:0A:6:7C:D1:FE:A2:08:6C:26:74:64:7D:85:C1:EE:C5:1B:57:C8:06:B4:9D:15:62: F:5F:70 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T12:44:48Z Service : (1) PostSignum - Qualified Time Stamping Authority, TSU 4 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (1) PostSignum - Qualified Time Stamping Authority, TSU 4 (1) PostSignum - autorita kvalifikovaných časových razítek, TSU 4 Service digital identities Certificate fields details MIIGkTCCBXmgAwIBAgIDEubBMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmtexmtaxmdmxmdzafw0xndexmtaxmdmxmdzamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDQwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCS1+elPBB2YBr2fPybqL0Unby 9r7n/aQAJqyPv6udZcFKep1pd0zXloLrLW8bVynYyjUWwtZ0HJ8x/S4y4YHVCdWPM6ND+60hhPEs MwiE2PYpF1pB06ZVerPW8QddrOkmXADTSNCuUGyg4KTj8JHC7IUKlcEnI8/5RyDIOLb6MQEHYe ETzV9q2yF9J2KUI0ySZvNWclYTyA1m/5AZWIyBxsoMxeaLtI9nNIGWzO714q6gcqSJGhDlSNo9UT 4X+P/xf/F9n7R2ZazUSZ6yuJFIRcHHCrkVRHrIKTMaQ1lgJ1FDury2z+rTkWFrQnrrKazA9eSqN0 fxw2aharktvagmbaagjggm1miidmtajbgnvhrmeajaamiibhwydvr0gbiibfjccariwggeobghn gqybbafledccaqawgdcgccsgaqufbwicmihkgohhvgvudg8gazhbglmawtvdmfuesbzexn0zw1v dnkgy2vydglmawthdcbiewwgdnlkyw4gcg9kbgugemfrb25hidiyny8ymdawu2iuigegbmf2yxpu ewnoihbyzwrwaxn1l1roaxmgcxvhbglmawvkihn5crlbsbjzxj0awzpy2f0zsbyxmgaxnzdwvk IGFjY29yZGluZyB0byBMYXcgTm8gMjILzIwMDBDb2xsLiBhbmQgcmVsYXRlZCByZWd1bGF0aW9u czakbggrbgefbqccaryyahr0cdovlddy5wbn0c2lnbnvtlmn6mbogccsgaqufbwedba4wddak BggrBgEFBQcLAjCByAYIKwYBBQUHAQEEgbswgbgwOwYIKwYBBQUHMAKGL2h0dHA6Ly9dcucG9z dhnpz251bs5jei9jcnqvchnxdwfsawzpzwrjytiuyj0mdwgccsgaqufbzachjbodhrwoi8vdd Mi5wbN0c2lnbnVtLmN6L2NydC9wcF1YWxpZmllZGNhMi5jcnQwOwYIKwYBBQUHMAKGL2h0dHA6 Ly9wbN0c2lnbnVtLnR0Yy5jei9jcnQvcHNxdWFsaWZpZWRjYTIuYJ0MA4GA1UdDwEB/wQEAwIG wdawbgnvhsubaf8eddakbggrbgefbqcdcdafbgnvhsmegdawgbsj6ezfiyy5ptcklhioeufmj+xw lzcbsqydvr0fbigpmigmmdwgm6axhi9odhrwoi8vddlnbvcrzawdudw0uyovyjslbzcxvh bglmawvky2eylmnybda2odsgmoywahr0cdovlddziucg9zdhnpz251bs5jei9jcmwvchnxdwfs awzpzwrjytiuyjsmdwgm6axhi9odhrwoi8vcg9zdhnpz251bs50dgmuyovyjslbzcxvhbglm awvky2eylmnybdadbgnvhq4efgqudtw7mkfw1c5hdokeuv5uabhmxkwdqyjkozihvcnaqelbqad ggebag/rbxvrs79+wj+0hexni4v9ptrixxqimocjlgkitxmlckhzxxnszsczhdpec5zp6pwn2un VqrT50PXoGb9Lzm78A/ugKv1tW4aRLI00qcHzLAZ5q6Q9AzfDJb6n7X606yM9XNcwhIBVjydveD XS7faFHuU9QBdILxrJ15a79JD5b44izAzplpdEBEvJdy82XhmnL6QYzvM9z6UDDvyephwUvTJqg quksybvzode4v4bzerturgukmzrdqyxzvxuzp1nhyqfrb0ghl+1lkw7it7dpjjm4uhwkksb1bz j6tweeworwfhgnqbvckax4ekswnq67+xthdsudl6y8= CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 66

67 SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 4 Subject OU: Time Stamping Authority Thu Nov 10 11:1:06 CET 2011 Mon Nov 10 11:1:06 CET 2014 Basic Constraints 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:92:D7:E7:A5:DC:F0:41:D9:80:6B:D9:F:F2:6E:A2:F4:52:76:F2:F6:BE:E7:FD:A4:00:26:AC:8F:BF:AB:9D:65:C1:4A :7A:9D:69:77:4C:D7:96:82:EB:2D:6F:1B:57:29:D8:CA:5:16:C2:D6:74:1C:9F:1:FD:2E:2:E1:81:D5:09:D5:8F::A:4:FB:AD:21:84:F1:2C::08:B7:1:6:D8:A4:5D:69:07:4E:99:55:EA:CF:5B:C4:1D:76:B:A4:99:70:0 :4D:2:42:B9:41:B2:DE:0E:0A:4E:F:09:1C:2E:C8:50:A9:5C:12:72:C:FF:94:72:0C:8:8B:6F:A:10:10:76:1E:11:C:D5:F6:AD:B2:17:D2:76:29:42:4:C9:26:6F:5:67:25:61:C:80:D6:6F:F9:01:95:88:C8:1C:6C:A0:CC:5 E:68:BB:48:F6:7:48:19:6C:CE:EF:5E:2A:EA:07:2A:48:91:A1:0E:54:8D:A:D5:1:E1:7F:8F:FF:17:FF:17:D9:FB:47:66:5A:CD:44:99:EB:2B:89:14:84:5C:1C:70:AB:91:54:47:AC:82:9:1:A4:5:96:02:75:14:B:AB:CB:6C: FE:AD:9:16:16:B4:27:AE:B2:9A:CC:0F:5E:4A:A:74:7D:7C:6:6A:16:B7:44:AB:6F:02:0:01:00:01 IsCA: false Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points :D5:BB:9A:41:56:D5:CE:61:0C:E2:84:52:FE:54:01:B8:66:DD:79 digitalsignature - nonrepudiation CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 67

68 Service Status 18:EA:4:1:68:86:E8:50:A7:AA:8:B9:85:E0:E:48:07:2B:9A:0A:9D:AD:F:65:9F:07:BA:0E:D6 :5:AE:EA Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T10:1:06Z Service : (2) PostSignum - Qualified Time Stamping Authority, TSU 5 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (2) PostSignum - Qualified Time Stamping Authority, TSU 5 (2) PostSignum - autorita kvalifikovaných časových razítek, TSU 5 Service digital identities Certificate fields details MIIGkTCCBXmgAwIBAgIDEubDMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmtexmtaxmdmymtbafw0xndexmtaxmdmymtbamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDUwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCqv0qAAQ7NTJFIKo0OQzwN4Jz PdvYEGcf2MretSZizE2b1+gh7hUXRSYWNhEazmYRc05rmQ/cRdd+0xGkK/duFXG7asD+2UwlQCY/ om0nbthw2femd0qih11ir0jgrz71vpnubhadmrzzubgomotlqtmvbizpeayxx6myvaeib0ba0irp 7/d6KopAvnSTO80sT5WupvHgEVQzTHlHxi0Opynh8ZdzVVXlDnEIs/POizUTCWThPfJaSnHmR 2X+vcE28n55VFpfVcgYXL0cdtgPWiyaFjN7UD1oKoPr+pN1tpbTDX2i84/oM4Ehxm4Qtcbux9g CJJSK+9p/nz9AgMBAAGjggM1MIIDMTAJBgNVHRMEAjAAMIIBHwYDVR0gBIIBFjCCARIwggEOBghn gqybbafledccaqawgdcgccsgaqufbwicmihkgohhvgvudg8gazhbglmawtvdmfuesbzexn0zw1v dnkgy2vydglmawthdcbiewwgdnlkyw4gcg9kbgugemfrb25hidiyny8ymdawu2iuigegbmf2yxpu ewnoihbyzwrwaxn1l1roaxmgcxvhbglmawvkihn5crlbsbjzxj0awzpy2f0zsbyxmgaxnzdwvk IGFjY29yZGluZyB0byBMYXcgTm8gMjILzIwMDBDb2xsLiBhbmQgcmVsYXRlZCByZWd1bGF0aW9u czakbggrbgefbqccaryyahr0cdovlddy5wbn0c2lnbnvtlmn6mbogccsgaqufbwedba4wddak BggrBgEFBQcLAjCByAYIKwYBBQUHAQEEgbswgbgwOwYIKwYBBQUHMAKGL2h0dHA6Ly9dcucG9z dhnpz251bs5jei9jcnqvchnxdwfsawzpzwrjytiuyj0mdwgccsgaqufbzachjbodhrwoi8vdd Mi5wbN0c2lnbnVtLmN6L2NydC9wcF1YWxpZmllZGNhMi5jcnQwOwYIKwYBBQUHMAKGL2h0dHA6 Ly9wbN0c2lnbnVtLnR0Yy5jei9jcnQvcHNxdWFsaWZpZWRjYTIuYJ0MA4GA1UdDwEB/wQEAwIG wdawbgnvhsubaf8eddakbggrbgefbqcdcdafbgnvhsmegdawgbsj6ezfiyy5ptcklhioeufmj+xw lzcbsqydvr0fbigpmigmmdwgm6axhi9odhrwoi8vddlnbvcrzawdudw0uyovyjslbzcxvh bglmawvky2eylmnybda2odsgmoywahr0cdovlddziucg9zdhnpz251bs5jei9jcmwvchnxdwfs awzpzwrjytiuyjsmdwgm6axhi9odhrwoi8vcg9zdhnpz251bs50dgmuyovyjslbzcxvhbglm awvky2eylmnybdadbgnvhq4efgquyq5rg11ohd7tftwapvcd9x6sqsawdqyjkozihvcnaqelbqad ggebaatitsgxxhnk80ed0t9n95gvmaiau/arantjaw1knzttkdjzqosyzppjdtvh0nhgkqikyv 0PRhEMOubFdg7PGvr9fTqHOF0bf8ysuS1ufMLeyJgqIgHGgqnkUpNiyv8dSYJej6g6DCQO2EoQxE tvnknlcaa750clrn7j0no9fmud4pclh6fzompwy2puyww+bqvavdabkg1kbdi0umvxcd8hzsfej vgnt+kpxstzyxya5pxes9dq0kzewhz8gsefqww7/sspqonbtkloowmafrnxqydfztiwog2j5m B2fJ+MAjtKvObXHYSdmPg1ELcoWOLjbgvZYvcwBDqg= SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 5 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 68

69 Subject OU: Time Stamping Authority Thu Nov 10 11:2:10 CET 2011 Mon Nov 10 11:2:10 CET 2014 Basic Constraints 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:AA:BF:4A:80:01:0E:CD:4C:91:48:2A:8D:0E:4:7C:F0:7:82:7:D:DB:D8:10:67:1F:D8:CA:DE:B5:26:62:CC:4D:9 B:D7:E8:21:EE:15:17:45:26:16:6:11:1A:CE:66:11:7:4E:6B:99:0F:DC:45:D7:7E:D:11:A4:2B:F7:6E:15:71:BB:6A:C0:FE:D9:4C:25:40:26:F:A2:6D:27:6E:D1:F0:D9:F7:A6:77:44:08:87:5D:62:AF:48:C6:AF:E:F5:54:F: 6E:6C:70:0:2:B6:59:B8:18:0E:2:84:CB:A9::2F:6E:2C:E9:79:AC:B1:5F:A9:98:BC:01:22:07:46:DA:D0:8A:CF:EF:F7:7A:2A:8A:40:BE:7D:D2:4C:EF:4:B1:E:56:BA:9B:C7:DE:01:15:4:4:C7:94:7C:62:D0:EA:72:9E :1F:19:77:5:55:5E:50:E7:10:8B:F:F:7:A2:CD:44:C2:59:8:4F:7C:96:92:9C:79:91:D9:7F:AF:70:4D:F6:F2:7E:79:54:5A:5F:55:C8:18:5C:BD:1C:76:D8:0F:5A:2C:9A:16:D:CD:ED:40:F5:A0:AA:0F:AF:EA:4D:D6:DA:5 B:4C:5:F6:8B:CE:F:A0:CE:04:87:19:B8:42:D7:1B:BB:1F:60:08:92:52:2B:EF:69:FE:7C:FD:02:0:01:00:01 IsCA: false Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points :0E:51:8:5D:68:85:DE:ED:7E:DC:1A:A6:F7:0:F5:7E:AC:41:20 digitalsignature - nonrepudiation Service Status FF:CB:B1:6E:CB:B9:62:9E:12:AB:A6:21:1:C5:1B:05:C0:E6:B:1C:C8:7E:26:5B:60:75:15:C:04 :B:07:79 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T10:2:10Z CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 69

70 Service : () PostSignum - Qualified Time Stamping Authority, TSU 6 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name () PostSignum - Qualified Time Stamping Authority, TSU 6 () PostSignum - autorita kvalifikovaných časových razítek, TSU 6 Service digital identities Certificate fields details MIIGkTCCBXmgAwIBAgIDEubHMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmtexmtaxmdmzmdbafw0xndexmtaxmdmzmdbamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDYwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCgsLZdGKey9GvwARRCX8kNZqD6 L9waesaBQ0PLBrwN6HdpqwcU0zAY1hKOlEMZwEdPTIwDGA8h61vrAcDYfWYvOeot/H8EWe8L1v EaaWs1089rRh0Eh+DaEpOMImBGGshSgl4WmsqYAV9WAes/H2i7nCOpH4RMTWK6F/uAKwRAhsjv 2LNqa90EEKQGrYyGTgT4FPOspZwsh6ZhhJAf1dnrjqe/mLG2DSJwomwZbacvJWDa6o4zE4Yt7Pn knnrzxjc2sbqcbea0ejvrq6g+k6npjse92bgieump+niryiar247e65go2ylcdexhhlkfsixv1s +nvcxw60ktg7agmbaagjggm1miidmtajbgnvhrmeajaamiibhwydvr0gbiibfjccariwggeobghn gqybbafledccaqawgdcgccsgaqufbwicmihkgohhvgvudg8gazhbglmawtvdmfuesbzexn0zw1v dnkgy2vydglmawthdcbiewwgdnlkyw4gcg9kbgugemfrb25hidiyny8ymdawu2iuigegbmf2yxpu ewnoihbyzwrwaxn1l1roaxmgcxvhbglmawvkihn5crlbsbjzxj0awzpy2f0zsbyxmgaxnzdwvk IGFjY29yZGluZyB0byBMYXcgTm8gMjILzIwMDBDb2xsLiBhbmQgcmVsYXRlZCByZWd1bGF0aW9u czakbggrbgefbqccaryyahr0cdovlddy5wbn0c2lnbnvtlmn6mbogccsgaqufbwedba4wddak BggrBgEFBQcLAjCByAYIKwYBBQUHAQEEgbswgbgwOwYIKwYBBQUHMAKGL2h0dHA6Ly9dcucG9z dhnpz251bs5jei9jcnqvchnxdwfsawzpzwrjytiuyj0mdwgccsgaqufbzachjbodhrwoi8vdd Mi5wbN0c2lnbnVtLmN6L2NydC9wcF1YWxpZmllZGNhMi5jcnQwOwYIKwYBBQUHMAKGL2h0dHA6 Ly9wbN0c2lnbnVtLnR0Yy5jei9jcnQvcHNxdWFsaWZpZWRjYTIuYJ0MA4GA1UdDwEB/wQEAwIG wdawbgnvhsubaf8eddakbggrbgefbqcdcdafbgnvhsmegdawgbsj6ezfiyy5ptcklhioeufmj+xw lzcbsqydvr0fbigpmigmmdwgm6axhi9odhrwoi8vddlnbvcrzawdudw0uyovyjslbzcxvh bglmawvky2eylmnybda2odsgmoywahr0cdovlddziucg9zdhnpz251bs5jei9jcmwvchnxdwfs awzpzwrjytiuyjsmdwgm6axhi9odhrwoi8vcg9zdhnpz251bs50dgmuyovyjslbzcxvhbglm awvky2eylmnybdadbgnvhq4efgquvpadygklvakfggc5u+pmci5srxawdqyjkozihvcnaqelbqad ggebaehro7kng8wnc1ixfthwi2yym2qqvdihtsfushsktna+g0bzga0xayu10ehtnkmsx+j6hgo kjqriybxum/vbxeqcgva6fozx6xqruw4v1kkc7sq4zykh1m4vpghai5m6kytvofrdajdjj6rt2 RecRmYLchySMp1vGstQXMrqvRnzUeihC4DcA/LqWwPDzUBrT5qYRf7wSMvPi9JjcOQpAvbCENfj Lg9XZ9HL+5qSuPXGqreyLOZ2syYYE8YIhYAyWXOeY6VVcumlvrvw4vJ1nq6Ge47zVB0XG0IEzW 2ktyMcSgrQykGCbCyo9MOz1eKijh5MnL/+meQuBl0= SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 6 Subject OU: Time Stamping Authority Thu Nov 10 11::00 CET 2011 Mon Nov 10 11::00 CET 2014 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 70

71 Basic Constraints 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:A0:B0:B6:5D:18:A7:B2:F4:6B:F0:01:14:42:5F:C9:0D:66:A0:FA:2F:DC:1A:7A:C6:81:4:7D:0F:2C:1A:F0:7:A1:D D:A6:AC:1C:5:4C:C0:6:58:4A:A:51:0C:67:01:1D:D:2:0:0C:60:C:DE:1E:B5:BE:B0:1C:0D:87:D6:62:F:9E:A2:DF:C7:F0:45:9E:F0:BD:6F:11:A6:96:B:5D:C:F6:B4:61:D0:48:7E:0D:A1:29:8:C2:26:04:61:AC:DE: 14:A0:97:7E:16:9A:CA:98:01:5F:56:01:EB:F:1F:68:BB:9C:2:A9:1F:84:4C:4D:62:BA:17:FB:80:2B:04:40:86:C8:EF:D8:B:6A:6B:DD:04:10:A4:06:AD:8C:86:4E:04:F8:14:F:AC:A5:9C:2C:87:A6:61:84:90:1F:D5:D9:EB: 8E:A7:BF:98:B1:B6:0D:22:77:C2:89:B0:65:B6:9C:BC:95:8:6B:AA:8:CC:4E:18:B7:B:E7:92:79:EB:CF:18:DC:D9:26:EA:08:11:1A:D1:E2:55:46:AE:A0:FA:4E:8D:A6:B:1E:F7:66:E0:89:E5:26:A7:E9:E2:45:82:1A:47:6E :B:1:AE:46:A:6C:A5:71:D7:97:1E:1D:E5:29:FB:22:5D:5D:52:FA:7B:C2:5F:0E:B4:2A:D1:BB:02:0:01:00:01 IsCA: false Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points BE:90:0:CA:09:0B:54:02:9F:82:07:9:5:E:E6:72:2E:6C:47:10 digitalsignature - nonrepudiation Service Status 18:ED:4:4F:4B:22:84:7A:D:46:6A:60:E7:0E:9D:FA:19:15:41:FC:6B:56:12:6E:2B:66:DD:05:B7: B6:60:52 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T10::00Z Service : (7) PostSignum - Qualified Time Stamping Authority, TSU 1 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (7) PostSignum - Qualified Time Stamping Authority, TSU 1 (7) PostSignum - autorita kvalifikovaných časových razítek, TSU 1 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 71

72 Service digital identities Certificate fields details MIIGkTCCBXmgAwIBAgIDFAHmMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmja1mzaxmzawmdnafw0xnta1mzaxmzawmdnamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDEwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCmufEcRN6IVr+RX6IXGA7eX4/K Jk+Lg8AREA9uYg4NEnV99j2hlbLGU1P4klauMDwTQwe9boe6II7HT/ZZCWaC4/RX1BaXDHVI5 doyp8g/jncdkgraluk8xdavibpyervbrq0/8iubwmwj2mneswbttiglcd/v2cvjo/p5misvisjz 2mAiyjBCDkFGujKfB7BzEdR/LBASRRhgnDql6uMRDZHrKMJjDK6r7lXAJ+vK/bumKye27Vubz8KV MJxNe+mZVuL6FcVj2gM8CHmLcD/kkag66+2V+QtSO+DOd9jlVr0vdqUUPvuY1/lLMaizyY+GgJNt L6D+0UeqfiWPAgMBAAGjggM1MIIDMTAJBgNVHRMEAjAAMIIBHwYDVR0gBIIBFjCCARIwggEOBghn gqybbafledccaqawgdcgccsgaqufbwicmihkgohhvgvudg8gazhbglmawtvdmfuesbzexn0zw1v dnkgy2vydglmawthdcbiewwgdnlkyw4gcg9kbgugemfrb25hidiyny8ymdawu2iuigegbmf2yxpu ewnoihbyzwrwaxn1l1roaxmgcxvhbglmawvkihn5crlbsbjzxj0awzpy2f0zsbyxmgaxnzdwvk IGFjY29yZGluZyB0byBMYXcgTm8gMjILzIwMDBDb2xsLiBhbmQgcmVsYXRlZCByZWd1bGF0aW9u czakbggrbgefbqccaryyahr0cdovlddy5wbn0c2lnbnvtlmn6mbogccsgaqufbwedba4wddak BggrBgEFBQcLAjCByAYIKwYBBQUHAQEEgbswgbgwOwYIKwYBBQUHMAKGL2h0dHA6Ly9dcucG9z dhnpz251bs5jei9jcnqvchnxdwfsawzpzwrjytiuyj0mdwgccsgaqufbzachjbodhrwoi8vdd Mi5wbN0c2lnbnVtLmN6L2NydC9wcF1YWxpZmllZGNhMi5jcnQwOwYIKwYBBQUHMAKGL2h0dHA6 Ly9wbN0c2lnbnVtLnR0Yy5jei9jcnQvcHNxdWFsaWZpZWRjYTIuYJ0MA4GA1UdDwEB/wQEAwIG wdawbgnvhsubaf8eddakbggrbgefbqcdcdafbgnvhsmegdawgbsj6ezfiyy5ptcklhioeufmj+xw lzcbsqydvr0fbigpmigmmdwgm6axhi9odhrwoi8vddlnbvcrzawdudw0uyovyjslbzcxvh bglmawvky2eylmnybda2odsgmoywahr0cdovlddziucg9zdhnpz251bs5jei9jcmwvchnxdwfs awzpzwrjytiuyjsmdwgm6axhi9odhrwoi8vcg9zdhnpz251bs50dgmuyovyjslbzcxvhbglm awvky2eylmnybdadbgnvhq4efgquenigeqqo568wacqo44rzytvckqwdqyjkozihvcnaqelbqad ggebaajblqiovpchmvj2d4dvniqzxyutuh8z4euzmbuovv5rozajn+/5egn5smvjgklhcua6lp WFwuICPFWCuKMLsVikRnlcpar2nOiSv4byKVyaNNxKX/aW01UB5u4ir/ouOjXwnsrYY2BI5WHvpp u6uo9xw4fmaisxc90bjg9npmqugtmeazsn+0ltoa+trt56xcn/pwmvgjmoazubkwj9cjzpqq5sq9 Qp46A4idWAjZPOhH+fm/1qQhtpzw0T+kNWbrF+cDsNfTjnBAWzKbdoHCFdrAmIUPv7fKvQjoJx+o mxslklbtbkxc5/lwc/5jzd49lkl6zfhg4ydqwqh05u8= SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 1 Subject OU: Time Stamping Authority Wed May 0 15:00:0 CEST 2012 Sat May 0 15:00:0 CEST 2015 Basic Constraints 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:A6:B9:F1:1C:44:DE:88:56:BF:91:5F:A2:17:18:0E:DE:5F:8F:CA:26:4F:8B:DE:0F:00:44:40:D:B9:88:8:4:49:D5:F 7:D8:F6:86:56:CB:19:4D:4F:E2:49:5A:B8:C0:F0:4D:0C:1E:F5:BA:1E:DF:A2:08:EC:74:FF:65:90:96:68:2E:F:45:7D:41:DD:A5:C:1D:52:9:74:EC:8F:F0:6F:C9:4:27:64:81:16:8B:5:72:BC:C4:6:95:89:BA:58:7A:B5:41: 46:AD:F:F2:25:01:5A:6C:09:D8:C:44:B:00:5:4E:28:0B:09:DF:D5:D9:CB:E:B:F:F9:0:84:AF:8A:C8:F:DA:60:22:CA:0:42:0E:41:46:BA:2:9F:07:B0:7:11:D4:7F:2C:10:12:45:18:60:9C:A:A5:EA:E:11:0D:91:E B:28:C2:6:0C:AE:AB:EE:55:C0:27:EB:CA:FD:BB:A6:2B:27:B6:ED:5B:9B:CF:C2:95:0:9C:4D:7B:E9:99:56:E2:FA:15:C5:6:DA:0:C:08:79:8B:70:F:E4:91:A8:A:EB:ED:95:F9:0B:52:B:E0:CE:77:D8:E5:56:BD:2F:7 6:A5:14:E:FB:98:D7:F9:4B:1:A8:B:C9:8F:86:80:9:6D:2F:A0:FE:D1:47:AA:7E:25:8F:02:0:01:00:01 IsCA: false Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 72

73 Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points :D2:20:12:A4:28:E7:AF:7:C1:A7:2A:B:8E:11:CF:2B:6F:70:A4 digitalsignature - nonrepudiation Service Status 79:66:FA:B9:FA:26:C8:7:AF:D5:DD:46:65:5:4E:5C:B6:17:EE:F0:77:5B:9:56:0D:6B:C5:C6:B :7:9F:C Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T15:00:0Z Service : (8) PostSignum - Qualified Time Stamping Authority, TSU 2 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (8) PostSignum - Qualified Time Stamping Authority, TSU 2 (8) PostSignum - autorita kvalifikovaných časových razítek, TSU 2 Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 7

74 MIIGkTCCBXmgAwIBAgIDFAHoMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmja1mzaxmzaxntnafw0xnta1mzaxmzaxntnamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDIwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCRZFI4XJsKLsh9CrboehM1DpCJ LtOuCuVaHrKYflQK2+He7hp95r7m60xfzbz7nksIQJwAAVW/hpr/c4tjrHHxFOHNFDybAbkT7G 6OsXxj8yQQcoVfIQn8ikQs28Ym1jWN7WPeU4WgssLDCekRsJXWqCqsPlIrvN8BJWr9uDMbLT9Va GMsQpsHLS9QerFDOL1a5c1RTPt+ygsb0TyZ5FFLYLL4vZB/vriazRUQsDAPdtcGJGKA6NSQUB0 VlzvxLU6S9WfnQfDe7AxKtjXxSdmlXlZqkQNRaCI/xcLiIqJFPQFuDmV7knntqGVBBbZsTIjVS MmndKaWAhilAgMBAAGjggM1MIIDMTAJBgNVHRMEAjAAMIIBHwYDVR0gBIIBFjCCARIwggEOBghn gqybbafledccaqawgdcgccsgaqufbwicmihkgohhvgvudg8gazhbglmawtvdmfuesbzexn0zw1v dnkgy2vydglmawthdcbiewwgdnlkyw4gcg9kbgugemfrb25hidiyny8ymdawu2iuigegbmf2yxpu ewnoihbyzwrwaxn1l1roaxmgcxvhbglmawvkihn5crlbsbjzxj0awzpy2f0zsbyxmgaxnzdwvk IGFjY29yZGluZyB0byBMYXcgTm8gMjILzIwMDBDb2xsLiBhbmQgcmVsYXRlZCByZWd1bGF0aW9u czakbggrbgefbqccaryyahr0cdovlddy5wbn0c2lnbnvtlmn6mbogccsgaqufbwedba4wddak BggrBgEFBQcLAjCByAYIKwYBBQUHAQEEgbswgbgwOwYIKwYBBQUHMAKGL2h0dHA6Ly9dcucG9z dhnpz251bs5jei9jcnqvchnxdwfsawzpzwrjytiuyj0mdwgccsgaqufbzachjbodhrwoi8vdd Mi5wbN0c2lnbnVtLmN6L2NydC9wcF1YWxpZmllZGNhMi5jcnQwOwYIKwYBBQUHMAKGL2h0dHA6 Ly9wbN0c2lnbnVtLnR0Yy5jei9jcnQvcHNxdWFsaWZpZWRjYTIuYJ0MA4GA1UdDwEB/wQEAwIG wdawbgnvhsubaf8eddakbggrbgefbqcdcdafbgnvhsmegdawgbsj6ezfiyy5ptcklhioeufmj+xw lzcbsqydvr0fbigpmigmmdwgm6axhi9odhrwoi8vddlnbvcrzawdudw0uyovyjslbzcxvh bglmawvky2eylmnybda2odsgmoywahr0cdovlddziucg9zdhnpz251bs5jei9jcmwvchnxdwfs awzpzwrjytiuyjsmdwgm6axhi9odhrwoi8vcg9zdhnpz251bs50dgmuyovyjslbzcxvhbglm awvky2eylmnybdadbgnvhq4efgqutjg//0fcuuxrxggvzmcskzijykywdqyjkozihvcnaqelbqad ggebae0cignxhia14qf/7jnzvksw4oj+8q5k+q7v+anijtjz0foujepreo/zkbpepyk2yg/bmwz y8xtbnpki+mfdvrlorjcsmyfojgeesf2ivmqld8sdhcqx54lxjucz1kdy+trghs1podcawao/ml qe20dpdvdxkrozhljcoczp0e+z1eyzc77lk2ill8n1qjdzz9ir1rvvo/faz7mq4mxidqncefh7l d7sdffdkdhhwbpormw10zxl/l6mg29pbmhcrw58smaa4+vs/qjvwuyuxyl4f9wczi8s6raublod Qsd25DYiwBLBhVBnpf1/I5nhrltOnv9XAKTzTFVWNk= SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 2 Subject OU: Time Stamping Authority Wed May 0 15:01:5 CEST 2012 Sat May 0 15:01:5 CEST 2015 Basic Constraints 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:91:64:52:8:5C:9B:0A:2E:C8:7D:0A:B6:E8:7A:1:5:0E:90:89:2E:D:AE:0A:E5:5A:1E:B2:98:7E:54:0A:DB:E1:DE: EE:1A:7D:E6:BE:E6:EB:4C:5F:CD:BC:FB:9E:4B:08:40:9C:00:01:55:BF:86:9A:FF:7:7E:2D:8E:B1:C7:C4:5:87:4:50:F2:6C:06:F7:91:E:C6:E8:EB:17:C6:F:2:41:07:28:55:F2:10:9F:C8:A4:42:CD:BC:62:6D:6:58:DE: D6:D:E5:8:5A:0B:2C:2F:70:C2:7A:44:6C:25:75:AA:0A:AB:0F:94:8A:EF:7:C0:49:5A:BF:6E:0C:C6:CB:4F:D5:5A:18:CB:10:A6:C1:CB:4B:D4:1E:AC:50:CE:2F:56:B9:7:54:77:4C:FB:7E:CA:0B:1B:D1:C:99:E4:51:4B :60:B2:F8:BD:90:7F:BE:B8:9A:CD:15:10:B0:0:0F:76:D7:06:24:62:80:DF:A:52:41:40:74:56:5C:EF:C7:72:D4:E9:2F:56:7E:74:1F:0D:EE:C0:C4:AB:6:5F:14:9D:9A:55:E5:66:A9:10:5:16:82:2:FC:5C:2F:78:88:A8:91:4F: 40:5B:8:99:5E:E4:9E:7B:6A:19:50:41:6D:9B:1:22:5:52:2:69:DD:29:A5:80:DE:18:A5:02:0:01:00:01 IsCA: false Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 74

75 CRL Distribution Points B4:98:F:FF:47:C2:B9:4C:6B:5E:08:2F:64:C7:12:2B:8:89:CA:46 digitalsignature - nonrepudiation Service Status 88:EE:9F:01:5A:45:61:14::5C:7C:6:08:7A:2A:82:EE:01:91:4A:25:2E:B9:91:A4:AC:6:FF:66:B D:16:7D Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T15:01:5Z Service : (9) PostSignum - Qualified Time Stamping Authority, TSU Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (9) PostSignum - Qualified Time Stamping Authority, TSU (9) PostSignum - autorita kvalifikovaných časových razítek, TSU Service digital identities Certificate fields details MIIGkTCCBXmgAwIBAgIDFAGMMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmja1mzaxmtmymtdafw0xnta1mzaxmtmymtdamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDMwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCiJSQfRiYkMr2l9oTs7A+fx9S 2m8XW5UMYM9rDjaGEPD1zctpNaDt+veNvmIo42tnu/52UeQ7gqb0bymlKfH1V/4USmMs2eg6FPMv 7d4OcKPkX/otN6Ywt86quwEsAWOGoYtIMWc/41C1UcyqcHciBxkcAadCXJyOtj/oIzb54p6AROM NGFw8P1S/erwpI2kwu4Y9Bo2unCibX4xGOQBVL9hRC/+LkL85ErZcMxasDgAdZsgfezcSQh/92 1h2hIPGiqWK0Kqg+MW04DWMcj1/vXtrGsNJqhPImLAsIkXfXmnp2R6sMzUqDbWhJUX/LXoRDtEU 4HoTzoD/nitbAgMBAAGjggM1MIIDMTAJBgNVHRMEAjAAMIIBHwYDVR0gBIIBFjCCARIwggEOBghn gqybbafledccaqawgdcgccsgaqufbwicmihkgohhvgvudg8gazhbglmawtvdmfuesbzexn0zw1v dnkgy2vydglmawthdcbiewwgdnlkyw4gcg9kbgugemfrb25hidiyny8ymdawu2iuigegbmf2yxpu ewnoihbyzwrwaxn1l1roaxmgcxvhbglmawvkihn5crlbsbjzxj0awzpy2f0zsbyxmgaxnzdwvk IGFjY29yZGluZyB0byBMYXcgTm8gMjILzIwMDBDb2xsLiBhbmQgcmVsYXRlZCByZWd1bGF0aW9u czakbggrbgefbqccaryyahr0cdovlddy5wbn0c2lnbnvtlmn6mbogccsgaqufbwedba4wddak BggrBgEFBQcLAjCByAYIKwYBBQUHAQEEgbswgbgwOwYIKwYBBQUHMAKGL2h0dHA6Ly9dcucG9z dhnpz251bs5jei9jcnqvchnxdwfsawzpzwrjytiuyj0mdwgccsgaqufbzachjbodhrwoi8vdd Mi5wbN0c2lnbnVtLmN6L2NydC9wcF1YWxpZmllZGNhMi5jcnQwOwYIKwYBBQUHMAKGL2h0dHA6 Ly9wbN0c2lnbnVtLnR0Yy5jei9jcnQvcHNxdWFsaWZpZWRjYTIuYJ0MA4GA1UdDwEB/wQEAwIG wdawbgnvhsubaf8eddakbggrbgefbqcdcdafbgnvhsmegdawgbsj6ezfiyy5ptcklhioeufmj+xw lzcbsqydvr0fbigpmigmmdwgm6axhi9odhrwoi8vddlnbvcrzawdudw0uyovyjslbzcxvh bglmawvky2eylmnybda2odsgmoywahr0cdovlddziucg9zdhnpz251bs5jei9jcmwvchnxdwfs awzpzwrjytiuyjsmdwgm6axhi9odhrwoi8vcg9zdhnpz251bs50dgmuyovyjslbzcxvhbglm awvky2eylmnybdadbgnvhq4efgqut1en8wweqrbg/ed7ppyvr4rodoswdqyjkozihvcnaqelbqad ggebaeuoogiyn4qowe6vyjgmwtbggx1sbzuujuejtatt9rdlpnggek8zdexkjze/he7ibu6d epwhd1x/xbvpwlw7r4mg4affugr7lqdhfslrmnq6shnoilxnvq8cnhsbeuchosaym7ooyiko ODLGsy4tB7FxsiCNi9DB2fBr+xG1BRGdT9cN+RygwPx/AJvf4WJNWWNdJm/UDGszHXw6oqt6 VQ7i/NzfoxNPUpR0mqAnhfYq+7B+ZSMfyKsTAYHi4Pr9teVJ6tJ+BBXdUTL8EEXi/1Pqdwpv5g NuhRApStNtj4cYpuXAdDie2fCDKnfJJfMk4Koz/wB8o= CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 75

76 SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU Subject OU: Time Stamping Authority Wed May 0 1:2:17 CEST 2012 Sat May 0 1:2:17 CEST 2015 Basic Constraints 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:A2:25:24:1F:46:26:24:2:BD:F6:97:DA:1:B:B0:E:7F:1F:52:DA:6F:17:5B:95:0C:60:CF:6B:0E:6:86:10:F0:F5:C D:CB:69:5:A0:ED:FA:F7:8D:BE:62:28:E:6B:67:BB:FE:76:51:E4:B:82:A6:F4:6F:29:A5:29:F1:F5:57:FE:14:4A:6:2C:D9:E8:A:14:F:2F:ED:DE:0E:70:A:E4:5F:FA:2D:7:A6:0:B7:CE:AA:BB:01:2C:01:6:86:A1:8B: 48:1:67:F:E:50:B5:51:CD:F2:A9:C1:DC:88:1C:64:70:06:9D:09:72:72:A:D8:FF:A0:8C:DB:E7:8A:7A:01:1:8C:4:61:70:F0:FD:52:FD:EA:F0:A4:8D:A4:C2:EE:18:F4:1A:6:BA:70:A2:6D:7E:7:C4:6:90:05:52:F7:F6:1 4:42:FF:E2:E4:2F:CE:44:AD:97:0C:C5:AB:0:80:07:59:B2:07:DE:CD:C4:90:87:FF:76:D6:1D:A1:20:FD:C6:8A:A5:8A:D0:AA:A0:F8:C5:B4:E0:5:8C:72:D:7F:BD:7B:6B:1A:C:49:AA:1:C8:98:B0:2C:22:45:DF:5E:69:E 9:D9:1E:AC::5:2A:0D:B5:A1:25:45:FF:2D:7A:11:0E:D1:14:E0:7A:1:CE:80:FF:9E:2B:5B:02:0:01:00:01 IsCA: false Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points F:51:27:F1:65:9E:41:10:46:FD:E0:FB:C:F6:2F:AF:8A:CE:0C:EB digitalsignature - nonrepudiation CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 76

77 Service Status D6:90:B5:BE:A4:C8:90:C6:E1:E:FC:5C:C:FE:7A:5A:E5:68:4B:8C:A5:A5:DF:F6:8F:86:96:E8:D 0:00:78:5E Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T1:2:17Z Service : (40) PostSignum - Qualified Time Stamping Authority, TSU 4 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (40) PostSignum - Qualified Time Stamping Authority, TSU 4 (40) PostSignum - autorita kvalifikovaných časových razítek, TSU 4 Service digital identities Certificate fields details MIIGkTCCBXmgAwIBAgIDFAGPMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmja1mzaxmtm0mzvafw0xnta1mzaxmtm0mzvamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDQwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQC21WRCQ61p+BK1HSiIoKkKbiVO KYKcn7Tyga9w5VxMW5+8cRcfhP+F04c+IEGAVFnEhhXiKssmFkI9D7gLDukrDOzVvAg8Irb9zR Y9SZCS8NcoVH1UQFrmjNzWLqHvg/sl4a04aHhw1oR5iYYOx7Mwyz8LqAVDiWutKt1JS9As5lDj jyl2jwtojfcmkkc6pg4kopyqvnubidnk4sacje9v7eo2ixo05bnrsojprwnmjnp0tbrf6weosqb 0p7ykZeHUmVHacAkWrO1NFVShRaxGpZ7SoDifo5jX/DUN/bdAH558hqbAkOczXR/KQy288craS icp1pbicvphvagmbaagjggm1miidmtajbgnvhrmeajaamiibhwydvr0gbiibfjccariwggeobghn gqybbafledccaqawgdcgccsgaqufbwicmihkgohhvgvudg8gazhbglmawtvdmfuesbzexn0zw1v dnkgy2vydglmawthdcbiewwgdnlkyw4gcg9kbgugemfrb25hidiyny8ymdawu2iuigegbmf2yxpu ewnoihbyzwrwaxn1l1roaxmgcxvhbglmawvkihn5crlbsbjzxj0awzpy2f0zsbyxmgaxnzdwvk IGFjY29yZGluZyB0byBMYXcgTm8gMjILzIwMDBDb2xsLiBhbmQgcmVsYXRlZCByZWd1bGF0aW9u czakbggrbgefbqccaryyahr0cdovlddy5wbn0c2lnbnvtlmn6mbogccsgaqufbwedba4wddak BggrBgEFBQcLAjCByAYIKwYBBQUHAQEEgbswgbgwOwYIKwYBBQUHMAKGL2h0dHA6Ly9dcucG9z dhnpz251bs5jei9jcnqvchnxdwfsawzpzwrjytiuyj0mdwgccsgaqufbzachjbodhrwoi8vdd Mi5wbN0c2lnbnVtLmN6L2NydC9wcF1YWxpZmllZGNhMi5jcnQwOwYIKwYBBQUHMAKGL2h0dHA6 Ly9wbN0c2lnbnVtLnR0Yy5jei9jcnQvcHNxdWFsaWZpZWRjYTIuYJ0MA4GA1UdDwEB/wQEAwIG wdawbgnvhsubaf8eddakbggrbgefbqcdcdafbgnvhsmegdawgbsj6ezfiyy5ptcklhioeufmj+xw lzcbsqydvr0fbigpmigmmdwgm6axhi9odhrwoi8vddlnbvcrzawdudw0uyovyjslbzcxvh bglmawvky2eylmnybda2odsgmoywahr0cdovlddziucg9zdhnpz251bs5jei9jcmwvchnxdwfs awzpzwrjytiuyjsmdwgm6axhi9odhrwoi8vcg9zdhnpz251bs50dgmuyovyjslbzcxvhbglm awvky2eylmnybdadbgnvhq4efgqu1pikun5nnkfzxtcsrqwoksgiihqwdqyjkozihvcnaqelbqad ggebabfpcl/mqqxtqx07stbumr9wqwfzgxczltap705y1hlvmxxnulemxbh618ojeeafd+mgh5 f4vyqyfcwlxlsmkk87y/rn/bgpf9i6z+x2zlm/gopqul+wz+1nqxy18jhi8vxoyxgeyprixvbwil pneiao27iwkhahcnyd8gqvjwhghtegmyjvouy4zbkb9t9vxcbo9pxwx/efkssc4nytcudw40w1r 4hWGthWvFBvYPsWJVHMwvcAkxYSR1M2FP60dKeG75coMqFPttaSceqyC4rqNZlnK4qg8AESOEFVD U0FWjD7ISPKRg9neIKpboYVHu0XQ2J5ElzPyujv6vec= SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 4 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 77

78 Subject OU: Time Stamping Authority Wed May 0 1:4:5 CEST 2012 Sat May 0 1:4:5 CEST 2015 Basic Constraints 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:B6:D5:64:42:4:AD:69:F8:12:B5:1D:28:88:A0:A9:0A:6E:25:4E:29:82:9C:9F:B4:F2:81:AD:FD:C:95:71:1:6E:7E:F 1:C4:5C:7E:1:FE:DC:5D:8:7:E2:04:18:05:45:9C:48:61:5E:22:AC:B2:61:64:2:D0:FB:80:B0:EE:92:B0:CE:CD:5B:C0:8:C2:2B:6F:DC:D1:6:D4:99:09:2F:0D:72:85:47:D5:44:05:AE:68:CD:CD:62:EA:1E:F8:F:B2:5E:1 A:D:86:87:87:0D:68:47:98:98:DD:8D:CE:C7:B:0:CB:F:0B:A8:05:4:89:6B:AD:2A:DD:49:4B:D0:2C:E6:50:E:8F:22:F6:8D:6B:68:8C:50:A6:28:A7:A:C:6E:0A:8:F6:2A:BE:75:01:20::4A:E1:20:1C:25:EF:55:ED: EA:6:21:7:B4:E4:19:EB:B0:ED:C9:A6:B5:8D:2:9:E9:D2:D6:D1:17:AC:1E:A1:24:01:D2:9E:F2:91:97:87:52:65:47:69:C0:7:91:6A:CE:D4:D1:55:4A:14:5A:C4:6A:59:ED:2A:0:89:FA:9:8D:7F:C:50:DF:DB:74:0D:C7 :E7:9F:21:A9:B0:24:9:CC:D7:47:F2:90:CB:6F:C:72:B6:92:89:CA:75:C:12:1C:54:F8:55:02:0:01:00:01 IsCA: false Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points D6:98:A4:52:7E:67:9E:41:59:5D:0:AC:46:AC:28:29:21:88:22:14 digitalsignature - nonrepudiation Service Status 65:76:4B:F7:C1:A:7:10:67:80:7:2:5B:A1:7E:17:E2:28:2C:F0:C5:E2:06:E9:4C:5D:C:D8:C9:6 5:5A:F6 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T1:4:5Z CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 78

79 Service : (41) PostSignum - Qualified Time Stamping Authority, TSU 1 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (41) PostSignum - Qualified Time Stamping Authority, TSU 1 (41) PostSignum - autorita kvalifikovaných časových razítek, TSU 1 Service digital identities Certificate fields details MIIGhzCCBW+gAwIBAgIDFMCxMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmjewmdexmjq1mdrafw0xodewmdexmjq1mdramh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDEwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCXRHXd/righxqDl2I8f2kOJpJa BZQPhRgzKnhLiprivCKbiFGcUaSt6vy9X7H9a520T722G7aOnjVMWmU8BsAhgmYQo2mymDtb7Jz cercgxhruh4arimehzcjl/h/nfipm8a/2wkbclw4bvqht0dagbtrc5u9wkeyuuyohqpn8nhda9j AZDfvpIzQSrGTCHngtRT1B/vzkzYBqYeQsAi1yhTimKaxHn2LXaxc2b9PDa8cxeK1FdaYgIG U4MbJObskuEV/EyNwSMJ+KOJDtsXegcqdAxpAp2L46Gj8S0w1f/rt/51MWPXhyDCMyM5P1cZFtOj Q/SJTZHFWJTAgMBAAGjggMrMIIDJzCCASAGA1UdIASCARcwggETMIIBDwYJZ4EGAQQBZYECMIIB ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMi5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2eylmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmi5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafinotn+ljjk+1yqueg565+yn5daxmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytiu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMi5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytiuyjs MB0GA1UdDgQWBBQmKu+gWiydGFFRCVqj81jwqzv6jANBgkqhkiG9w0BAQsFAAOCAQEAXBZGRkCr 7nM7aARPkWvukqtKGu9L0elhd2hC1L/rrj7i9EzdkFCgfWE4ZUkcY18QWM510DawE0M1abeEn4C Tz8kxy2tDVVB6TSJNTLspwe9RN/u2yilHFjVyYqETXoa1FrR1CqchzmmJ6fcwqOZu89KNGxmV9 trhacqw/6qr1hdvlxm5z1vpeejd0rwiiqfzwhblrikbvotiiz5ntpcadgji++una/jn4rflkfli QQWUAw/P7Y1UHYrdw6yZ2Eo41b5Lkq8KL8HGyqQRC2SZvfgo0jLZ4kR+JxVCSQVPBBBGT0Wt+vL xmonyjvsnsnw7qvp/yd6np9egn0kw== SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 1 Subject OU: Time Stamping Authority Mon Oct 01 14:45:04 CEST 2012 Mon Oct 01 14:45:04 CEST 2018 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 79

80 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:97:44:75:DD:FE:B8:A0:87:1A:8:97:62:C:7F:69:0E:26:92:5A:05:94:0F:85:18::2A:78:4B:8A:9A:E2:BC:22:9B:88 :51:9C:51:A4:AD:EA:FC:BD:5F:B1:FD:6B:9D:B4:4F:BD:B6:1B:B6:8E:9E:5:4C:5A:65:C:DC:1B:00:86:09:98:42:8D:A6:CA:60:ED:6F:B2:7:71:EA:C2:19:71:D1:B8:7E:7:6A:B2:26:7A:16:42:8E:5F:C7:FC:D1:48:E:6F: 1A:FF:65:8A:6C:29:70:E0:1B:D0:1E:DD:1D:6A:06:ED:AD:CE:6E:F5:62:9E:CA:EB:98:A2:1A:A9:7:C:47:0C:0F:6:01:90:DF:BE:92::41:2A:C6:4C:21:E7:82:D4:5:DF:50:7F:BF:9::60:1A:98:79:0B:00:8B:5D:F2:85: 8:A6:29:AC:47:9F:62:D7:6B:17:6:6F:D:C:6B:C7:1:78:AD:45:DD:D6:98:8:72:06:5:8:1B:24:E6:EC:92:E1:15:FC:4C:8D:C1:2:09:F8:A:89:0E:DB:17:7A:07:2A:74:0C:69:02:9D:8B:E:A1:A:F1:2D:0:D5:FF:EB: B7:FE:75:1:6:D7:87:20:C2::2:9:F:57:19:16:D:A:DD:0F:D2:25:6:47:15:62:5:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points :2A:EF:A0:5A:2C:9D:DC:61:45:44:25:6A:8F:CD:6:C2:AC:EF:EA digitalsignature - nonrepudiation Service Status 16:E:C6:95:F5:6E:75:7:BB:8D:C1:08:8B:59:F:7F:5:42:8:8D:C6:60:B4:70:D4:1F:EC:BE:66:F C:8F:6 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T11:45:04Z Service : (42) PostSignum - Qualified Time Stamping Authority, TSU 2 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (42) PostSignum - Qualified Time Stamping Authority, TSU 2 (42) PostSignum - autorita kvalifikovaných časových razítek, TSU 2 Service digital identities CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 80

81 Certificate fields details MIIGhzCCBW+gAwIBAgIDFMCzMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmjewmdexmjq2mzhafw0xodewmdexmjq2mzhamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDIwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCzSGFZhrjYyc8z1vAUqZvMYop WwFFUVXQHdSNQGgQkhV8EgVB2jT8LO8VqxfglDhOfiD0XW/qBs4imAHFaykuUyy0K6/+sGtS7Rg XREDR4yUjaQJISwoIIWaKRGUhjwUe+sU5rZqz5fL98AcBlRXcNYIFUKxth5Mr1BEj5dIGUx4HqL mouh0flxjzjw0gzjochoqfnetkz0w/8socag/sahlzs2bbelvigti9p+fcubds1twx/m+vzy/70 190Oy8IUmLCPYH+A1v644S/6kdfr6UFv9+F9aNsIZyXUvM0ZiaZZ1LDfJ18wCS8EyNPEGMO/onH JCKs7YMENY7AgMBAAGjggMrMIIDJzCCASAGA1UdIASCARcwggETMIIBDwYJZ4EGAQQBZYECMIIB ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMi5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2eylmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmi5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafinotn+ljjk+1yqueg565+yn5daxmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytiu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMi5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytiuyjs MB0GA1UdDgQWBBQ8ohqgBAjle5qfwdWVcKVEdwGJjANBgkqhkiG9w0BAQsFAAOCAQEAQBkwSo7e pywvvvvy98bt5+4hbpamw4/zp/cwz8ofr4dqeswdq0uqjowcnp9p6x/jne9fpobbcuurwzvyuih JjrCc00uuBi1oMGbGWTuxt0x0sURf9VhFW8KhRW0gwsT6f+Lah0wLTUfuL7y8KuDQQDuwDfvnujQ 8KWkLCdnGlL7MWIX8uY+ykwjyoYGrCzeQSN8Y0TVHKUBlV9WoJop6ElJXOuldlIhDs421kJZFl5 UV19JS0ZvZ/nKIZ8XVeepYxFgCOPrsJPN1d6VnLuilWCoJA8CQN+nRRuOg41rddmnpbITIbW+XA oydkjfhkuyg1wh0hnxtktr7flr1xwq== SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 2 Subject OU: Time Stamping Authority Mon Oct 01 14:46:8 CEST 2012 Mon Oct 01 14:46:8 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:B:48:61:59:86:B8:F7:6:27:C:CF:5B:C0:52:A6:6F:1:8A:29:5B:0D:C5:15:45:57:40:77:52:5:01:A0:42:48:55:F0:4 8:15:07:68:D:F0:B:BC:56:AC:5F:82:50:E1:9:F8:8:D1:75:BF:A8:1B:8:8A:60:07:15:AC:A4:B9:4C:B2:D0:AE:BF:FA:C1:AD:4B:B4:60:DD:74:44:0D:1E:2:52:6:90:24:84:B0:A0:82:16:68:A4:46:52:18:F0:51:EF:AC:5 :9A:D9:AB:E:5F:2F:DF:00:70:19:51:5D:C:58:20:55:0A:C6:D8:79:2:BD:41:12:E:5D:20:65:1:E0:7A:8B:98:E5:07:D1:F9:57:8D:92:56:D2:0C:C9:9:C8:4E:41:F9:DE:B6:46:74:5B:FF:12:8:20:20:FE:C6:A1:2D:94:B6:05 :B1:0B:BC:81:AD:8B:DA:7E:DD:F7:2E:04:4:B5:4F:0C:7F:9B:E5:7:6:FE:F4:D7:DD:0E:CB:C2:14:98:B0:8F:60:7F:80:D6:FE:B8:E1:2F:FA:91:DD:DF:AF:A5:05:BF:DF:85:F5:A:6C:21:9C:97:52:F:4:66:26:99:67:52:C :7C:9D:7C:C0:24:BC:1:2:4F:10:6:0E:FE:89:C7:24:2D:CA:B:B6:0C:10:D6:B:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 81

82 Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points :F2:88:6A:80:10:2:95:EE:6A:7F:07:56:55:C2:95:11:DC:06:26 digitalsignature - nonrepudiation Service Status 14:B8:49:8:7E:A8:9:40:F8:2A:ED:6:47:45:11:1:4E:5A:09:F6:90:E7:66:87:7B:1A:A6:EF:9:2 D:AA:D Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T11:46:8Z Service : (4) PostSignum - Qualified Time Stamping Authority, TSU Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (4) PostSignum - Qualified Time Stamping Authority, TSU (4) PostSignum - autorita kvalifikovaných časových razítek, TSU Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 82

83 MIIGhzCCBW+gAwIBAgIDFMC1MA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmjewmdexmjqmzrafw0xodewmdexmjqmzramh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDMwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCKNaaJWSycVWhjWKSUdm2ZZMGi gho1uun8mvywtsgcjw2pen8urzdu6yipsds1qetqmcpmci9kb+nhhepely/6b7isdoqexreifpv9 S7wMwUW1mWke1RQVu7ftwnb5CuxX9zi4ZiPXsfMz8lS/jaGSPGlQQYi1o5nlkS04jTYzoveUq6u A7jrsiManJsdlZmpTgFJQt/jQOWIQzUNTnmVL+O8m1CcbmTxzwTw9j6MeFARbfgtwUCk0h60LlzB HdVwmUMYowzGPsmj/ZMBitQdsr/HIBOFy/u+/E5JzyNzny9eJQmPKawty2Ei4i+ouJF7QJTBmqG ied59etbddvvagmbaagjggmrmiidjzccasaga1udiascarcwggetmiibdwyjz4egaqqbzyecmiib ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMi5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2eylmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmi5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafinotn+ljjk+1yqueg565+yn5daxmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytiu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMi5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytiuyjs MB0GA1UdDgQWBBTfGYBRIkqRSswf9AzZf6ZEmpFOrzANBgkqhkiG9w0BAQsFAAOCAQEAfDyEG+rl mw4hj8e7ao5ia82va/ytq0hudzeh/ayqa5wu8q8t+ofqyycetga7wyw8jzsewr2se/lnwumjjb ZoO/Zb1k6nr5rYWveJ1q90IvOF7IlDNtkThK9+O2HoRFFuJpE4lUG4K+Lmgo6fqx5Y5TVBiVNkJ+ 8Soq4NHQewxZ9egnsc40dPZ2RGWGsfX7+w/sWD7xi0aUK26fKP0H+VArJdCkPyYV5yjgV6qBV P4TLT701pDs1syG4+bXhWmrsOTu9CFzQkAmhr0FZFeo49qMb8zzpmplFwgWXWCJMRuxuWijUkILw mszytwz9wnc18ubmmlx4ak14jlyu0a== SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU Subject OU: Time Stamping Authority Mon Oct 01 14:47:4 CEST 2012 Mon Oct 01 14:47:4 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:8A:5:A6:89:59:2C:9C:55:68:6:58:A4:94:76:6D:99:64:C1:A2:80:7:B5:B9:49:FC:1:56:0:B5:21:82:27:0D:A9:78: DF:14:AD:90:D4:EB:28:A9:B1:D4:B5:A8:44:D0:98:2:E6:0A:2F:64:6F:E9:C7:1C:4:DE:97:2F:FA:07:B8:92:76:84:04:C6:B7:A2:16:9B:FD:4B:BC:0C:C1:45:B5:99:69:1E:D5:14:15:BB:B7:ED:C2:76:F9:0A:EC:57:F7:8:B8 :66:2:D7:B1:F::F2:54:BF:8D:A1:92:C:69:50:41:88:B5:A:99:E5:91:2D:8:DE:4:D8:CE:8B:DE:52:AE:AE:0:B8:EB:B2:2:1A:9C:9B:1D:95:99:A9:4E:01:49:42:DF:E:40:E5:88:4:5:0D:4E:79:95:2F:E:BC:9B:50:9 C:6E:64:F1:CF:04:F0:F6:E:8C:78:50:11:6D:F8:2D:C1:40:A4:D2:1E:B4:2E:5C:C1:1D:D5:70:99:4:18:A:0C:C6:E:C9:A:FD:9:01:8A:D4:1D:B2:BF:C7:20:1:B7:17:2F:EE:FB:F1:9:27:C:8D:CE:7C:BD:78:94:26:C:A 6:B0:B7:2D:84:8B:88:BE:A2:E2:45:ED:02:5:06:6A:86:88:47:79:F5:EB:5B:75:D5:6F:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 8

84 CRL Distribution Points DF:19:80:51:22:4A:91:4A:CC:1F:F4:0C:D9:7F:A6:44:9A:91:4E:AF digitalsignature - nonrepudiation Service Status 6:F:1:B0:7:1E:52:F1:28:45:79:5E:8E:78:47:44:1:98:46:58:9:24:7:76:A:4F:9E:B2:5:C4:4 D:24 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T11:47:4Z Service : (44) PostSignum - Qualified Time Stamping Authority, TSU 4 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (44) PostSignum - Qualified Time Stamping Authority, TSU 4 (44) PostSignum - autorita kvalifikovaných časových razítek, TSU 4 Service digital identities Certificate fields details MIIGhzCCBW+gAwIBAgIDFMC4MA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmjewmdexmjq4mtzafw0xodewmdexmjq4mtzamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDQwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQDHrpxFJxhtEilaYggiuOPEwJT ZuKcOIcooPNRqMXLy8k/8+nPb6ZHWLTsY7VSaAQ54xrQaWzgMuro8+gdUW9lATG2ghW9QtJPkWn+ VBwPKQaBRUhbTCSHVHycSJmU1a/thV6ireOSqCWNlMyZdin9ofxss/yEORSOcy7KlNG4X0JvDPUC L6eZPx1NCxEsMJzSH+q820aOA5IdGSqOy49Lj7RH9LvfSKiZlNusOpE265tcmZ5W6uBVrAaNXl txscl+torgef1/p9t92drufq5twutat2gdx+tvlk22rsvgbwjkqzzclf1/ofpqez5asv1k4kprd /HyGtldfBOOpAgMBAAGjggMrMIIDJzCCASAGA1UdIASCARcwggETMIIBDwYJZ4EGAQQBZYECMIIB ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMi5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2eylmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmi5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafinotn+ljjk+1yqueg565+yn5daxmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytiu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMi5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytiuyjs MB0GA1UdDgQWBBT5pbsuA05iHBsNsfuAtCNZiKaokTANBgkqhkiG9w0BAQsFAAOCAQEAXD46h8Ch M26JyeuZQSb5rbia52ncRtcRbC+9VjVhlcu58jxC+9NBwQmOSV40VaqWgNFLupN66W12kF2yvf dtef/61rj1mdom4cvdnuihafzexbv1mzrgkmhutnipwozlalvmhlheamxhgopnouzk7zqm5xa+q2 dwir5tothmzgynltnyemryblyfvexp4dpmc/dps1xk6woir1qc22fmh6an+hjtqmobixny+nd+ch GDlwExTiLeSHNhsRBUd/O6ZoqTBAD7qBmbGaXLB+pSXgjsvABb1NE2nvbihlePqxPk4y4r+Jnq xqbpyrkohuwljdf5l1ehe557ch/gw== CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 84

85 SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 4 Subject OU: Time Stamping Authority Mon Oct 01 14:48:16 CEST 2012 Mon Oct 01 14:48:16 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:C7:AE:9C:77:14:9C:61:B4:48:A5:69:88:20:8A:E:8F:1:02:5:66:E2:9C:8:87:28:A0:F:51:A8:C5:CB:CB:C9:F:F :E9:CF:6F:A6:47:58:B4:EC:6:B5:52:68:04:9:E:1A:D0:69:6C:E0:2:EA:E8:F:E8:1D:51:6F:65:01:1:B6:82:15:BD:42:D2:4F:91:69:FE:54:1C:0F:29:06:81:45:48:5B:4C:24:87:54:7C:9C:48:99:94:D5:AF:ED:85:5E:A2:AD: E:92:A8:25:8D:94:CC:99:76:29:FD:A1:FC:6C:B:FC:84:9:14:8E:7:2E:CA:94:D1:B8:5F:42:6F:0C:F5:02:2F:A7:99:F:1D:4D:0B:1D:C4:B0:C2:7:48:7F:AA:F:6D:1A:8:0E:48:74:64:AA:DC:EC:B8:F4:B8:FB:44:7F:4B :BD:F4:8A:89:99:4D:BA:C:A9:1:6E:B9:B5:C9:99:E5:6E:AE:05:5A:C0:68:D5:E5:B7:1B:1C:97:E4:CE:AE:07:85:D7:FA:7D:4F:7F:76:75:1B:9F:AB:9B:70:B9:6:9:D8:67:71:FA:DB:CB:2B:6D:AB:B2:F1:81:C2:9:10:65: 90:A5:7F:5F:E8:7C:F4:04:CF:90:12:57:52:B8:2A:9A:DD:FC:7C:86:B6:57:5F:04:E:A9:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points F9:A5:BB:2E:0:4E:62:1C:1B:0D:B1:FB:80:B4:2:59:88:A6:A8:91 digitalsignature - nonrepudiation A7:E9:EC:7B:1B:2E:B1:D6:18:F5:C:65:4C:59:1C:DE:A8:F4:6B:7F:AC:5D:9A:91:0F:49:C7:50:6 9:76:1A:5E CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 85

86 Service Status Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T11:48:16Z Service : (45) PostSignum - Qualified Time Stamping Authority, TSU 5 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (45) PostSignum - Qualified Time Stamping Authority, TSU 5 (45) PostSignum - autorita kvalifikovaných časových razítek, TSU 5 Service digital identities Certificate fields details MIIGhzCCBW+gAwIBAgIDFMC9MA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmjewmdexmjq5mtrafw0xodewmdexmjq5mtramh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDUwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQC+cSd8oVtBwVRRTVpj85ADuQfN 9ADAuhrXdFSxebmz/vIj1wvEA6fDvnogvASjeoDVO8sCWwuAQVT6O9vPYn5sZZmW9t5Ip+Ku nquywa0rzzkimrro74notm87zz4n2kfreqr92zd4qop1ftvrrz6keckaclrtb68mnwwgxhku99wu /CbGYx0uuCu0YfSMs2t1N5ypMtwGvMwxbOjJ1ScbvlTo9N+lKF88QCt9Ex+fKdinIrx7X47bmm MW2ySoUXSVtZ8QyU7rfO1q5c6y7CFm0OTYlifcCGy7gcaaO2g80l2+fLKOAX86ePeIKM0NHm9eRx AbvvHuFZ2j5PAgMBAAGjggMrMIIDJzCCASAGA1UdIASCARcwggETMIIBDwYJZ4EGAQQBZYECMIIB ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMi5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2eylmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmi5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafinotn+ljjk+1yqueg565+yn5daxmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytiu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMi5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytiuyjs MB0GA1UdDgQWBBTKFI94uLKAvKsLtXPSIM8Wr6o8QDANBgkqhkiG9w0BAQsFAAOCAQEAV1+8I71F w7/w7v2pmdopjab/r94ienwu9pdlersh8tdux1zemkhcxd9chn5cxt1kjjbm70rtcco0yjcpiff H8gDXDMyEzYQSxm7VKRRoHrAbmfMMQeUpvJMhgCOt41PWHT8kTA+CQwmbqHU6yE18F1EDJ99Dc/H hvzb6posnlvvpfxsw4xqxzqxwokfc0md4rm+xd8snhea42nm/nnjqizfxz11q5vgawdkw9hyf EImN6kRqBGiK6ElNXYYHTO9fVI4/cbGIg2/2AQsWb7IjkKM5XWBbkPMY4u10KwgEoSV2ZfRlgQXB rnus/fwcdj0yh0s7yvhdfdlv6vyqq== SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 5 Subject OU: Time Stamping Authority CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 86

87 Mon Oct 01 14:49:14 CEST 2012 Mon Oct 01 14:49:14 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:BE:71:27:7C:A1:5B:41:C1:54:51:4D:5A:6:F:90:0:B9:07:CD:F4:00:C0:BA:1A:D7:74:54:B1:79:B9:B:FE:F2:2:D 7:0B:F7:10:0E:9F:DC:B:E7:A2:0D:EF:01:28:DE:A0:5:4E:F2:C0:96:C2:E0:10:57:74:FA:B:DB:CF:62:7E:6C:65:99:96:F6:DE:48:A7:E2:AE:9E:A5:2:59:AD:2B:CF:9:08:99:1A:CE:EF:89:CE:4E:6F:B:CF:E:27:D8:A1: 6B:12:AA:FD:D9:90:F8:40:EA:75:16:DB:EB:47:E:A4:79:C2:80:72:5A:ED:6F:AF:26:9F:05:A0:5E:12:AE:F7:D5:AE:FC:26:C6:6:1D:2E:B8:2B:B4:61:F4:8C:B:6B:75:7:9C:A9:2:DC:06:BC:CC:1:6C:E8:C9:D5:27:1B: BE:54:E8:F4:DF:A5:28:5F:C:40:2B:7D:1:1F:9F:29:DD:E2:DE:72:2B:C7:B5:F8:ED:B9:A6:1:6D:B2:4A:85:17:49:5B:59:F1:0C:94:EE:B7:CE:D6:AE:5C:EB:2E:C2:16:6D:0E:4D:89:62:7D:C0:86:CB:B8:1C:69:A:B6:8: CD:25:DB:E7:CB:28:E0:17:F:A7:8F:78:82:8C:D0:D1:E6:F5:E4:71:01:BB:EF:1E:E1:59:DA:E:4F:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points CA:14:8F:78:B8:B2:80:BC:AB:0B:B5:7:D2:20:CF:16:AF:AA:C:40 digitalsignature - nonrepudiation Service Status 92:89:17:6:BB:BD:B5:F8:49:D1:1C:41:A2:56:6D:7B:1D:87:F:57:5C:52:B5:CE:F7:B7:A0:B0:EE :78:1:F8 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T11:49:14Z Service : (46) PostSignum - Qualified Time Stamping Authority, TSU 6 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 87

88 (46) PostSignum - Qualified Time Stamping Authority, TSU 6 (46) PostSignum - autorita kvalifikovaných časových razítek, TSU 6 Service digital identities Certificate fields details MIIGhzCCBW+gAwIBAgIDFMDBMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmjewmdexmjuwmdbafw0xodewmdexmjuwmdbamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDYwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCglLSuAI0YVDYXNRST8cXT84+A RaU4Iy/LkYYwFrf2ubuhEbdm0tbvAnnAjcP1PvJmQFDhe8BZbM50hNSyQsNvkkzMsz/Vsxp2J B/+BFqm72Kp5AXZU+Ptgo0/HCsOqFpIEcoPEe9wCDYh4qkBI9YrGKcghXq/PV5s+/Ddf1oamgTg V0paRLickDRS7Tc/KP+SXyANs7oaXR5PmOxUPC4svG8voRFMknEcgV+lgYMsAQeJ9MtQsg/aHLcT +hwbysrjbdki1xn/hze/h5ftej61sa9vzcck9cemnbzuticbdyjirr0xyary4jg7wfktwn5y4i 9RUcIigerea7AgMBAAGjggMrMIIDJzCCASAGA1UdIASCARcwggETMIIBDwYJZ4EGAQQBZYECMIIB ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMi5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2eylmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmi5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafinotn+ljjk+1yqueg565+yn5daxmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytiu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMi5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytiuyjs MB0GA1UdDgQWBBRkgJxvQEWjvo8UGG9h/pCaEXsXYjANBgkqhkiG9w0BAQsFAAOCAQEAmS5zTWYm V4gjSJLinutwVqqGJn48a6o+61825CgYLs+KrvQcdZMpqiGlPE5+wRfsCHEOTEOsFJv1Ev51xz ScO5laDWua/wusON1GFFGZjBN4XGYIxgrA1uwQ1h4I+ZXlLNKKxOgbRIMM5hTF7OQ/B6Zart6II fxzsbyvxssn7pir4wn8psf2marszvfffs0k6hf/osclxveoao68zomr52kzs4hqu6ag06xmaxpre CR9zsufDrWzuauheeiHmSkN8wFPNPre+K58OF2PytRqG4KFrDP70eVKqwADGm5i17rU6seI5rG exr8dftrytf/rwpp25hjlgtb5o9d9q== SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 6 Subject OU: Time Stamping Authority Mon Oct 01 14:50:00 CEST 2012 Mon Oct 01 14:50:00 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:A0:94:B4:AE:00:8D:18:54:6:17:5:14:9:F1:C5:D:F:8F:80:45:A5:8:2:2F:CB:91:86:0:16:B7:F6:B9:BB:B7:84: 46:DD:9B:4B:5B:BC:09:E7:02:7:0F:D4:FB:C9:99:01:4:85:EF:01:65:B:9:D2:1:52:C9:0B:0D:BE:49::DC:CD:EC:CF:F5:6C:C6:9D:89:07:FF:81:16:A9:BB:D8:AA:77:E4:05:D9:5:E:ED:82:8D:F:1C:2B:0E:A8:5A:4 8:11:CA:0F:11:EF:70:08:6:21:E2:A9:01:2:D6:2B:18:A7:20:85:7A:BF:D:5E:6C:FB:F0:DD:7F:5A:1A:9A:04:E0:57:4A:5A:44:B8:9C:90:4:52:ED:7:F:28:FF:92:5F:20:0D:B:BA:1A:5D:1E:4F:98:EC:54:C:2E:2C:BC:6 F:2F:A1:11:4C:92:71:1C:81:5F:A5:81:8:2C:01:07:89:F4:CB:50:B2:0F:DA:1C:B7:1:FA:1C:1B:CA:C4:6:DC:10:E4:2:55:E7:FC:7C:C4:FE:1E:5F:B5:E2:7A:D6:C0:D:55:97:02:9:D7:04:9A:70:59:52:D8:9C:04:6:2:8A: BD:D1:D1:7C:9A:AF:2E:09:8:B5:9F:92:DC:27:E5:8E:22:F5:15:1C:22:28:1E:AD:E6:BB:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 88

89 Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points :80:9C:6F:40:45:A:BE:8F:14:18:6F:61:FE:90:9A:11:7B:17:62 digitalsignature - nonrepudiation Service Status 56:19:59:5F:D8:71:1B:FB:6D:9A:DE:19:84:0:B:14:A1:78:DF:C2:94:6A:94:5B:5:A6:F6:0:0C: B2:E5:7E Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T11:50:00Z Service : (47) PostSignum - Qualified Time Stamping Authority, TSU 1 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (47) PostSignum - Qualified Time Stamping Authority, TSU 1 (47) PostSignum - autorita kvalifikovaných časových razítek, TSU 1 Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 89

90 MIIGhzCCBW+gAwIBAgIDFtqaMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmza4mjyxmda4mjbafw0xotewmdqxmda4mjbamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDEwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQDKLN71W9DFr95qA8AO7KPfeQw0 Wc8q/WUTytfPAcPaacltj1lNlVE8+zgi5C+wPtM4tq5DxTLBMx4od5JEoJoFq4RcYF6eCWOmvS khg4ylpfoj++vonbeldxssjmbweb5xey6jcsckyzwhqpcmbuz7xnyovu0l4bjb0mpiblr7gzij z1mx4os7w+oicrhwwbskad7aubglnvqz8sosupbeatdytumo2depcqt/8spqp2kdewafualaji qm7sji1brqyvlaxl9uyc7dwrtvzkj0bdldb8lfykhh/71t25ug+mxypm/qn90dbassk9zitkub 2LFH1CxBka55AgMBAAGjggMrMIIDJzCCASAGA1UdIASCARcwggETMIIBDwYJZ4EGAQQBZYECMIIB ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMi5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2eylmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmi5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafinotn+ljjk+1yqueg565+yn5daxmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytiu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMi5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytiuyjs MB0GA1UdDgQWBBSVawnyimp2d+o2bXuARlabYNSQrTANBgkqhkiG9w0BAQsFAAOCAQEAgr0ujiLz +vn4mtxjkotzw+1xcjzgvmhy2u/qvcqnzfdcae/76kbk0vy8iamqytfq0evt2omv07pzj7db59 /fdjwzxk4bttui+21bosvunyib+4kr9kabhhyisi5inytrwwbslpi0uhlj6yp0divfinudwqtsbm CFaPDTVvOsi555ClVm7IY18TidCLCjkqrSdjofywRiTac4hh1vWIHzijQtp6AzQINefAvmuMMd0 70S95Jm8p/Pa7w95qkx6IHIsvz+xWH6cSZoWT0VnpXKwRJKRrBQuHyieVNQHpZvHpT04kRmd0R qjd51xdmvokrhsbi8fqdrx5gqcwzuq== SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 1 Subject OU: Time Stamping Authority Mon Aug 26 12:08:20 CEST 201 Fri Oct 04 12:08:20 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:CA:2C:DE:F5:5B:D0:C5:AF:DE:6A:0:C0:0E:EC:A:DF:79:0C:4:59:CF:2A:FD:65:1:CA:D7:CF:01:C:DA:69:C9 :6D:8F:59:4D:95:51:C:FB:7C:E0:8B:90:BE:C0:FB:4C:E2:DA:B9:0F:7C:5:2C:1:1:E2:87:79:24:4A:09:A0:5A:B8:45:C6:05:E9:E0:96:A:6B:D2:90:71:B8:62:5A:45:A0:9F:BE:DE:FA:0D:6C:42:F7:0D:7B:2C:24:C6:D6:1 1:BE:71:1:2E:89:72:C0:A4:6:C:21:AA:90:8C:05:46:7B:C6:7C:A8:BE:ED:0B:E0:18:DB:D2:6:C8:6C:BA:FB:19:98:A:CF:59:97:DF:8:92:EF:0F:A8:88:24:47:5B:06:EC:DC:A6:9D:EC:05:01:18:B9:D5:4:F:12:A2:CB: A9:04:40:1:75:84:EE:9A:8D:9D:12:90:90:B7:FF:12:A6:A:F6:91:D1:0:68:55:00:2C:08:C8:AA:6E:D2:26:2D:41:AE:A6:15:95:A5:CB:F5:4C:82:ED:DC:2B:B6:F6:64:27:40:5D:95:D6:FC:95:FC:8A:84:7F:FB:D6:DD:B9:B8 :6D:F7:FA:6C:72:E:6F:D0:7:DD:0:04:04:AC:9:DC:E2:4C:AB:81:D8:B1:47:D4:2C:41:91:AE:79:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 90

91 CRL Distribution Points :6B:09:F2:8A:6A:76:77:EA:6:6D:7B:80:46:56:9B:60:D4:90:AD digitalsignature - nonrepudiation Service Status 6:5C:67:6:5C:AF:A5:E7:E:D5:2D:C4:2:4A:8E:94:E2:CB:90:1:76:EB:9B:0:1D:0D:C6:47:1A :D5:CF:22 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T09:08:00Z Service : (48) PostSignum - Qualified Time Stamping Authority, TSU 2 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (48) PostSignum - Qualified Time Stamping Authority, TSU 2 (48) PostSignum - autorita kvalifikovaných časových razítek, TSU 2 Service digital identities Certificate fields details MIIGhzCCBW+gAwIBAgIDFtqdMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmza4mjyxmdewntzafw0xotewmdqxmdewntzamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDIwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCxN1VlLfgp8l4KQJMt8pbbTHEW XE4q+5qC6/5yPWVoE+pccbulItfP79PkRoFZpRCgBx8BT/pwSfd0VuTOpHm5beTTGkpHgnzBQb LSkMtrUSydbcGJSv6h9tBLpTdsp1sAvyZySlHPIz0WVbYEQse2xWb/R1SasRRfxOSsi9yGsmKhj9 jktns1fthuvfl19d0r71rx9npbn16h2rbgdwfarbm+wsxjkgve5rnuddbdb4j6ssaybd7orjwwh ade5g9zni6eap+wavzjdxqjic+b8tqwjkhcxndeuiqbm2zfcq5mizmqglx9m+uvuu0j4qv4hu ZGvi/EpeqxWtAgMBAAGjggMrMIIDJzCCASAGA1UdIASCARcwggETMIIBDwYJZ4EGAQQBZYECMIIB ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMi5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2eylmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmi5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafinotn+ljjk+1yqueg565+yn5daxmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytiu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMi5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytiuyjs MB0GA1UdDgQWBBTv0HZgWnNo5jiYSKTi1turdCLHDANBgkqhkiG9w0BAQsFAAOCAQEAmkNmYi L9XeFeg6vxkUObeBC0rREQIXz11OffJFdEL9jpX94M7HB7e/zNJ0sehAMlHP62opb1vum+eToMCP gormesbp+pp0citozylalsdanquu5y+bfdganbc1f9/ctkmydhlsyvcmsuvstqc/ub2tob+z wkn8ugzc0p0jjcgatg8zcqx8iftbzqzx/stcb+zi6i+mkgcayxxrfunkn1t2hfc4pbbjvogvoiq LuUsFlbsYF4qZ7rBLb1EnhTIWYotHVtgsEXDLy1uSvPcBk92TYioXiTsHj/JGnnxKwCKaw72N IAF8habQyQW6DAeCmBXcMHqVwRoLYg== CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 91

92 SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 2 Subject OU: Time Stamping Authority Mon Aug 26 12:10:56 CEST 201 Fri Oct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olicy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points EF:D0:76:60:5A:7:68:E6:8:98:48:A4:E2:DF:5B:6E:AD:D0:8B:1C digitalsignature - nonrepudiation 21:A6:D9:B:46:25:57:C:A9:74:84:DE:4B:CB:ED:17:64:87:04:28:E6:59:0C:DF:EC:A4:98:F5:C4: 62:F:74 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 92

93 Service Status Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T09:10:00Z Service : (49) PostSignum - Qualified Time Stamping Authority, TSU Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (49) PostSignum - Qualified Time Stamping Authority, TSU (49) PostSignum - autorita kvalifikovaných časových razítek, TSU Service digital identities Certificate fields details MIIGhzCCBW+gAwIBAgIDFtqhMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmza4mjyxmdeymtzafw0xotewmdqxmdeymtzamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDMwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQDCeka8Pp2GEn1N6fydwOXt88e uaf5z+ivwk2zcjwepgjlxtvcmw6no0tiyeavzfhvdiei4iuevbqdsno9fkpy9zikrixva1m88f LHbVf/A1aRyOuZkD6FBmU2hNwGhIqnv59T2r/IFd5Uamio7sSD1t+6OApms54LRhJN69tp2DANgw PleJgdeKcxKM02X/hPfdhJPfrTy+6BXDm6kqLrQeiEohE9alfroRHmXcGdYk+ny6aNaji+w1Tlm AjVcVYDv1nRe9O1+hoy2vNIxYyk+cDewsPXlkYVJKNWACf8roWKTZAVrNK8MFbLzxeEw8XBd9iZ xtkrjpm9ebnagmbaagjggmrmiidjzccasaga1udiascarcwggetmiibdwyjz4egaqqbzyecmiib ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMi5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2eylmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmi5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafinotn+ljjk+1yqueg565+yn5daxmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytiu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMi5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytiuyjs MB0GA1UdDgQWBBQnsKdTQDOBHNVv2CdSfmUKXNTnzANBgkqhkiG9w0BAQsFAAOCAQEAI4OiU1EU gtxy4kig8avnxxjthmbwngaximxjf8cjtlmkiqkkefsje2vmaxji742qsv8bztqd72wzf9vyabrc htijayn0njzkjedmoai6dstvqsexmal8gkgwsfwpn2fftluku4d0pjoqlcm5wxmde7lbpzd8vgf 2xkk8cxD0juUW2o6KhAkCvT4rKHtrXaWrE0Lg7X7TvngacBBqv7Fa0V+6ibV8ittN1IhpR5hEH 7jXmPo9RfKP21nwwKQHm4HVag7pDczREOU4/7fmwtb0TA17CbpT9oP0YR0vuq5up/4stlP2e6tr RtSouarvjfnVVix9962nPCsEsGnOfg== SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU Subject OU: Time Stamping Authority CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 9

94 Mon Aug 26 12:12:16 CEST 201 Fri Oct 04 12:12:16 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:C2:7A:46:BC:E:9D:86:12:7D:4D:E9:FC:9D:C:7:97:B7:CF:1E:B9:A1:79:67:E8:95:C2:4D:B:08:95:84:C:62:65: C6:D5:42:1:6E:A7:A:4B:62:C8:40:15:CD:FD:E1:54:2:1E:8B:88:AE:DD:E5:41:41:DB:27:B:D7:CA:F:2F:7:8A:44:62:C5:50:5:9B:CF:05:2C:76:D5:7F:F0:5:69:1C:8E:B9:99:0:E8:50:66:5:68:4D:C0:68:48:AA:7B:F 9:F5:D:AB:FC:81:5D:E5:46:A6:8A:8E:EC:48:D:6D:FB:A:80:A6:6B:9:E0:B4:61:24:DE:BD:B6:9D:8:00:D8:0:E:57:89:8:77:5E:29:CC:4A::4D:97:FE:1:DF:76:12:4F:7E:B4:F2:FB:A0:57:0E:6E:A4:A8:BA:D0:7A :21:28:84:4F:5A:95:FA:E8:44:79:97:70:67:58:9:E9:F2:E9:A:5A:8E:2F:B0:D5:9:66:02:5:5C:55:80:EF:D6:74:5E:F4:ED:7E:86:8C:B6:BC:D2:1:6:29:E:70:7:B0:B0:F5:E5:91:85:49:28:D5:80:09:FF:2B:A1:62:9:64:05 :6B:4:AF:0C:15:B2:F:C5:E1:0:F1:70:77:77:D8:99:C5:9:2B:26:99:B7:F5:E6:E7:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points :B0:A7:5:40::81:1C:D5:77:BF:60:9D:49:F9:94:29:7:5:9F digitalsignature - nonrepudiation Service Status 29:5:8:62:52:4D:5:10:77:A4:81:7D:1B:58:4D:6F:68:A5:D4:E6:7E:65:B8:AA:7B:AE:2A:96:61: 66:0:1D Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T09:12:00Z Service : (50) PostSignum - Qualified Time Stamping Authority, TSU 4 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 94

95 (50) PostSignum - Qualified Time Stamping Authority, TSU 4 (50) PostSignum - autorita kvalifikovaných časových razítek, TSU 4 Service digital identities Certificate fields details MIIGhzCCBW+gAwIBAgIDFtqjMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmza4mjyxmde0mdzafw0xotewmdqxmde0mdzamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDQwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQC2jvCDoLJY/DUH70YGbFWfZee SPa6DJ/S0QcXFtv0yytaJbCaA9dpquaiJUkl1LBoMsPZQwy/ytH20ClcjJRpe/CpPJfYCQC j9lei8uvdbd+ciba+wlznomzbo1ld0gdj2tqzzmwddcnlck+jg5ryeq7ssjqtwo8yzyn2miadj9 epitv9tlalqrpz52vviey16erwjiyv1tzgtdip2holroyyyytfo+jpgf/rlqaot7g9dkzltbd1t izuijarl6cfd5x8ih0jjvahy4afnncsvsewc85kwldlkghofe2jwpwndzq/noqahqh7z8oz0h57 mlzuphqbdw9agmbaagjggmrmiidjzccasaga1udiascarcwggetmiibdwyjz4egaqqbzyecmiib ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMi5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2eylmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmi5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafinotn+ljjk+1yqueg565+yn5daxmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytiu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMi5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytiuyjs MB0GA1UdDgQWBBSCdfydiM/NAxxUg1l+Za+4fmn4YTANBgkqhkiG9w0BAQsFAAOCAQEAK5qCOWBX FMjg4uGkvWruWTRpNLBHXDgcYpHPZjaPYI+eUGOI0Ss6hNyNz1g7v8O6mf+GdwGVhxg6/k96UV tkwqabsjxh+y2t4gju/d5rd0sdq9/lphqvr7spcrxwxegkiebqw+yko1nhoed2+7gebrrylw NTIX5QeYsyxCu/VRTdJrqPTeJGtlPj1chKVHyAuS+emILpM5Re7xVJyDwkr0JtAy7DDJdyf1Pas mphsdigs7/yt0rbaybqv2by62afdmxzzfyvimi8erqcrruxfrj5xfx8bl9jjwi8kvkfpysv2jg5 hrlrykip1d9rz9dtikmsorzagmtw== SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 4 Subject OU: Time Stamping Authority Mon Aug 26 12:14:06 CEST 201 Fri Oct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olicy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 95

96 Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points :75:FC:9D:88:CF:CD:0:1C:54:8:59:7E:65:AF:B8:7E:69:F8:61 digitalsignature - nonrepudiation Service Status C:CC:19:CA:FD:70:E5:86:25:0F:D9:55:EE:00:2D:CB:D6:EF:6D:A7:76:D6:B5:19:B:47:1B:80:7 1:B9:5A:BF Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T09:14:00Z Service : (51) PostSignum - Qualified Time Stamping Authority, TSU 5 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (51) PostSignum - Qualified Time Stamping Authority, TSU 5 (51) PostSignum - autorita kvalifikovaných časových razítek, TSU 5 Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 96

97 MIIGhzCCBW+gAwIBAgIDFtqpMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmza4mjyxmde1mtzafw0xotewmdqxmde1mtzamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDUwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCS6Ss6yz45hdTxKm4IRUfPV0gt gssgpplsfxa/5bkcv4ejioje/flfqr8k8inguzowuxbuvowzuasnhrx9tchsjyse1phtxcf5fxqh GyFzJhvdED/dF/SG2mFspywsXwjeKoDc5pPnJo4OMQ7w5adRqfFOZlsutdinrJSjqOPESr0tTI fb+tletsx9ujy70deirulwptvbizjhholefpi0whpugh8xotog24//n0f9hsdtvpjy0pqshaskg hax9z/bjeorlbnsrhqrapztplhvy/frm/mcgc1jokajgzoq+updnz9mmtv4csilbklsgnylb8r +4d0ZiNuFOrAgMBAAGjggMrMIIDJzCCASAGA1UdIASCARcwggETMIIBDwYJZ4EGAQQBZYECMIIB ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMi5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2eylmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmi5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafinotn+ljjk+1yqueg565+yn5daxmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytiu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMi5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytiuyjs MB0GA1UdDgQWBBQsLp0e8s/2kgwqwhM02leBMTzVDANBgkqhkiG9w0BAQsFAAOCAQEAaaDTYS/Q Py9v4YFU/S9FPBkV6a7b8ZHoCwc0WYVWJQqjnvyOcVuK/zOFUntozvnJbbsvnsXNet5NDKElfrJ1 x2mynbtnbn/oqq+hgdvlr6znjtyvgdr4o54qnjqklnf6jwkghx5jkzxydqbwr9+i4ojctlfskxy OQiKDKd4PFNs/ZaLonT9LaytZy19heZLl57jG0OTGYV68iR2169dcHJsCHXwsRZ72872FfYzvf EG9MP2jGrBe2NNkcvuKClmg0tSSyrDXqgAYYvsgm6mbbSm6zP7O4fNNkIQWSdVw2gX2Vo0trQBAK ZT+Ov5vCMWMrwnv6zvu/hgvp4T94A== SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 5 Subject OU: Time Stamping Authority Mon Aug 26 12:15:16 CEST 201 Fri Oct 04 12:15:16 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:92:E9:2B:A:CB:E:9:85:D4:F1:2A:6E:08:45:47:CF:57:48:2D:81:24:86:A6:99:6C:7F:10:F:E4:12:82:BF:87:89:8A: 88:C4:FD:F2:DF:42:BF:24:F0:89:C6:BB::B0:BB:16:D4:56:85:B:B9:A4:A7:86:B5:FD:4C:21:D2:8F:24:9E:D4:F1:D:5C:21:79:7F:1A:87:1B:7C:85:CC:98:6F:74:40:FF:74:5F:D2:1B:69:85:B2:9C:B0:B1:7C:2:78:AA:0:7 :9A:4F:9C:9A:8:8:C4:B:C:96:9D:46:AD:DF:14:E6:65:B2:EB:5D:8A:7A:C9:4A:A:8E:C:44:AB:D2:D4:C8:7D:BF:9:2D:E4:D2:C7:DD:D4:25:8E:F4:75:E8:91:50:BC:29:B6:F0:62:CE:1:C7:A:57:85:C:8D:0:86:9 5:20:1F:CC:68:B4:E8:6:E:FF:E7:D1:FF:61:B1:DB:55:E:6:4:E:AB:21:69:22:86:85:AC:7D:CF:F6:C9:10:E4:4B:04:D4:AB:1E:AA:C0:A7:4:CF:94:7B:D8:FD:F4:4C:FE:60:86:7:52:68:91:A8:E0:CC:EA:BE:BB:7:DD :9F:F:66:99:B:F8:71:28:A5:6E:42:EC:18:DC:B7:2C:1F:11:FB:87:74:66:2:6E:17:7:AB:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 97

98 CRL Distribution Points C:2E:9D:1E:F2:CF:F6:92:0C:2A:C2:1:7:D:69:5E:04:C4:F:54 digitalsignature - nonrepudiation Service Status 9D:07:E2:26:B1:E4:52:B7:C7:6E:90:7:6C:E2:4B:57:99:89:B2:41:FC:F0:65:F5:45:A8:72:D:5C:B E:05:C0 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T09:15:00Z Service : (52) PostSignum - Qualified Time Stamping Authority, TSU 6 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (52) PostSignum - Qualified Time Stamping Authority, TSU 6 (52) PostSignum - autorita kvalifikovaných časových razítek, TSU 6 Service digital identities Certificate fields details MIIGhzCCBW+gAwIBAgIDFtqtMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmjaefw0xmza4mjyxmde2mjrafw0xotewmdqxmde2mjramh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDYwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQDhDHhr9EKFUixGioQzDGUQkPHS bhrgvx5wvgd0hynndwbo/mjrz6kuv0h8xjabusrhjqz8agniipbowp5/1ptrikckrjrhsyky+ut P0Dl+8zWy0A0SCoF9OokMz1CG0Y1e5XeDf8ZJFYAeuLePSOFjXFX/+w8bCk4FlsF124mWcQIkL Q5xDqlhecmgcrQQh+l5TKcCI/ruoSpClJUWl9YQObU2Qm1AkrXg2Fb7TTUgcWJRJ/hMvtL+BPIzX withqdnce1igrdlwrsfxogwkkb7pku87ivg6a9jmzinmxpwqf+ahqgj/vzaknbfz/vecfxtgepg Dt1YqKKl2I8hAgMBAAGjggMrMIIDJzCCASAGA1UdIASCARcwggETMIIBDwYJZ4EGAQQBZYECMIIB ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMi5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2eylmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmi5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafinotn+ljjk+1yqueg565+yn5daxmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytiu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMi5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytiuyjs MB0GA1UdDgQWBBTmvK1NFplYdbc5vWIgqMCkZiW6WTANBgkqhkiG9w0BAQsFAAOCAQEAGM0qR6w+ ic1rzibtqrd07jxn0rzdspsaznujafmeefsog7mwyv27icr5gf2temvhnogq7wjsawbkhwr2jz jezioso6f0/tehrmsnn27ksnbdvhxxfktglu8mpcn8gptpm4a2pqzjkzdz1nn9sotks1om6jkj D45dAooOHhUGvshhPUKLEikHYZPJSgFV5k+c7Tz2hZUYFP5PCbHSPhihHZloRHHw85u1bTsm PZ/Nh6o1ewMseC+c9fTNieyM2vgv6UxMuEMNuRJozrQIVR5JcpBYxY0DUb+GsGSg4Bm5F+hlbTGa Aha99FinWg/FpoffUxSB9JT4vAv8HA== CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 98

99 SHA256withRSA PostSignum Qualified CA 2 PostSignum TSA - TSU 6 Subject OU: Time Stamping Authority Mon Aug 26 12:16:24 CEST 201 Fri Oct 04 12:16:24 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:E1:0C:78:6B:F4:42:85:52:2C:46:8A:84::0C:65:10:90:F1:D2:6E:14:60:BF:1E:70:BC:60:F4:85:89:E7:0D:60:4E:FC: C2:6B:67:A9:2E:BF:48:7C:5C:96:9B:B9:2A:C7:8D:06:7C:6B:78:27:20:8:DB:A1:6A:79:FF:5:D:46:22:9C:29:18:D1:1D:2C:A4:6:E5:2D:F:40:E5:FB:CC:D6:CB:40:4:48:2A:05:F4:EA:24:DC:CC:F5:08:6D:18:D5:EE:57 :78:7:FC:64:91:58:01:EB:8B:78:F4:8E:16:5:C5:5F:FF:B0:F1:B0:A4:E0:59:6C:17:5D:B8:99:67:10:22:42:F7:4:9C:4:AA:58:5E:72:68:1C:AD:04:21:FA:5E:5:29:C0:88:FE:BB:A8:4A:90:A5:25:45:A5:F5:84:0E:6D:4D:90: 9B:50:24:AD:78:6:15:BE:D:4D:48:1C:58:94:49:FE:1:2F:B4:BF:81:C:8C:D7:C0:8B:47:A9:D:5C:1:58:86:AD:D9:56:46:C7:D7:A:0C:0A:28:1E:E9:2A:EF:B:8A:F8:A:6B:D2:66:CE:2:66:C4:FC:2A:7F:E0:21:40:68: FF:55:90:0A:4:17:F:FD:51:02:7F:75:D:80:4:E0:0E:DD:58:A8:A2:A5:D8:8F:21:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier 89:E8:4C:DF:8B:26:9:E:D7:24:2E:12:0E:7A:E7:E6:27:E5:D6:97 CRL Distribution Points E6:BC:AD:4D:16:99:58:75:B7:9:BD:62:20:A8:C0:A4:66:25:BA:59 digitalsignature - nonrepudiation 5:01:F:9C:42:29:0:D8:79:26:11:9C:F5:81:74:F:2D:9C:B8:60:04:20:7:C2:FD:C9:F7:EB:9E:C 4:94:EE CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 99

100 Service Status Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T09:16:00Z Service : (57) PostSignum - issuing qualified certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name (57) PostSignum - issuing qualified certificates (57) PostSignum - vydávání kvalifikovaných certifikátů Service digital identities Certificate fields details 164 MIIGYDCCBUigAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwWzELMAkGA1UEBhMCQ1oxLDAqBgNVBAoM I8SMZXNrw6EgcG/FoXRhLCBzLnAuIFtJxIwgNDcxMTQ5ODNdMR4wHAYDVQQDExVQbN0U2lnbnVt IFJvbQgUUNBIDIwHhcNMTQwMzI2MDgwMTMyWhcNMjQwMzI2MDcwMDM2WjBfMQswCQYDVQQGEwJD WjEsMCoGA1UECgwjxIxlc2vDoSBwb8WhdGEsIHMucC4gW0nEjCA0NzExNDk4M10xIjAgBgNVBAMT GVBvcRTaWdudW0gUXVhbGlmaWVkIENBIDMwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIB AQCXOu7d2frODVuo7IEWxoF5f1KE9aelb8FUyoZCL6iyvBe7YaL1pH4FJ5DPFbfmz6rLnSiDY /YSpipstdNUHM2BZkhiEulb7ltvMC+v4gf+H9ApVkmNspEWcO8+Thj4bm0anXJ8oFKRCkPQYAPQQ yrq0erqlxtkxs4nepi0tu4mvtaokzcqbbqzp6gnxovzazxo/kkk7nvgewibzexnrizn20dzmvt/ m+ighspfbutjsrxo1ytqxd+xz8l9eoaxyowbqtlji9fxeutz9fr0mheuc0xcaqfvwdgahj6/ex1 aszh7xfd2vyhatsqxomdiyo71zp0engjdlackutdagmbaagjggmomiidjdcb8qydvr0gbihpmihm MIHjBgRVHSAAMIHaMIHXBggrBgEFBQcCAjCByhqBx1RlbnRvIGt2YWxpZmlrbZhbnkgclzdGVt bz5ignlcnrpzmlryxqgynlsihz5zgfuihbvzgxlihpha29uysaymjcvmjawmfnilibhig5hdmf6 bnljacbwcmvkcglzds9uaglzihf1ywxpzmllzcbzexn0zw0gy2vydglmawnhdgugd2fziglzcvl ZCBhY2NvcmRpbmcgdG8gTGFIE5vIDIyNy8yMDAwQ29sbC4gYW5kIHJlbGF0ZWQgcmVndWxhdGlv bnmwegydvr0taqh/bagwbgeb/wibadcbvayikwybbquhaqeega8wgawwnwyikwybbquhmakgk2h0 dha6ly9dcucg9zdhnpz251bs5jei9jcnqvchnyb290cwnhmi5jcnqwoayikwybbquhmakglgh0 dha6ly9dcylnbvcrzawdudw0uyovyj0lbzcm9vdhfjytiuyj0mdcgccsgaqufbzachito dhrwoi8vcg9zdhnpz251bs50dgmuyovyj0lbzcm9vdhfjytiuyj0ma4ga1uddweb/wqeawib BjCBgwYDVR0jBHwweoAUFSmMxUVpq7izw+r+S7gx2Nzw5ahX6RdMFsxCzAJBgNVBAYTAkNaMSww KgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEeMBwGA1UEAxMVUG9z dfnpz251bsbsb290iffdqsayggfkmiglbgnvhr8egz0wgzowmaavoc2gk2h0dha6ly9dcucg9z dhnpz251bs5jei9jcmwvchnyb290cwnhmi5jcmwwmqawoc6glgh0dha6ly9dcylnbvcrzawdu dw0uyovyjslbzcm9vdhfjytiuyjsmdggl6athitodhrwoi8vcg9zdhnpz251bs50dgmuyov YJsLBzcm9vdHFjYTIuYJsMB0GA1UdDgQWBBTy+MwqV2HaKxczWeWCLewGHIpPSjANBgkqhkiG 9w0BAQsFAAOCAQEAVHG9oYU7dATQI/yVgwhboNVX9Iat8Ji6PvVnoM6TQ8WjUQ5nErZG1fV5QQgN 7slMBWnXKNjUSxMDpfhtN2RbJHniaw/+vDqKtlmoKAnmIRzRaIqBLwGZs6RGHFrMPiolLa55fBo a4jplirtfw5xvok5fdjh/5pbfg+xnz0rzo0/tk/okrxfgrnb9zbl2pe8sr9g9qywpsgkt2gp9t0q /+dhkagc0+eimchm8bmq4wnuxk4qdo4arh644uivliu+9gqh54noyzd/ohrtnuoxuqodx9doot p6spppfzxj/djsset22qvpybp7v8avk/paqphinl2xmqdiw65khdya== SHA256withRSA PostSignum Root QCA 2 PostSignum Qualified CA CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 100

101 Wed Mar 26 09:01:2 CET 2014 Tue Mar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olicy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] Basic Constraints IsCA: true - Path length: 0 Authority Info Access Authority Key Identifier 15:29:8C:C5:45:69:AB:B8:B:C:EA:FE:4B:B8:1:D8:DC:F0:E7:76 CRL Distribution Points F2:F8:CC:2A:57:61:DA:2B:17::59:E5:82:2D:EC:06:1C:8A:4F:4A keycertsign - crlsign Service Status D:5E:25:0C:B0:2E:27:BB:F:C5:2D:1F:1A:0D:FD:88:FA:98:1:BE:1B:77:7:20:AA:E9:12:B5:4 E:B:1F:02 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T08:01:2Z Extension (critical): Qualifiers [QCNoSSCD] Qualifier type description [en] it is ensured by the trust service provider and controlled (supervision model) or audited (accreditation model) by the referenced Member State (respectively its Supervisory Body or Accreditation Body) that all Qualified Certificates issued under the service identified in "Service digital identity" and further identified by the filters information used to further identify under the "Sdi" identified trust service that precise set of Qualified Certificates for which this additional information is required with regards to the presence or absence of Secure Signature Creation Device (SSCD) support ARE NOT supported by an SSCD (i.e. that that the private key associated with the public key in the certificate is not stored in a Secure Signature Creation Device conformant with the applicable European legislation). Qualifier Criteria list assert=atleastone CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 101

102 Policy Identifier nodes: Identifier Service : (58) PostSignum - Qualified Time Stamping Authority, TSU 1 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (58) PostSignum - Qualified Time Stamping Authority, TSU 1 (58) PostSignum - autorita kvalifikovaných časových razítek, TSU 1 Service digital identities Certificate fields details MIIGhzCCBW+gAwIBAgIDLceLMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmzaefw0xnda4mjuxmdu5mjhafw0ymdewmdixmdu5mdzamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDEwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQChHYiAXyubz/EruYTdVmlh+2+G fvfvgekaif5xv9ouctj+yx5vncnwmua8ob2sowqudmw7dxpuhito1vic4jmipvkmzqypg+hufe mb+6twoxqegk6p8/aglw6ioqqgbtcbrgnq11hpwck1eq0whan0toljoy5myd8tybuxxkdgubahw+ 7LZGqFakbnzL6eZm1gO/5E5jpo1Mns1MMB0qq51TmN2VhKTi/as/a1gAn8qsryOjZEfxmdC2efJ WD54FSHiwM+NIaHCKYMvVPZcaIga55eKNqaRqMpJtbc/OFTegwU/vqTwELkY+B290d1De/S+ZIc BiitVE80JPvHAgMBAAGjggMrMIIDJzCCASAGA1UdIASCARcwggETMIIBDwYJZ4EGAQQBZYEMMIIB ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMy5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2ezlmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmy5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafpl4zcpxydorfznz5yit7aycik9kmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytmu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMy5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytmuyjs MB0GA1UdDgQWBBSshQeX9Y+FhGOQks6xhauAS7V6nTANBgkqhkiG9w0BAQsFAAOCAQEABdUy0Sln dlzvykm++kk4efdknvoto7fx1y/wxp6uabm5fs1qzrakifhjlpgpthpwr5srqssewmmhz//vu xmwzjy1ymira6qwcj5g+wi2chuuppn2eyluefxe1n5rulsspban08zmzoowmpoom8gwuzo2a z2nswtkidqle6u0towxeejovazonffl9tvc47bxwsqdbvckbdkc/dvln+6kd27qdyocktjifa kal74mjrhn1jdwcfnuvfg6nkpbaduz9sprhnhndgvv4aqacd52ukht22mrqi4ahsf+miytnuk5sn /FB184PprWOfZ746aNYCKfpYxfNtA== SHA256withRSA PostSignum Qualified CA PostSignum TSA - TSU 1 Subject OU: Time Stamping Authority CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 102

103 Mon Aug 25 12:59:28 CEST 2014 Fri Oct 02 12:59:06 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:A1:1D:88:80:5F:2B:9B:CF:F1:2B:B9:84:DD:56:69:61:FB:6F:86:7E:F1:55:80:4D:CA:00:81:79:C5:5F:68:B9:CB:6:F 9:8C:79:BC:D7:27:5A:65:1A:F0:E0:76:B2:8C:7:41:47:66:5B:B7:71:A6:E1:E2:B6:8D:6F:20:2E:2:98:8:D5:28:CC:D0:C8:F8:E:86:E7:C4:98:1F:BA:4D:6:B1:A8:41:8A:EA:9F:F:02:09:70:E8:8A:10:42:06:ED:09:BA:C6: 9D:0D:75:1E:9C:02:9:57:AA:D1:68:40:7:44:CE:2E::98:E4:CC:9D:F1:6:01:BB:15:CA:74:65:01:00:7C:E:EC:B6:46:A8:56:A4:6E:7C:CB:E9:E6:66:D6:0:BF:E4:4E:6:A6:8D:4C:9E:CD:F5:0:C0:74:AA:AE:75:4E:6: 76:56:12:9:8B:F6:AC:FD:AD:60:02:7F:2A:B2:BC:8E:8D:91:1F:C6:67:42:D9:E7:C9:58:E:78:15:21:E2:C0:CF:8D:21:A1:C2:29:8:2F:54:F6:5C:68:88:1A:E7:97:8A:6:A6:91:A8:CA:49:B5:B7:F:8:54:DE:8:05:F:BE:A 4:F0:10:B9:18:F8:1D:BD:D1:DD:4:7B:7F:D2:F9:92:1C:06:28:AD:54:4F:4:24:FB:C7:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier F2:F8:CC:2A:57:61:DA:2B:17::59:E5:82:2D:EC:06:1C:8A:4F:4A CRL Distribution Points AC:85:07:97:F5:8F:85:84:6:90:92:CE:B1:85:AB:80:4B:B5:7A:9D digitalsignature - nonrepudiation Service Status F0:90:18:6C:07:69:F6:FF:B0:1D:80:1:E:FF:F6:CB::EF:E5:7F:26:85:0A:94:D6:4B:A2:AF:01: A7:F6:8 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T10:59:28Z 2. - Service : (59) PostSignum - Qualified Time Stamping Authority, TSU 2 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (59) PostSignum - Qualified Time Stamping Authority, TSU 2 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 10

104 (59) PostSignum - autorita kvalifikovaných časových razítek, TSU 2 Service digital identities Certificate fields details MIIGhzCCBW+gAwIBAgIDLceMMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmzaefw0xnda4mjuxmta5mtbafw0ymdewmdixmta4mzlamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDIwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCsQzlahOaIfSLbk8lCt4we/hC9 ucq7psz4/zrofu9sqe7lynknfwthu4/0i8woyffm1p0zzcqh4jgje/hcbdspj5bdqzagd0rffl9/ 27Xs6qGBQ4biDnHUcYyhwNtwNWbHY8KnggkVy71XEeIPghr1ytbvEJ80055yHIyfV1gywjf2C rodrrcq9rkfpvhignlqxi4kkygwmcyy7gupu4v426azjrhf1hwux7rirorcg2s1f6bce/5yi2+u+ mp8wf45ncx57ok7qul55ze70ftt+llsun4euc6f6gmwhlhjxkyynbr+yj0jm9pbsffypqscrulg M9XrBHuHyoobAgMBAAGjggMrMIIDJzCCASAGA1UdIASCARcwggETMIIBDwYJZ4EGAQQBZYEMMIIB ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMy5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2ezlmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmy5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafpl4zcpxydorfznz5yit7aycik9kmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytmu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMy5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytmuyjs MB0GA1UdDgQWBBRqPA6jNi/oIltl0ZG/KPzFAamxDjANBgkqhkiG9w0BAQsFAAOCAQEAfDM2wiZs AFjoZ1/THRvcOfjyMZwwYhgS4HgyeN7Mtw/pnFu+LA2HdVwLwX5maVuWDXh4Ne9eqZ6SkiqP2qp LyC8d29F2ZKnDie+e2klziLvDi/nbevSHQumm0Vzj1zRsOn9InbHnUxxWoFE2/jnlvKCdVNlLh gz5kxi7pcoqdtgxlr/kzclhbvcao5lugerkybz5ms7lb1th8wgo/hdbioc2ngylojfb0zibo ypj6c0zf69uj6kzmavb6dzkw++pvs4jgxslx8pwzi2t5jh2cxdvyis/qo1x7sqcwm4ul78bpurm UlXpaiWCslQ2cWhYa1DkGB54ouT07A== SHA256withRSA PostSignum Qualified CA PostSignum TSA - TSU 2 Subject OU: Time Stamping Authority Mon Aug 25 1:09:10 CEST 2014 Fri Oct 02 1:08:9 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:AC:4:9:5A:84:E6:88:7D:22:DB:9:C9:42:B7:8C:1E:FE:10:BD:B8:2A:BB:A6:CC:F8:FF:4:68:16:EF:6C:A8:4E:E5 :62:79:27:7F:04:C7:5:8F:F4:2:CC:28:C8:51:4C:D6:9D::CC:2A:A1:E0:91:89:1:F1:C2:6D:DB:29:8F:90:4:4:0:06:0F:44:5F:7C:BF:7F:DB:B5:EC:EA:A1:81:4:86:E2:0E:71:D4:71:8C:A1:C0:DB:70:5:66:C7:6:C2:A 7:DE:08:24:57:2E:F5:5F:71:1E:20:F8:21:AF:5C:AD:6E:F1:7:27:CD:4:E7:9C:87:2:27:D5:D6:0C:B0:8D:FD:82:AE:80:EB:45:C4:D:AC:A7:CF:56:12:06:9E:5A:97:2:82:A4:62:05:8C:71:8C:BB:81:4A:54:E2:FE:6:E8:0C :C9:44:71:75:87:0B:B1:EE:B2:11:A2:B7:20:DA:CD:5F:E8:17:04:FF:96:08:DB:E5:E:9A:9F:16:17:8E:4D:71:7E:7B:A:4E:EA:BA:5E:77:E7:7:BB:D0:54:ED:F8:B9:52:50:DE:04:50:2E:85:EA:09:B0:1E:51:E:C4:A6:18:5: B4:7E:CA:D:2:9B:DA:41:48:57:F2:D:0B:1C:46:E2:E0::D5:EB:04:7B:87:CA:8A:1B:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 104

105 Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier F2:F8:CC:2A:57:61:DA:2B:17::59:E5:82:2D:EC:06:1C:8A:4F:4A CRL Distribution Points A:C:0E:A:6:2F:E8:22:5B:65:D1:91:BF:28:FC:C5:01:A9:B1:0E digitalsignature - nonrepudiation Service Status FB:B6:6F:6E:46:DA:4B:CF:8:1:80:C1:51:FE:70:5:EC:CD:62:47:19:28:7B:A4:07:9E:2E:B8:F1: 8A:7A:B8 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T11:09:10Z Service : (60) PostSignum - Qualified Time Stamping Authority, TSU Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (60) PostSignum - Qualified Time Stamping Authority, TSU (60) PostSignum - autorita kvalifikovaných časových razítek, TSU Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 105

106 MIIGhzCCBW+gAwIBAgIDLceNMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmzaefw0xnda4mjuxmtewmjbafw0ymdewmdixmtewmdvamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDMwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCe/BqSAP6CHdPXdJeGe7oNIzEM 86NdQuXJUfh5AZIjUAsruKSWqCpENAuKeOiSX/WkvS9KFbvmVXlYyevOssefv8Ak1qbwYrcZoU nd5pdbtmy4zz87ph/0myr8yvueejnjsd5jme4tgjoq5zvnxpqlhtoaixcuyjz4/9due9rzbvs7pg JaCLpDUmkWTvQ1oKN7eOtXlbrP2FMqNLRZNXp4pTe2tI07RmJmS0jEr8md/2O+ty0uqB/wQe2aIm 2w7QKmfzZkSeBA+/L+2AjqbKtpn+LHUtHxuEjrVCFGkZWn8Xvrq70qddd7oov89VbSurbZlaM Gu619pwFcGflAgMBAAGjggMrMIIDJzCCASAGA1UdIASCARcwggETMIIBDwYJZ4EGAQQBZYEMMIIB ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMy5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2ezlmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmy5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafpl4zcpxydorfznz5yit7aycik9kmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytmu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMy5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytmuyjs MB0GA1UdDgQWBBSB8VaJg/xs/n5+eekom0LAoKyeOjANBgkqhkiG9w0BAQsFAAOCAQEAZP/QOwiz idaulxjod7aakzztrlp02hossqrkd5l1lwu6ty4alms7ax4dvwdmxz5s4owhragjiyuk2uyr+as2 THtycZi2hcE9wpUYgvSU5Qv2OqnGiylJQcn+8178LmKipd5WKyrASM9veW0dG6h7ww9SxgkE 9UfeSPSlqSxDK/AN2yEF7TIw/xoSo9lrulfJdfhCKsno/5SsPGPJSaGGH1bJPj/lbfJc/kVZNdJ 4q4rjYoWFv5Bna05jvvQ+WHahRnQ6jRt4UvV8kAakL4+ZamY1dWLPZwn1f6Dnscsi7ySuhFhA1A ElGpZsAsYFqLTA8u2Q79W/F4xstQ== SHA256withRSA PostSignum Qualified CA PostSignum TSA - TSU Subject OU: Time Stamping Authority Mon Aug 25 1:10:20 CEST 2014 Fri Oct 02 1:10:05 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:9E:FC:1A:92:00:FE:82:1D:D:D7:74:97:86:7B:BA:0D:2:1:0C:F:A:5D:42:E5:F7:25:47:E1:E4:06:48:8D:40:2C:A E:E2:92:5A:A0:A9:10:D0:2E:29:E:A2:49:7F:D6:92:F4:BD:2B:71:5B:BE:65:57:95:8C:9E:BC:EB:2C:79:FB:FC:02:4D:6A:6F:06:2B:71:9A:14:9D:DE:69:0D:B4:CC:CB:86:59:F:BA:61:FF:49:B2:AF:CC:95:B8:41:2:9C:94: 8:E4:9:04:E2:D1:89:A1:0E:7:56:7C:4F:AA:51:D:A0:08:97:0A:EC:A:67:8F:FD:75:47:BD:AF:6:D5:B:B:C6:25:A0:8B:A4:5:26:91:64:EF:4:5A:0A:7:B7:8E:B5:79:5B:AC:FD:85:2:A:4B:45:9:57:A7:8A:5:7B: 6B:48:D:B4:66:26:64:B4:8C:4A:FC:99:DF:F6:B:EB:72:D2:EA:81:FF:04:1E:D9:A2:26:DB:0E:D0:2A:67:F:66:44:9E:04:0F:BF:2F:ED:80:DE:A:9B:2A:DA:67:F8:B1:D4:B4:7C:6E:12:A:D5:08:51:A4:65:69:FC:DD:7B: EB:AB:BD:2A:75:D7:7B:A2:8B:FC:F5:56:D2:BA:B6:D9:95:A:7:1A:EE:B5:F6:9C:05:70:67:E5:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier F2:F8:CC:2A:57:61:DA:2B:17::59:E5:82:2D:EC:06:1C:8A:4F:4A CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 106

107 CRL Distribution Points :F1:56:89:8:FC:6C:FE:7E:7E:79:E9:28:9B:42:C0:A0:AC:9E:A digitalsignature - nonrepudiation Service Status 2:A6:A7:48:AE:A:C:9E:D2:EC:EA:90:02:0:50:DF:86:55:9:9F:02:79:57:DE:FC:86:B:14:19: EF:FA:1 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T11:10:20Z Service : (61) PostSignum - Qualified Time Stamping Authority, TSU 4 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (61) PostSignum - Qualified Time Stamping Authority, TSU 4 (61) PostSignum - autorita kvalifikovaných časových razítek, TSU 4 Service digital identities Certificate fields details MIIGhzCCBW+gAwIBAgIDLceOMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmzaefw0xnda4mjuxmtexmtfafw0ymdewmdixmtewntnamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDQwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQC5sNB1/JrQyW8qb0JMC8+apRY9 lbl6g610agpyd2fwuqbcwlrdukhf9sk1jkjssu+pdvvkj5lvfbj0flzfsnvs6rgzfheddcrwtvzu KptYbHU19gg5PhAC4rNOZ9vbfbPHMjeqMl+XJhE9sr7Hv+HtYlUfeSH+ZXBreEcfQ+lM9cvf KdbnYtOWSanmijXRlYWnul0WgArNDNZ6S0aBydHQhozgVwPcqunuhe5kg5FSBHvJTMWY+s8E/FG ivlw8liitkazyk44gp8ud6mk5hmorr+knasbwpirmcnxyuaqerze/qp5q7djdxm0qhdtqnsmcf u9kztwhvcf4hagmbaagjggmrmiidjzccasaga1udiascarcwggetmiibdwyjz4egaqqbzyemmiib ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMy5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2ezlmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmy5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafpl4zcpxydorfznz5yit7aycik9kmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytmu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMy5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytmuyjs MB0GA1UdDgQWBBR20RoP/zyDGFc0fTxxowGGoW/1fzANBgkqhkiG9w0BAQsFAAOCAQEALyzjPawB 6EQlmGuyJJ0Mv+AXDEN2GJbgU6OUMg+00C8wWmE9km/qUnconbslCanw6D5rfxH8Sk8N9s7ztr xartb8o9cxinbvhs1ijvzicxmrgymlipxcxsrnmjpswwas/guazomtfmdt0obptveftc8q/cq4 H8rbiDXJ0oJdeXzlcVuQbyGwKYb+IRaW5RecwyVLVfs7RtupQa0qtohdWuLNof/hv6qC2CwMZZfl su9qkngaemxxanriuubmbsnqsxib8bwveefapfultczagagzxyzy54wptlcdu0pwtltax88mqma oqyhiaks26vpwto86lu9a/yr4+cx2w== CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 107

108 SHA256withRSA PostSignum Qualified CA PostSignum TSA - TSU 4 Subject OU: Time Stamping Authority Mon Aug 25 1:11:11 CEST 2014 Fri Oct 02 1:10:5 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:B9:B0:D0:75:FC:9A:D0:C9:6F:2A:6F:42:4C:0B:CF:9A:A5:16:D:95:B2:FA:8:AD:74:68:6:D8:0F:61:70:52:A6:C2: 58:BA:DD:52:41:DF:F5:22:B5:26:48:D2:B2:EF:8F:0D:5B:CA:8F:99:6F:14:12:74:7C:BC:DF:48:D5:6C:EA:B1:B:7C:77:9D:75:CA:D6:4E:F6:6E:2A:9B:58:6C:75:5:F7:78:20:E4:F8:40:0B:8A:CD:9:9F:6F:6D:F6:CF:1C:C 8:DE:A8:C9:7E:DD:72:61:1:DD:EC:AF:B1:EF:F8:7B:58:95:47:DE:48:7F:B7:65:70:6B:78:47:1F:4:E9:4C:F5:CB:DF:29:DD:DB:9D:8B:4E:59:26:A7:9A:28:D7:46:56:16:9E:E9:74:5A:00:2B:4::59:E9:2D:1A:07:27:47:4 2:1A::81:5C:0F:72:AB:A7:BA:17:B9:92:0E:45:48:11:EF:25::16:6:EB:C:1:F1:46:8A:F2:F0:F0:B8:88:DD:9:1A:CD:89:8:E2:0:FC:51:DE:A6:9:98:66:A2:B4:7E:92:76:AC:6D:6A:62:44:C7:0D:DF:16:14:69:01:2B: CD:EF:D0:F:9A:BB:0E:7:71:9B:4A:A1:0D:4:0D:B0:C7:1F:BB:D2:99:B5:68:55:09:FE:21:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier F2:F8:CC:2A:57:61:DA:2B:17::59:E5:82:2D:EC:06:1C:8A:4F:4A CRL Distribution Points :D1:1A:0F:FF:C:8:18:57:4:7D:C:71:A:01:86:A1:6F:F5:7F digitalsignature - nonrepudiation CD:E:0F:80:88:50:D9:D8:19:D7:49:FF:49:6E:49:E6:9A:D1:8:22:75:09:C8:B2:CC:CF:B2:9C:CB :20:AF:0B CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 108

109 Service Status Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T11:11:11Z Service : (62) PostSignum - Qualified Time Stamping Authority, TSU 5 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (62) PostSignum - Qualified Time Stamping Authority, TSU 5 (62) PostSignum - autorita kvalifikovaných časových razítek, TSU 5 Service digital identities Certificate fields details MIIGhzCCBW+gAwIBAgIDLcePMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmzaefw0xnda4mjuxmteymdjafw0ymdewmdixmtexndramh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDUwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQDTpad/PWpEJ0ISkfjTmr6Sz0d 45iY6qCF+BxlSE191OiODN2kce6RQPcGEwsDEyO2DOS8jAKdK2ejrYqnLxP8Xv5prfDNe6MN2Py QqOa6WSg2BkfHrBNj9AA2fNmnkxCv8hTdMHwm2U+FdFAjYGYT4DerD6rH74H8Rudrstf6inE/o ovp0/iccd8ecxeuxpuddl0uxlv++n8xahhtyt+liflegxmcfpxtpsx2dacwwds0zoxeixvqad sle9pvt6wshjhm6joyhpt4pk0sp1swy1q5oewmn0b8kvwzmvr2r5ocumrstkd5ok20fk5s5ald78 R6swX7OUip2lAgMBAAGjggMrMIIDJzCCASAGA1UdIASCARcwggETMIIBDwYJZ4EGAQQBZYEMMIIB ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMy5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2ezlmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmy5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafpl4zcpxydorfznz5yit7aycik9kmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytmu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMy5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytmuyjs MB0GA1UdDgQWBBT7DO2q8DTfY91UqRU/PLxJytJ9DANBgkqhkiG9w0BAQsFAAOCAQEAadKF0j8W K+N82ScvwQxhlGIwETNM9ObI/6td16oj9PUojaSEKUHYHzIQfqaxvuBZGVRAO98cP9rwyIKrh 170FeDT7JQhhdsHRJZ2HK6fKhKnFLpz2mkiEzZPsAtgYcAkkNCydLIov0qdbclLVJgcGTxf0rFD rmqmenvc1ro+eidirinnpzujoxepnpir9iuhb67rdooh45appjtnmqhrl7cfzpzgavxdfulu MpeCTF/XkKSpKSyLyc8k9SNbFoatg6vaItOUl7YFxFJ58vwGrJq/EV9JKzEQkwg8ZjxfOwtgob5u GZOH9BH+rkNFmeSeL9XmiBmVPiPhhw== SHA256withRSA PostSignum Qualified CA PostSignum TSA - TSU 5 Subject OU: Time Stamping Authority CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 109

110 Mon Aug 25 1:12:02 CEST 2014 Fri Oct 02 1:11:44 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:D:A5:A7:7F:DC:F5:A9:10:9D:08:4A:47:E:4E:6A:FA:4B:D:1D:E:98:98:EA:A0:85:F8:1C:65:48:4D:7D:D4:E8:8 E:0C:DD:A4:71:ED:FA:45:0:DC:18:4C:2C:0C:4C:8E:D8::92:F2:0:0A:74:AD:9E:8E:B6:2A:9C:BC:4F:F1:7B:F9:A6:B7:C:5:EE:8C:7:6:F2:42:A:9A:E9:64:A0:D8:19:1F:1E:B0:99:04:D8:FD:00:0D:9F:6:69:E4:C4: 2B:FC:85:7:4C:1F:09:B6:5:E1:5D:14:08:D8:19:84:F8:0D:EA:C:EA:B1:FB:E0:7F:11:B9:DA:EC:B5:FE:A2:9C:4F:E8:A1:5A:74:FE:20:82:0F:C1:02:5D:E5:1:A6:E0:DD:2F:4B:B1:95:5F:BE:9F:CD:D7:6A:11:ED:62:DF: A5:8B:71:65:10:65:CC:71:FA:57:4E:9B:17:D9:D6:82:5B:00:D2:D1:9:B7:C5:E2:1:56:A6:9D:B0:B1:D:A5:5B:7A:C2:C8:49:84:CE:89:A1:88:69:B7:8A:64:D2:CA:75:B:0C:B5:4:9:9E:C2:6:74:07:C2:95:5B:9:AF:47:6 A:F9:A1:C5:26:45:2B:4A:0F:9A:24:DB:47:CA:E6:CE:40:2D:DE:FC:47:AB:0:5F:B:94:8A:9D:A5:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier F2:F8:CC:2A:57:61:DA:2B:17::59:E5:82:2D:EC:06:1C:8A:4F:4A CRL Distribution Points FB:0C:ED:B7:AB:C0:D:7D:8F:75:52:A4:54:FC:F2:F1:27:2B:49:F4 digitalsignature - nonrepudiation Service Status BE:22:70:46:A:BC:D:FD:20:45:AB:EA:B1:51:55:0F:A9:64:00:29:49:9B:F:22:82:14:D7:96:2: DB:A8:74 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T11:12:02Z Service : (6) PostSignum - Qualified Time Stamping Authority, TSU 6 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 110

111 (6) PostSignum - Qualified Time Stamping Authority, TSU 6 (6) PostSignum - autorita kvalifikovaných časových razítek, TSU 6 Service digital identities Certificate fields details MIIGhzCCBW+gAwIBAgIDLceQMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmzaefw0xnda4mjuxmte0mjbafw0ymdewmdixmte0mdvamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDYwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQC+la5pFEuLUKijlyX6PjYlTV2 zmlmsakeosb5xzmupmp9ulk6tm4dcah8kuhdiejjmmaejdr6pexgcwjf4ax9bq0adwqs1lcq6 TKZSQOW8dvEdYFH7Vf1XqL+SJnbEcjXVsuk9K8KurLIKZ/M9vLmK7/MZL8omnlCQ1Xqri1WNjC OayKtgfDt4FIA9rbIO6MWzl1gbBQspqBCwmEKH+URSmfk5visE9tby9LpOP0yrP5xI2WvxIiEy lmeszpv0jnu0wcs5prljuk0conbdtpbws7ltzyuawtjlf+p1azkfxbrtfuabfeoqssv2vn6flufy sm50c5yc0p6vagmbaagjggmrmiidjzccasaga1udiascarcwggetmiibdwyjz4egaqqbzyemmiib ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMy5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2ezlmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmy5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafpl4zcpxydorfznz5yit7aycik9kmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytmu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMy5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytmuyjs MB0GA1UdDgQWBBRUSXcC1iz8/XDtRXnbJ/z59pN8KTANBgkqhkiG9w0BAQsFAAOCAQEAIDGwd1P6 XuNPpRtxSHNsIf06V6NgY9NyWEXz4xdbnLwD4fsMef2gYuGhLmtLj4Ft119pgShX/vpafYwlPk9 6nQLjInxjA8CDZwTtV8S8tGxgeLeUuAzUPkfx6/I7TuBqD2CzPtRKCtZAjDskDpfk+HWWcDO/ royafa8imq6kyeqgnlzevlzobkbbdzxuvzosbtnaibrpmekgwaxvrih/l85xhbsqjlha5szgqlz +sefosjdy1vbtbbvl6pyywevglh4ohn+ujfgifbdlcm82vmoprmb2xkj2gvgp/1wmhpe2ix4v9q BFZMr6aukK57+aqCWB2yDOFpZO/XXQ== SHA256withRSA PostSignum Qualified CA PostSignum TSA - TSU 6 Subject OU: Time Stamping Authority Mon Aug 25 1:14:20 CEST 2014 Fri Oct 02 1:14:05 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:BE:95:AE:69:14:4B:8B:50:A8:A:97:25:FA:DC:F8:D8:95:5:76:CF:7:25:9A:C6:8A:78:E4:9B:E5:76:66:5:7A:66: F:D5:25:2B:A4:E6:E1:D0:80:87:C2:94:1C:8:9E:8C:99:A6:68:48:C:47:AA:44:5C:60:B0:DE:7:F8:69:7F:5B:AB:46:9D:C2:A4:B5:2C:2A:BA:4C:A6:52:40:E5:BC:76:F1:1D:60:51:FB:55:FD:57:A8:BF:92:26:76:C4:72:5:D 5:B2:E9:D:2B:C2:AE:DE:B2:C8:29:9F:CC:F6:F2:E6:2B:BF:CC:67:72:FC:A2:69:E5:09:0D:57:AA:B8:B5:58:D8:C2:9:AC:8A:DE:D8:1F:0E:DE:05:20:0F:6B:6C:8:BA:DC:C5:B:97:58:1B:05:0B:29:A8:10:B0:98:42:87:F 9:44:52:99:F9:9:BE:2B:04:F6:D6:F2:F4:BA:4E:F:4C:AB:F:9C:48:D9:6B:F1:22:21:2:96:67:92:66:95:74:26:7B:B4:59:CB:9:A5:12:C9:B8:AD:02:A:70:5D:B6:90:56:B:B9:6D:CF:25:00:C1:2:65:17:EA:75:69:99:05:5 C:1A:ED:15:46:9B:15:EA:2A:49:25:76:54:DE:85:96:E1:58:B0:CE:74:7:96:1C:D2:9E:AF:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 111

112 Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier F2:F8:CC:2A:57:61:DA:2B:17::59:E5:82:2D:EC:06:1C:8A:4F:4A CRL Distribution Points :49:77:02:D6:2C:FC:FD:70:ED:45:79:DB:27:FC:F9:F6:9:7C:29 digitalsignature - nonrepudiation Service Status 06:1A:A1:77:6F:2E:82:57:E7:BD:28:A9:91:2A:A1:AB:5C:25:16:EE:7C:F1:4:EC:AF:09:80:0:6C :D9:D8:2C Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T11:14:20Z Service : (68) PostSignum - Qualified Time Stamping Authority, TSU 1 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (68) PostSignum - Qualified Time Stamping Authority, TSU 1 (68) PostSignum - autorita kvalifikovaných časových razítek, TSU 1 Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 112

113 MIIGhzCCBW+gAwIBAgIDLckbMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmzaefw0xnta4mjywodmymjhafw0ymtewmdmwodmxmtramh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDEwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCb75WqiO7CKDUt5DOB9zhqI8Q IDnR1HZnBwDC+68PmbviZ9HCYlgQAwK/UP2QmZWMtfUWP95c6M7+m2KVdqlMigC/YH+EcOmKM6we Ulr7wMsJOOxgPcvTKfQbtUXtpWME6z/jdmG1mjHKU62F4lYelLzbGKVkvhtSjlCyGsr5VTzi52fz pd1rkor1kbusjgmjg961cn2hmukzqrfm91m0rhtmspsiryafojfbordh0tt4fjowcl8+zhzwp5kf l4tbfbwjwyshkozlzqr0t9fhz+/xuy7v1n5epv81hdxefzerrgvltyqhuq6ceq7rgfbc/mmtw9e 0BPuMVcwkPqzAgMBAAGjggMrMIIDJzCCASAGA1UdIASCARcwggETMIIBDwYJZ4EGAQQBZYEMMIIB ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMy5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2ezlmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmy5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafpl4zcpxydorfznz5yit7aycik9kmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytmu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMy5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytmuyjs MB0GA1UdDgQWBBQjZWoR/lNn+8iwLXpYQnik2zhCTANBgkqhkiG9w0BAQsFAAOCAQEAEDQM6Ug 8UuuyamfPVv8glntLrg4axiD+U5mjOdVyeXpfNeRgJ/v4fomObH6TuSuzTMutWbaqjDQmq98nRV MVmODkiCjqReV1g6T7cv+rJMzzXJ9hcmNe2UVGXRu5Dsq7Y5nBQqlMogmrYepL8K4UBdM8ykBeHC 8u41zzjM4T4r6oY+YM80xNQh5tD9JK/dQr1EmsHN6LePW8hS48xQzV9gzYOqvkt4Ne7zz9IkxXt Dlttq+mbv6/WcxB5TRoI/xMgCGiHSqN8PlIjhz6DoONr74FqZAfaG4nZsJ2iS0QOYpkVkKiHHx8o 5J6FCAt5MernTs7zIB1jyPCOkwKIlA== SHA256withRSA PostSignum Qualified CA PostSignum TSA - TSU 1 Subject OU: Time Stamping Authority Wed Aug 26 10:2:28 CEST 2015 Sun Oct 0 10:1:14 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:9B:EF:95:AA:88:EE:C2:28:5:2D:E4::81:F7:8:6A:2:7F:10:20:9:D1:D4:76:67:07:00:C2:FB:AF:0F:99:BB:E2:67 :D1:C2:62:58:10:0:02:BF:50:FD:90:99:95:8C:B5:F5:16:F:DE:5C:E8:CE:FE:9B:62:95:76:A9:4C:8A:00:BF:60:7F:84:70:E9:8A::AC:1E:52:5A:FB:C0:CB:09:8:EC:60:D:CB:D:29:F4:1B:B5:45:ED:A5:6:04:EB:F:E: 76:61:B5:9A:1:CA:5:AD:85:E2:56:1E:94:BC:DB:18:A5:64:BE:1B:52:8E:50:B2:1A:CA:F9:55:C:E2:E7:67:F:A4:D:51:90:EA:F5:28:15:2C:8C:6:09:8:DE:B5:72:7D:A1:9A:E2:99:A9:11:66:F7:5:4:46:14:E6:B2:94:8 8:45:86:9F:A:7:DB:A:B7:47:D2:DB:78:7E:A:16:08:BF:E:66:16:56:F:99:05:97:84:C1:15:BC:2:C1:8B:07:2A:8C:E5:65:0A:F4:B7:D7:C7:CF:EF:D7:BB:2E:D5:D6:7E:5E:A5:5F:7:D4:77:57:10:5C:C4:AD:11:95:96:D 6:2A:85:4A:BA:09:E4:B:AE:01:41:7:F:0C:4F:0F:5E:D0:1:EE:1:57:0:90:FA:B:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier F2:F8:CC:2A:57:61:DA:2B:17::59:E5:82:2D:EC:06:1C:8A:4F:4A CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 11

114 CRL Distribution Points :65:6A:11:FE:5:67:FB:7F:22:C0:B5:E9:61:09:E2:9:6C:E1:09 digitalsignature - nonrepudiation Service Status C:6C:B8:0F:F8:EF:6B:D5:E8:82:29:B8:2F:FC:12:D9:47:CD:B0:E8:C:A4:46:87:A7:40:F9:C6:9: 62:AE:AC Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T08:2:28Z Service : (69) PostSignum - Qualified Time Stamping Authority, TSU 2 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (69) PostSignum - Qualified Time Stamping Authority, TSU 2 (69) PostSignum - autorita kvalifikovaných časových razítek, TSU 2 Service digital identities Certificate fields details MIIGhzCCBW+gAwIBAgIDLckcMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmzaefw0xnta4mjywodqxndjafw0ymtewmdmwodqxmjbamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDIwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQDB/7FnOzObvGGLbHqEWWj08RN4 6BEeeVQyoDoPLmK6bLuXK7BUacMx6qxy9tQEpec9NyIgVnR7UxokRYh7g0jA+jBDz5L6CmHQZ IZK/SSGRg4yVEFVuSOuqaM6FKEgw/DlS9h5m+nSg5RM8aHv0U/yCu9GSSCEhjB5/bUe1SUPon1FU gr2j9edotqnw7nt82ke7thyhbvgn7dmdgsklbmlga/lj2qijdedlvzx5xvpkykjxvhmylplio VgB/y7S1aaF5HFuhiXgivmgthBb+2yoiPYezzsuT+t9NRHLvJtBuWcJGUq8bcAjBc7bmhWECLg tvel74fx+zxzagmbaagjggmrmiidjzccasaga1udiascarcwggetmiibdwyjz4egaqqbzyemmiib ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMy5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2ezlmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmy5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafpl4zcpxydorfznz5yit7aycik9kmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytmu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMy5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytmuyjs MB0GA1UdDgQWBBRxwbndVtdHitPESFRPIFhINGRTDANBgkqhkiG9w0BAQsFAAOCAQEAQFBUsD9 whqfvoyb81zzgfcrtppfszagefwetyoagahij1txszkhgeikcznzeh7maqteex8q8swtjurj1tm bemf1mz/eadr/w/5teqdipeloy1xymucwztm8omcxvjnjhdbvlxawlumbsxozt+x1+gok7s8gz N+o6vQx7dWjFnYRocRHJM028c4iVaW/UeQMOwzFswS6R8K17Si2fW5y1QVAblICbcUSv2F1VpPN1 AL7bQDy+4rzrhhG+2ybgOGBfcGXlCpkZONEKcUaUnwQx47eOj0ztY0mHpuR/mKnekZt+BWJjd 1tsmJzt96Ru2nKW7vXDA4onP7pWP6w== CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 114

115 SHA256withRSA PostSignum Qualified CA PostSignum TSA - TSU 2 Subject OU: Time Stamping Authority Wed Aug 26 10:41:42 CEST 2015 Sun Oct 0 10:41:20 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:C1:FF:B1:67:B::9B:BC:61:8B:6C:7A:84:59:68:F4:F1:1:78:E8:11:1E:79:54:2:A0:A:0F:DC:BD:E6:2B:A6:CB: B9:72:BB:05:46:9C::1E:AA:C7:2F:6D:40:4A:5E:7:D:72:22:05:67:47:B5:1:A2:44:58:87:B8:4:8C:0F:A:07:70:F:E4:BE:82:98:74:19:21:92:BF:49:21:91:8:8C:95:10:55:6E:48:EB:AA:68:CE:85:28:48:0:FC:9:52:F6: 1E:66:FA:74:A0:E5:1:C:68:7B:F4:5:FC:82:BB:D1:92:48:21:21:8C:1E:7F:6D:47:B5:49:4:E8:9F:51:54:82:BD:A:F4:40:E8:B6:A:70:EC:D4:F7:F:69:04:EE:D1:F2:1D:B5:60:9F:B0:CC:0C:6B:24:94:19:8B:80:0F:F7:94: 9D:90:88:97:44:74:B5:7:C7:95:EF:DE:92:B2:92:C:6F:1C:CC:8B:A6:52:28:56:00:7F:CB:B4:B5:69:A1:79:1C:5B:A1:DE:25:E0:8A:F9:A0:B6:10:5B:FB:6C:A8:88:F6:1E:CF:B:2E:4F:EB:7D:5:11:CB:BC:9B:41:B9:67:09: 1B:75:2A:F1:B7:00:8C:17:B:6E:68:56:10:22:E0:B6:F7:A5:EF:81:71:F9:9C:7:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier F2:F8:CC:2A:57:61:DA:2B:17::59:E5:82:2D:EC:06:1C:8A:4F:4A CRL Distribution Points :C1:B9:DD:56:D7:47:8A:D:C4:48:54:4F:20:58:48:4:64:77:4C digitalsignature - nonrepudiation 95:99:A2:46:44:F1:2:9B:4C:C0:6C:6A:96:F:A0:2D:10:07:75:0F:4:F9:8A:00:29:AE:D5:05:AB: E6:02:A4 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 115

116 Service Status Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T08:41:42Z Service : (70) PostSignum - Qualified Time Stamping Authority, TSU Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (70) PostSignum - Qualified Time Stamping Authority, TSU (70) PostSignum - autorita kvalifikovaných časových razítek, TSU Service digital identities Certificate fields details MIIGhzCCBW+gAwIBAgIDLckdMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmzaefw0xnta4mjywodqzmdjafw0ymtewmdmwodqyndzamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDMwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCN+UWP1wHjmOw8DpoXNhRqHS5o wpi1p9kyj46oa/vgbtuio0y/d9jequiyphsix1g0z/5shlmlmux6mf9ongdhlzr7dmzr+ysr/g/i pujznksllind78ktwm1pkzljblvn5ad9e9xshhl7ciryscwmbzterof98ib7aas/0x6xemvn/er o7t7t1vohrhzi52iobipmmaoptfw5dqd0fweivw4rtf80qsub7qijvwd7nsjyjqymzkzdf7ybi Bkm7mN2UkioQ1GG5saXTHR/csXaRvk7Z7TiddNSxXhJM846BSaeOywJg8KSrXCCGykC+/aDH9aE9 QGbi/qBKVwsFAgMBAAGjggMrMIIDJzCCASAGA1UdIASCARcwggETMIIBDwYJZ4EGAQQBZYEMMIIB ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMy5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2ezlmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmy5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafpl4zcpxydorfznz5yit7aycik9kmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytmu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMy5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytmuyjs MB0GA1UdDgQWBBSKNyNlUbbrcTfAFUTS0YSGmrysxjANBgkqhkiG9w0BAQsFAAOCAQEAIYO6FXCh W6V2GeVE7PzmeQBOmJppwCQ8Y8ttzBa5jcXrQYA7opRhuh9ZvkigDK1i2/RRaN+b5a0MML7PEz0 dlgslmml6pq54u/c7nrfv2eeftdsqour0fcipath297zhfva6sotq9sbkkxwgp5qua58xrush/ BtAbVE4ogIbHSswnUIOgxljI/vNHK/XO6nS7gu2tj07gS4wMGiCA0edwgvO8QlZOsnxKCW/xCY4 XtCTy9tMD5jJNjFU8eXam71zstEEPLPLe/hreEYt/M9vDy9RTEF2/49AyMOTZajXSYQ7lz0P4vkS gzqydozvw1jhuv/njynqi419hf/7jw== SHA256withRSA PostSignum Qualified CA PostSignum TSA - TSU Subject OU: Time Stamping Authority CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 116

117 Wed Aug 26 10:4:02 CEST 2015 Sun Oct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olicy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier F2:F8:CC:2A:57:61:DA:2B:17::59:E5:82:2D:EC:06:1C:8A:4F:4A CRL Distribution Points A:7:2:65:51:B6:EB:71:7:C0:15:44:D2:D1:84:86:9A:BC:AC:C6 digitalsignature - nonrepudiation Service Status 1B:E8:5:4B:00:02:5C:11:89:FF:A9:E9:0E:8B:4:6C:CB::B2:98:C7:64:21:24:B6:14:4F:4E:18:4 8:09:1D Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T08:4:02Z Service : (71) PostSignum - Qualified Time Stamping Authority, TSU 4 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 117

118 (71) PostSignum - Qualified Time Stamping Authority, TSU 4 (71) PostSignum - autorita kvalifikovaných časových razítek, TSU 4 Service digital identities Certificate fields details MIIGhzCCBW+gAwIBAgIDLckeMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmzaefw0xnta4mjywodq0mtfafw0ymtewmdmwodqzntbamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDQwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQCbTCA28AcWrH7y8MjtiqSAzss 1pv/W51FeVXsHHeVQjUOFUoNN/iBXALglcHbRWRs6LJ6q7vKBa1v0oz/MEElgMF0vTMTlcG2G zaytlkczptxkokcldhy7hclsgfrmu7mmml0pqgcljzid7nb770sq/nzd5q/u+ngxrx7v4n2fj/4z eds0lrchi6g4omx9shtvaltwgsukhbszcfzklhhvafprzii/oa5jrjnadedyewolujwt7gmzgj8 fx9bpkgdamze71bysz6luybrr07rwnrkxmkyjmfzbjygkndzsyfd+cmgh+nzynbrlvlvsafpeyw S1SsW0UOe2NJAgMBAAGjggMrMIIDJzCCASAGA1UdIASCARcwggETMIIBDwYJZ4EGAQQBZYEMMIIB ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMy5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2ezlmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmy5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafpl4zcpxydorfznz5yit7aycik9kmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytmu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMy5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytmuyjs MB0GA1UdDgQWBBRTVDRfFdSvsUHxUoNHmwIfNKnOdTANBgkqhkiG9w0BAQsFAAOCAQEAbS8rim1p gpugmri8f1udnevany/vhijsjevrfneqrd+zrn6mpj2oie0fugvynqikyy58oq1a1y1jphetjx 0I5IeukNTG70ultWsGPLF0kfGjkE82ybF1hUTgitKikfGGMqaCe2AyZECTubSkx2QHBpAcQOTsk TCB6TYVzU4WCNUT++Dkvfz66ABtH7DDNVbberktvjGvgBJU8hrryG+bRCtcGmYzZfaXHBBUi/O qq8douknho4voeoyx6c4oomv9kgc9e84xqaiift9r6ekdqkd9cudvid4n6wzmog58dwjtpg/96 UT+ccHtuokqMfevmG2tK//wl6EJnVQ== SHA256withRSA PostSignum Qualified CA PostSignum TSA - TSU 4 Subject OU: Time Stamping Authority Wed Aug 26 10:44:11 CEST 2015 Sun Oct 0 10:4:50 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:9B:4C:20:6:F0:07:16:AC:7E:F2:F0:C8:ED:8A:A4:B7:0:B:2C:D6:9B:FF:5B:9D:45:79:55:EC:1C:77:95:42:5:0E:1 5:4A:0D:7:F8:81:5C:02:E0:95:C1:DB:45:64:6C:DF:A2:C9:EA:AE:EF:28:16:B5:BF:4A::FF:7:04:12:58:0C:17:4B:D:1:D:E5:70:6D:86:CC:0C:AD:2E:47:19:A5:5:CA:8:A7:0B:76:1C:BB:84:22:EC:80:5A:E6:5:B: 0C:0:BD:0F:40:60:8B:25:92:0:EE:70:7B:EF:4B:10:FC:DC:DD:E6:AF:EE:F8:D8:1:45:7E:EF:E2:7D:85:27:FE:19:79:DB:4:96:B0:87:8B:7E:A0:E0:E9:97:F6:C8:6D:54:02:ED:58:6B:14:28:76:EC:65:C1:59:90:B1:C7:BD: A1:4F:AF:8:88:FE:86:B9:26:B8:E7:01:D1:0:60:45:A8:96:E8:D6:4F:B8:0C:CE:08:FC:7D:7F:41:A4:A1:9D:00:CC:DE:EF:56:F2:B:E:8B:51:80:51:AF:4E:D1:5A:74:64:C4:C9:18:26:67:F:6C:9D:F2:1A:49:DD:CE:C6:1F: 0F:E0:8C:1A:1F:A7:65:8:5B:AE:55:65:55:26:9F:D:EC:96:4B:54:AC:5B:45:0E:7B:6:49:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 118

119 Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier F2:F8:CC:2A:57:61:DA:2B:17::59:E5:82:2D:EC:06:1C:8A:4F:4A CRL Distribution Points :54:4:5F:15:D4:AF:B1:41:F1:52:8:47:9B:02:1F:4:A9:CE:75 digitalsignature - nonrepudiation Service Status 2A:C4:06:21:C5:82:DD:D9:68:4F:A8:D8:91:65:BE:D0:1D:F7:4:5:42:0F:20:1E:5:8C:D9:C7:81: ED:48:5 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T08:44:11Z Service : (72) PostSignum - Qualified Time Stamping Authority, TSU 5 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (72) PostSignum - Qualified Time Stamping Authority, TSU 5 (72) PostSignum - autorita kvalifikovaných časových razítek, TSU 5 Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 119

120 MIIGhzCCBW+gAwIBAgIDLckfMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmzaefw0xnta4mjywodq1mdnafw0ymtewmdmwodq0ndhamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDUwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQDL4aAj7Nebabrr4+d/X+5vB0s lnuihqaqe2csnxlnhwetunleqd4xt1mz5zzmzc0pvvgghvft17o9zjgp+o4xfqgot5qqjs4nb1 kyv5vepjlk4a9grmudupy8jcrheceelmvwaggmi0llyg9hmf9c+k6csbd/q9wo09hx1aswkbrtyf QzsivwMXNgbFf/AN/tvu4jeya8JFTbacHCQXLmuAXeI079OgFSefTWJBRQqVQp5HnPdMIxQ5UcZ 67nALh0J8r4RjY1PusKH6mcQ+Dm1tgq+4nCj2UwITI+m2G5iBfCne5mKLH/tdavMziDDyFh8CS16 pnljxdlaej/agmbaagjggmrmiidjzccasaga1udiascarcwggetmiibdwyjz4egaqqbzyemmiib ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMy5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2ezlmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmy5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafpl4zcpxydorfznz5yit7aycik9kmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytmu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMy5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytmuyjs MB0GA1UdDgQWBBREikRO54/hpjXbZUDOR6Ggpczo8TANBgkqhkiG9w0BAQsFAAOCAQEALo4WYmu5 Vgp8GIksl2etY6nTXOWckPBWLGShKReRW4B5/WkM+L4NV9MlCSpgt9qDJiYbQSScpUVHVMzjX9g mpsptpaoir2qdzwfgv0ebxlkfsufglgpbietcxchh+zlaqtr6h9rnphi8k7zsuovlkud2nv4ddn nxgdhzldru2xvi2euk+44yejvnwst8ya1qo7wyy9xaivzalxd9mwl4qlrog7ivvfcoeubze4l4vc 90RQQsS880ZY2ZA8YbILuvOj0uOvSfUQdLlKP2+Vhkk9pcZw6Jyv6rmQYWVaV89f6huURPBszJtJ P0Th9hwDupatcPqiVBL2NBM+RcJg== SHA256withRSA PostSignum Qualified CA PostSignum TSA - TSU 5 Subject OU: Time Stamping Authority Wed Aug 26 10:45:0 CEST 2015 Sun Oct 0 10:44:48 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:CB:E1:A0:2:EF:7:5E:6D:A6:EB:AF:8F:9D:FD:7F:B9:BC:1D:2C:96:75:08:86:A6:90:1:67:7:B2:75:E5:4:7C:04: 4D:49:E5:12:A7:78:C5:D:66:CF:9C:D9::0:B4:E:FD:D5:18:68:55:16:DD:7B:A:DC:C9:1A:9F:A8:E1:71:6A:18:EB:79:A9:02:52:E2:70:75:91:85:79:54:4:E:96:4E:00:F6:04:66:51:D5:0F:6:C8:DC:AE:17:9C:79:E9:66 :BD:60:06:80:C2:4:96:5C:A0:F4:79:9F:F4:2F:8A:E8:2B:1B:0F:FA:BD:5A:8D:D:85:7D:40:49:69:01:46:DC:85:4:B:22:BF:0:17:6:06:C5:7F:F0:0D:FE:DB:EE:E2:7:B2:6B:C2:45:4D:B6:9C:1C:24:17:2E:6B:80:5D:E2: 4:EF:D:A0:15:27:9F:4D:62:41:45:0A:95:42:9E:47:9C:F7:4C:2:14:9:51:C6:77:EB:B9:C0:2E:1D:09:F2:BE:11:8D:8D:4F:BA:C2:87:EA:67:10:F8:9:B5:B6:0A:BE:E2:70:A:D9:4C:08:4C:8F:A6:D8:6E:62:05:F0:A7:7B:9 9:8A:2C:7F:ED:75:AB:CC:CE:20:C:C8:58:7C:09:2D:7A:A4:D9:6:C4:2:C0:1:72:7F:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier F2:F8:CC:2A:57:61:DA:2B:17::59:E5:82:2D:EC:06:1C:8A:4F:4A CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 120

121 CRL Distribution Points :8A:44:4E:E7:8F:E1:A6:5:DB:65:40:CE:47:A1:A0:A5:CC:E8:F1 digitalsignature - nonrepudiation Service Status A:F1:A7:FB:AF:8:1E:C7:E9:CC:4:FD:1D:09:1A:65:5C:00:1B:60:71:5C:91:4A:E4:8A:AC:D4:8 0:F0:01:91 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T08:45:0Z Service : (7) PostSignum - Qualified Time Stamping Authority, TSU 6 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (7) PostSignum - Qualified Time Stamping Authority, TSU 6 (7) PostSignum - autorita kvalifikovaných časových razítek, TSU 6 Service digital identities Certificate fields details MIIGhzCCBW+gAwIBAgIDLckgMA0GCSqGSIbDQEBCwUAMF8xCzAJBgNVBAYTAkNaMSwwKgYDVQQK DCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEiMCAGA1UEAxMZUG9zdFNpZ251 bsbrdwfsawzpzwqgq0egmzaefw0xnta4mjywodq1ntdafw0ymtewmdmwodq1ndfamh4xczajbgnv BAYTAkNaMSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQMTE0OTgzXTEgMB4G A1UECxMXVGltZSBTdGFtcGluZyBBdXRobJpdHkxHzAdBgNVBAMTFlBvcRTaWdudW0gVFNBIC0g VFNVIDYwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQDLslmpHGB107JtJjOS21wIHeQ WRJ4lQy9AAXlJ89RhEiaDRO0xA5/01yovzsI5mhK8J7BM9VxfEuLYZ5isXOyibALYIGJvUMaKb 2F5lJiPa9wwjc1OdHkrsQqSXSZnPg/aXNnmea0pGf5HlGdkWhkZkMKAhY4uJNEalMW/N/5kCJo 7k8eSMzvSbmCeJemela/ituqCLi1/ZXBrm0/+AZedGek0RZW+rRzU1zFzLFOTOzKF/e/ayL5TiX QoffgFurtFcz2IGIKhiwc5VVEAVr4FSaqnidUd8CGiNgHMFdvLHnC7QTsM6GNpwDbMZAsscn flep+anulusbagmbaagjggmrmiidjzccasaga1udiascarcwggetmiibdwyjz4egaqqbzyemmiib ADCB1wYIKwYBBQUHAgIwgcoagcdUZW50byBrdmFsaWZpa292YW55IHN5cRlbW92eSBjZXJ0aWZp a2f0igj5bcb2ewrhbibwb2rszsb6ywtvbmegmjilziwmdbtyi4gysbuyxzhem55y2ggchjlzhbp cuvvghpcybxdwfsawzpzwqgclzdgvtignlcnrpzmljyxrlihdhcybpcn1zwqgywnjbjkaw5n IHRvIExhdyBObyAyMjcvMjAwMENvbGwuIGFuZCByZWxhdGVkIHJlZVsYXRpb25zMCQGCCsGAQUF BwIBFhhodHRwOi8vddLnBvcRzaWdudW0uYowGgYIKwYBBQUHAQMEDjAMMAoGCCsGAQUFBwsC MIHIBggrBgEFBQcBAQSBuzCBuDA7BggrBgEFBQcwAoYvaHR0cDovLddy5wbN0c2lnbnVtLmN6 L2NydC9wcF1YWxpZmllZGNhMy5jcnQwPAYIKwYBBQUHMAKGMGh0dHA6Ly9dcyLnBvcRzaWdu dw0uyovyj0lbzcxvhbglmawvky2ezlmnydda7bggrbgefbqcwaoyvahr0cdovlbvcrzawdu dw0udhrjlmn6l2nydc9wcf1ywxpzmllzgnhmy5jcnqwdgydvr0paqh/baqdagbambyga1udjqeb /wqmmaogccsgaqufbwmimb8ga1udiwqymbaafpl4zcpxydorfznz5yit7aycik9kmigxbgnvhr8e gakwgaywnaazodggl2h0dha6ly9dcucg9zdhnpz251bs5jei9jcmwvchnxdwfsawzpzwrjytmu YJsMDagNKAyhjBodHRwOi8vddMi5wbN0c2lnbnVtLmN6L2NybC9wcF1YWxpZmllZGNhMy5j cmwwnaazodggl2h0dha6ly9wbn0c2lnbnvtlnr0yy5jei9jcmwvchnxdwfsawzpzwrjytmuyjs MB0GA1UdDgQWBBSujABkFsvTmtQbayDgBRAA0xPwnDANBgkqhkiG9w0BAQsFAAOCAQEAbE/e74hk u4bqcns0zvlvngy2p1rw6dq/haxw6ekjcsb/rfkdf/pe9pcsi7+qgnge9cpv+mdomhfjoardv DrpmGKM7mG5oipiz6KGY8rAnGE91ZxUIaw9UFsy2HVAPbUsVhRJ8CTyCgDI1nNaPzGlvyWmNrRIi o0jdcdldx2g7xxr1poihw9obx6ffjild6dgny5tcriql9dpreyvbypg+avd6mmi7snkgbgtbyva D/JZf4gWQLOM2iHdfyPX8ynLbPX68dRTRp0uxBFpn8MUrg4n81UrHAZqOLFgXIGbdnj6yHB2F7eC 7abGf2dT1WDlW7ZL5cuzITLz6uRwBg== CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 121

122 SHA256withRSA PostSignum Qualified CA PostSignum TSA - TSU 6 Subject OU: Time Stamping Authority Wed Aug 26 10:45:57 CEST 2015 Sun Oct 0 10:45:41 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:F7:2E:C9:66:A4:71:81:D7:4E:C9:B4:98:CE:4B:6D:70:20:77:90:59:12:78:95:0C:BD:00:05:E5:27:CF:51:84:48:9A:DC :4:4E:D:10:9:FF:4D:72:A2:FC:EC:2:99:A1:2B:C2:7B:07:7:D:57:17:C4:B8:B6:19:E6:2B:17:B:28:9B:00:B6:08:18:9B:D4:1:A2:9B:D8:5E:65:26:2:DA:F7:0C:2:7:5:9D:1E:4A:EC:42:A4:97:49:99:CF:8:F6:97:6 :79:9E:DD:AD:29:19:FE:47:94:67:64:5A:19:19:90:C2:80:85:8E:2E:24:D1:1A:97:7:16:FC:DF:F9:90:22:68:EE:4F:1E:48:CC:EF:49:B9:82:78:97:A6:7A:56:BF:8A:DB:AA:08:B8:B5:FD:95:C1:AE:6D:F:F8:06:5E:74:67:A4: D1:16:56:FA:B4:7:5:5C:C5:CC:B1:4E:4F:7:B:28:5F:DE:FD:AC:8B:E5:8:97:42:87:DF:8:71:6E:AE:D1:5C:CF:62:06:20:A8:62:C1:CE:55:54:40:15:AF:81:52:6A:A9:E2:75:47:7C:08:68:8D:80:7:05:DD:DB:CB:1E:70: B7:ED:0D:D:B0:CE:86:6:9C:0:6C:C6:40:B2:C7:27:7E:51:0F:F8:09:EE:2E:E4:81:02:0:01:00:01 Policy OID: CPS text: [Tento kvalifikovany systemovy certifikat byl vydan podle zakona 227/2000Sb. a navaznych predpisu/this qualified system certificate was issued according to Law No 227/2000Coll. and related regulations] CPS pointer: Authority Info Access Extended Key Usage id_kp_timestamping Authority Key Identifier F2:F8:CC:2A:57:61:DA:2B:17::59:E5:82:2D:EC:06:1C:8A:4F:4A CRL Distribution Points AE:8C:00:64:16:CB:D:9A:D4:1B:6B:20:E0:05:10:00:D:1:F0:9C digitalsignature - nonrepudiation 61:6F::2C:AC:F6:A9:06:F4:D1:4C:8:B1:C6:2D:DE:B0:2C:0E:E:19:CC:9C:2E:EF:7A:4:8B:E E:0A:E:AB CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 122

123 Service Status Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T08:45:57Z CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 12

124 - TSP: eidentity a.s. TSP Name eidentity a.s. eidentity a.s. TSP Trade Name eidentity a.s. VAT PostalAddress Street Address [ en ] Vinohradska 184/296 Locality [ en ] Prague Postal Code [ en ] 1000 Country PostalAddress Street Address [ cs ] Vinohradská 184/296 Locality [ cs ] Praha Postal Code [ cs ] 1000 Country ElectronicAddress URI mailto:[email protected] URI URI TSP Information URI URI [ en ] html URI [ cs ] CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 124

125 .1 - Service : (8) ACAeID - issuing qualified certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name (8) ACAeID - issuing qualified certificates (8) ACAeID - vydávání kvalifikovaných certifikátů Service digital identities Certificate fields details 4 MIIHrjCCBpagAwIBAgIBBDANBgkqhkiG9w0BAQUFADCB9TELMAkGA1UEBhMCQ1oxFzAVBgNVBAoM DmVJZGVudGl0eSBhLnMuMTwwOgYDVQQLDDNBaJlZGl0bZhbsO9IHBvc2t5dG92YXRlbCBjZXJ0 awzpa2hejw7drwnoihnsdcw+zwixkjaobgnvbacmivzpbm9ocmfkc2vdosaxodqsidezmcawmcwg UHJhaGEgMzFjMGEGA1UEAwxaQUNBZUlEIC0gUXVhbGlmaWVkIFJvbQgQ2VydGlmaWNhdGUgKGt2 YWxpZmlrbZhbsO9IHN5cTDqW1vdsO9IGNlcnRpZmlrw6F0IGtvxZllbm92w6kgQ0EpMB4XDTA1 MTExNTEzNTIzN1oXDTExMTExNTEzNTIzN1owgfsxCzAJBgNVBAYTAkNaMRcwFQYDVQQKDA5lSWRl bnrpdhkgys5zlje8mdoga1uecwwzqwtyzwrpdg92yw7dvsbwbnrexrvdmf0zwwgy2vydglmawth xi1uw61jacbzbhxfvmvimsowkaydvqqhdcfwaw5vahjhzhnrw6egmtg0lcaxmzagmdasifbyywhh IDMxaTBnBgNVBAMMYEFDQWVJRCAtIFF1YWxpZmllZCBJcN1aW5nIENlcnRpZmljYXRlIChrdmFs awzpa292yw7dvsbzexn0w6ltbbdvsbjzxj0awzpa8ohdcb2ewtdoxzhasoty8otienbktccasaw DQYJKoZIhvcNAQEBBQADggENADCCAQgCggEBANf6VjTG8r+dcFKsL9Jo2sWL4jRUIpuh9cGGxUC MzkxNcRzRI08Ewc4+EG2DGZgFeZvPzpyPdV5ifE4fnGSi5iMM5y0XB9sHQvYVPQ2p19hPhSfq+jx D0XQb1kWApTx6l5Wr+yJYmlLb0wngjaB506ygevQqU2VpIIXbIr4xWToN512r+XvfOezWfuL9rb gkbc+p8+bgujxhd5b99a+bqnxqadcbvwzp6q/+5dtp7561rrzinxju+frcxai7ktzdwltvwmq 08WoGhZdFbof0L6sXVGe/M7r8+bA/DJwegw1bRxf1TsHoRWdL5cddgTt9WMQ7aqTrnfEnhAV/+MC AQOjggNBMIIDPTAdBgNVHQ4EFgQUn1Q9CzBwBbp6d/Is8xlv6/XBrbAwggEUBgNVHSAEggELMIIB BzCCAQMGDCqBS4z26CkBCgMBATCB8jAxBggrBgEFBQcCARYlaHR0cDovLddy5hY2FlaWQuYov cm9vdc9jcc1ycxnjlnbkzjcbvayikwybbquhagiwga8agaxuzw50bybjzxj0awzpa+f0igplihz5 ZOFuIGpha28gSZhbGlmaWtvdmFu/SBzeXN06W1vdv0gY2VydGlmaWvhdCBwb2RsZSB64WtvbmEg MjILzIwMDAgU2IuIC8gVGhpcyBpcyBRdWFsaWZpZWQgUlzdGVtIENlcnRpZmljYXRlIGFjY29y ZGluZyB0byBDemVjaCBBYQgTm8uIDIyNy8yMDAwIENvbGwuMBIGA1UdEwEB/wQIMAYBAf8CAQAw ggekbgnvhsmeggebmiibf4aulpqpt6x8e0naezclbx9ujaxcjeshgfukgfgwgfuxczajbgnvbayt AkNaMRcwFQYDVQQKDA5lSWRlbnRpdHkgYS5zLjE8MDoGA1UECwwzQWtyZWRpdG92YW7DvSBwbNr exrvdmf0zwwgy2vydglmawthxi1uw61jacbzbhxfvmvimsowkaydvqqhdcfwaw5vahjhzhnrw6eg MTg0LCAxMzAgMDAsIFByYWhhIDMxYzBhBgNVBAMMWkFDQWVJRCAtIFF1YWxpZmllZCBSb290IENl cnrpzmljyxrlichrdmfsawzpa292yw7dvsbzexn0w6ltbbdvsbjzxj0awzpa8ohdcbrb8wzzw5v dsopienbkyibazcbnqydvr0fbigvmigsmc6glkaqhihodhrwoi8vddlmfjywvpzc5jei9yb290 L2NybC9hYR1YWwuYJsMC+gLaArhilodHRwOi8vcHViMS5hY2FlaWQuYovcm9vdC9jcmwvYWN0 dwfslmnybdavoc2gk4ypahr0cdovlb1yjiuywnhzwlklmn6ljvbqvyjsl2fjdhvhbc5jcmww DgYDVR0PAQH/BAQDAgEGMBgGCCsGAQUFBwEDBAwwCjAIBgYEAI5GAQEwDQYJKoZIhvcNAQEFBQAD ggebajolmg86mt6fou9mhp84ucpt5vvzcwfkjeiw5wma/6wy+/qbojzhummx/apcyz/fhg+up6am buit885kdaugqgj7hzvaj6nfgpw4b1dva7rjjo8dvsujksmtcnk/zr8wpf5an6llh5zraf6dhps r5+av2qwricng9oski5jjpmnduw5orv/ruui6z+ffeibtn7p6qckkwiwpn7viewup2cpqan2xmho 7CbKMnD/hyb/rFbftJDigvF2OxjB8hf9qDt59jqqPm5reuP0rFZM/yI4YTCMsucdP8uuUTpkB GYyv8ROP2yA5vIefAC/5gNu/o7lwIsbTpIfAx10HuaI= SHA1withRSA ACAeID - Qualified Root Certificate (kvalifikovaný systémový certifikát kořenové CA) Issuer L: Vinohradská 184, 10 00, Praha Issuer OU: Akreditovaný poskytovatel certifikačních služeb eidentity a.s. ACAeID - Qualified Issuing Certificate (kvalifikovaný systémový certifikát vydávající CA) Subject L: Vinohradská 184, 10 00, Praha Subject OU: Akreditovaný poskytovatel certifikačních služeb CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 125

126 eidentity a.s. Tue Nov 15 14:52:7 CET 2005 Tue Nov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olicy OID: CPS pointer: CPS text: [Tento certifikát je vydán jako Kvalifikovaný systémový certifikát podle zákona 227/2000 Sb. / This is Qualified System Certificate according to Czech Act No. 227/2000 Coll.] Basic Constraints IsCA: true - Path length: 0 Authority Key Identifier 2E:9A:8F:4F:AC:7C:7B:49:C0:1:0:A5:6D:7F:54:8D:A5:C2:25:E4 CRL Distribution Points QCStatements - crit. = false id_etsi_qcs_qccompliance keycertsign - crlsign Service Status 6E:C5:00:C0:0E:41:BD:A5:71:A8:5:2F:17:BC:D5:DF:7:7E:E9:FC:EF:9:CA:D:4A:85:A8:EE: DD:C2:6B:96 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T14:52:7Z Extension (critical): Qualifiers [QCNoSSCD] Qualifier type description [en] it is ensured by the trust service provider and controlled (supervision model) or audited (accreditation model) by the referenced Member State (respectively its Supervisory Body or Accreditation Body) that all Qualified Certificates issued under the service identified in "Service digital identity" and further identified by the filters information used to further identify under the "Sdi" identified trust service that precise set of Qualified Certificates for which this additional information is required with regards to the presence or absence of Secure Signature Creation Device (SSCD) support ARE NOT supported by an SSCD (i.e. that that the private key associated with the public key in the certificate is not stored in a Secure Signature Creation Device conformant with the applicable European legislation). Qualifier CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 126

127 Criteria list assert=atleastone Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier Policy Identifier nodes: Identifier Service : (2) ACAeID2 - issuing qualified certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name (2) ACAeID2 - issuing qualified certificates (2) ACAeID2 - vydávání kvalifikovaných certifikátů Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 127

128 MIIGxDCCBaygAwIBAgIECNW6rzANBgkqhkiG9w0BAQsFADCB+zELMAkGA1UEBhMCQ1oxFzAVBgNV BAoMDmVJZGVudGl0eSBhLnMuMTwwOgYDVQQLDDNBaJlZGl0bZhbsO9IHBvc2t5dG92YXRlbCBj ZXJ0aWZpa2HEjW7DrWNoIHNsdcW+ZWIxLzAtBgNVBAcMJlZpbm9ocmFkc2vDoSAxODQvMjM5Niwg MTMwIDAwLCBQcmFoYSAzMWQwYgYDVQQDDFtBQ0FlSUQyIC0gUXVhbGlmaWVkIFJvbQgQ2VydGlm awnhdgugkgt2ywxpzmlrbzhbso9ihn5ctdqw1vdso9ignlcnrpzmlrw6f0igtvxzllbm92w6kg Q0EpMB4XDTEwMDIyMjEMjkzOFoXDTE2MDIyMjEMjkzOFowggEBMQswCQYDVQQGEwJDWjEXMBUG A1UECgwOZUlkZW50aXR5IGEucy4xPDA6BgNVBAsMM0FrcmVkaXRvdmFuw70gcG9zal0bZhdGVs IGNlcnRpZmlrYcSNbsOtY2ggc2x1xb5lYjEvMC0GA1UEBwwmVmlub2hyYWRza8OhIDE4NC8yMzk2 LCAxMzAgMDAsIFByYWhhIDMxajBoBgNVBAMMYUFDQWVJRDIgLSBRdWFsaWZpZWQgSXNzdWluZyBD ZXJ0aWZpY2F0ZSAoaZhbGlmaWtvdmFuw70gclzdMOpbW92w70gY2VydGlmaWvDoXQgdnlkw6F2 YWrDrWPDrSBDQSkwggEiMA0GCSqGSIbDQEBAQUAA4IBDwAwggEKAoIBAQDO1n5ilsig+Kknf116 cy9piyzq/kqkjmkaldmdijatbuuycmd47ws7lweqawcayv2uw8rtqtlab2xtuft6t1aqm/fsbdn zszxgm+axqlbedrogfrhjjmam77ggilewckrx+fz7yanqp0rzwuoyxdkmgdvxdmjwvnjifpezntf lpte9+emednvfabpji6egdecwzwiigwiwm+6uiu8wtpzklezuolcycytfpcuavlhwfcwcgk0e5u E/g9z/21bIqUauXb+AgDT9d1Drqv6jUQRzrSoYtos+vlMr6zPo/GtRyfMS0a+Q9RxXfHigcMRsr JAyTBm+VYZRuq9NlK0enAgMBAAGjggJFMIICQTAdBgNVHQ4EFgQUu/44pZ6RYXGZCljdig/kJ9 pj0wggecbgnvhsaeggetmiibdzccaqsgdcqbs4z26ckbcgmcajcb+jaybggrbgefbqccarymahr0 cdovlddy5hy2flawquyovcm9vddivyatcnfzyy5wzgywgcmgccsgaqufbwicmig2digzvgvu dg8gy2vydglmawvdoxqgamugdnlkw6fuigpha28gszhbglmawtvdmfuw70gclzdmopbw92w70g Y2VydGlmaWvDoXQgcG9kbGUgesOha29uYSAyMjcvMjAwMCBTYi4gLyBUaGlzIGlzIFF1YWxpZmll ZCBTeXN0ZW0gQ2VydGlmaWNhdGUgYWNjbJkaW5nIHRvIEN6ZWNoIEFjdCBOby4gMjILzIwMDAg Q29sbC4wEgYDVR0TAQH/BAgwBgEB/wIBADAfBgNVHSMEGDAWgBSV/iNQL8pjcNPAwSUSIXLFuuae XTCBoAYDVR0fBIGYMIGVMC+gLaArhilodHRwOi8vddLmFjYWVpZC5jei9yb290Mi9jcmwvYWN0 dwfslmnybdawoc6gliyqahr0cdovlb1yjeuywnhzwlklmn6ljvbqyl2nybc9hyr1ywwuyjs MDCgLqAshipodHRwOi8vcHViMi5hY2FlaWQuYovcm9vdDIvYJsL2FjdHVhbC5jcmwwGAYIKwYB BQUHAQMEDDAKMAgGBgQAjkYBATAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQELBQADggEBAKwd M0AQvcRYz98f1+i2r20rP+FW/LDKg5Gljza0SxgXrlmd1zqQS9yVC2DeQTF4nLxtyrF6HfsLfU8 vjzo/hhaxpuljuzifyp5cisea1fwdnpwefpgz/cp6zemxihkw2tposepvkpqysvx5behzpoaghc 0rAC4wVmon+pBHJlAVdV1RB1Zrpild5URpyc+9Gy4ehvahz9nAgb5j4R/oNFxMF2TtajsYWJTDp ea1cjf7t1pia24j0zmgug786s/iuc1/plhyjmxtkj5fwcqlpo+6ds0dejpqp7fh42ubod/xnxzig 7YL0GOqca80/5K+AZwp9RGA+Y20bz6RndcE= SHA256withRSA ACAeID2 - Qualified Root Certificate (kvalifikovaný systémový certifikát kořenové CA) Issuer L: Vinohradská 184/296, 10 00, Praha Issuer OU: Akreditovaný poskytovatel certifikačních služeb eidentity a.s. ACAeID2 - Qualified Issuing Certificate (kvalifikovaný systémový certifikát vydávající CA) Subject L: Vinohradská 184/296, 10 00, Praha Subject OU: Akreditovaný poskytovatel certifikačních služeb eidentity a.s. Mon Feb 22 18:29:8 CET 2010 Mon Feb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olicy OID: CPS pointer: CPS text: [Tento certifikát je vydán jako Kvalifikovaný systémový certifikát podle zákona 227/2000 Sb. / This is Qualified System Certificate according to Czech Act No. 227/2000 Coll.] Basic Constraints IsCA: true - Path length: 0 Authority Key Identifier 95:FE:2:50:2F:CA:6:70:D:C0:C1:25:12:21:72:C5:BA:E6:9E:5D CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 128

129 CRL Distribution Points QCStatements - crit. = false id_etsi_qcs_qccompliance keycertsign - crlsign Service Status 0A:F0:95:67:AE:FB:2E:6B:8C:76:FE:45:9C:F2:CC:E0:D5:18:2A:6D:09:D:01:BE:A2:1C:64:2:E D:C4:7B:46 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T17:29:8Z Extension (critical): Qualifiers [QCNoSSCD] Qualifier type description [en] it is ensured by the trust service provider and controlled (supervision model) or audited (accreditation model) by the referenced Member State (respectively its Supervisory Body or Accreditation Body) that all Qualified Certificates issued under the service identified in "Service digital identity" and further identified by the filters information used to further identify under the "Sdi" identified trust service that precise set of Qualified Certificates for which this additional information is required with regards to the presence or absence of Secure Signature Creation Device (SSCD) support ARE NOT supported by an SSCD (i.e. that that the private key associated with the public key in the certificate is not stored in a Secure Signature Creation Device conformant with the applicable European legislation). Qualifier Criteria list assert=atleastone Policy Identifier nodes: Identifier Service : (24) ACAeID2 - Time Stamping Authority TSA1, TSU1 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (24) ACAeID2 - Time Stamping Authority TSA1, TSU1 (24) ACAeID2 - autorita časových razítek TSA1, TSU1 Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 129

130 MIIGFDCCBPygAwIBAgIEHUy+SDANBgkqhkiG9w0BAQsFADCB+zELMAkGA1UEBhMCQ1oxFzAVBgNV BAoMDmVJZGVudGl0eSBhLnMuMTwwOgYDVQQLDDNBaJlZGl0bZhbsO9IHBvc2t5dG92YXRlbCBj ZXJ0aWZpa2HEjW7DrWNoIHNsdcW+ZWIxLzAtBgNVBAcMJlZpbm9ocmFkc2vDoSAxODQvMjM5Niwg MTMwIDAwLCBQcmFoYSAzMWQwYgYDVQQDDFtBQ0FlSUQyIC0gUXVhbGlmaWVkIFJvbQgQ2VydGlm awnhdgugkgt2ywxpzmlrbzhbso9ihn5ctdqw1vdso9ignlcnrpzmlrw6f0igtvxzllbm92w6kg Q0EpMB4XDTEwMDQyMzEwMjUxMFoXDTE2MDQyMzEwMjUxMFowRDELMAkGA1UEBhMCQ1oxFzAVBgNV BAoMDmVJZGVudGl0eSBhLnMuMQ0wCwYDVQQLDARUU0ExMQ0wCwYDVQQDDARUU1UxMIIBIjANBgkq hkig9w0baqefaaocaq8amiibcgkcaqea8sba+ay8lwpfncmzk68zuhbl7bsiejwmp/qvnudah5 JoMe+Scdn6XIFgIZo68w/iR0oSf9m6xazsHnL9HKYcy7OELqNlQ6ihHM0e1YNVoiDa6oonlZtMBn Zumg8+8Nl0LQujzsU0jItR2MjSlkgIq6OjZrgTeZloQ1GjdQltAjrUc2UECT28U5R0+LHBIzWyT OYlyx0Ti1G59QXL9/ZMjFXutOCYGKz1EW0rVb6rjoP8K2tt4xv7bxIeb4Dk6vYhYh2gO9fdcm 6p8DNle1Hfh/a8xBhXkDjQn0/l/xfbsQUt+dIK2cg48Yp4W86ivOTtPaNi4TCPIZr+6kQIDAQAB o4icvdccalawhqydvr0obbyefglousizcdfll9lhfk1+bgkcwjefmiibhaydvr0gbiibezccaq8w ggelbgwqguum9ugpaqodagmwgfowmgyikwybbquhagewjmh0dha6ly9dcuywnhzwlklmn6ljv bqyl2nwlxjxc2mucgrmmihdbggrbgefbqccajcbtgybs1rlbnrvignlcnrpzmlrw6f0igplihz5 ZMOhbiBqYWtvIEt2YWxpZmlrbZhbsO9IHN5cTDqW1vdsO9IGNlcnRpZmlrw6F0IHBvZGxlIHrD owtvbmegmjilziwmdagu2iuic8gvghpcybpcybrdwfsawzpzwqgulzdgvtienlcnrpzmljyxrl IGFjY29yZGluZyB0byBDemVjaCBBYQgTm8uIDIyNy8yMDAwIENvbGwuMAkGA1UdEwQCMAAwHwYD VR0jBBgwFoAUlf4jUC/KYDTwMElEiFyxbrmnl0wgaAGA1UdHwSBmDCBlTAvoC2gK4YpaHR0cDov Lddy5hY2FlaWQuYovcm9vdDIvYJsL2FjdHVhbC5jcmwwMKAuoCyGKmh0dHA6Ly9wdWIxLmFj YWVpZC5jei9yb290Mi9jcmwvYWN0dWFsLmNybDAwoC6gLIYqaHR0cDovLB1YjIuYWNhZWlkLmN6 LJvbQyL2NybC9hYR1YWwuYJsMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQE AwIGwDAYBggrBgEFBQcBAwQMMAowCAYGBACORgEBMA0GCSqGSIbDQEBCwUAA4IBAQBZfD2XJ7Ad /InxiCtSsowPG7ffrh/+BLPcSfE8Ddu5Tl2F86EdBKARe4lezDAPAfvP5WvyZTOeXvQplu80IC fdyrvdhutbezfpsmuqjp1knu1y+jr/xvrpfaxo5u2jht9agb0vfkwqb7fiymx0/bf5kemnhik1gr 5AVO4HAHqaveenSjqT8wm1xUdmLhECWNV+9BvG7JNAAkR2VhKqBCsFnlxsHDGF9Ak9EMtSZyURP NQ8+0WvygReanjbXWmBeSyADxvV86qzK01kDBM4erR40gODjRq28YznD44nDEUsapDs/4Jn EY1ROQc6W4NNdvf5eGIYdk7zVoaJ SHA256withRSA ACAeID2 - Qualified Root Certificate (kvalifikovaný systémový certifikát kořenové CA) Issuer L: Vinohradská 184/296, 10 00, Praha Issuer OU: Akreditovaný poskytovatel certifikačních služeb eidentity a.s. TSU1 Subject OU: TSA1 eidentity a.s. Fri Apr 2 12:25:10 CEST 2010 Sat Apr 2 12:25:10 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:F2:C0:77:0:E6:98:F0:BC:0F:16:77:26:DD:99:A:F1:9B:87:06:5E:DB:B0:87:A:5A:6A:7F:A9:5:6E:74:01:F9:26:8 :1E:F9:27:1D:9F:A5:C8:16:02:19:A:AF:0:FE:24:74:A1:27:FD:9B:AC:5A:CE:C1:E7:2F:D1:CA:61:CC:BB:8:42:EA:6:54:A:8A:11:CC:D1:ED:58:5:5A:22:0D:AE:A8:A2:79:59:B4:C0:67:66:E9:A0:F:EF:0D:97:42:D0: BA:C:EC:5:48:C8:B5:1D:8C:8D:29:64:80:8A:BA:A:6:6B:81:7:99:96:84:5:1A:7:77:42:5B:40:8E:B5:1C:D9:41:02:4F:6F:14:E5:1D:E:2C:70:48:CD:6C:9:9:89:72:C7:44:E2:D4:6E:7D:41:72:FD:FD:9D:CC:8C:55:E E:B4:E0:98:18:AC:F5:11:6D:2B:55:BD:FA:AE:A:0F:F:72:B6:B6:DE:1:BF:B6:F1:21:E6:F8:0E:4E:AF:62:16:21:DA:0:BD:7D:D7:26:EA:9F:0:6:57:B5:1D:F8:7F:6B:CC:41:85:79:0:8D:09:F4:FE:5F:F1:7D:BB:10:52: DF:9D:20:AD:9C:8:8F:18:A7:85:BC:EA:2B:CE:4E:D:DA:6:2E:1:08:F2:19:DE:BF:BA:91:02:0:01:00:01 69:68:BA:C8:B:08:7:CB:97:D9:47:16:4D:7E:06:02:82:C2:1:1F Policy OID: CPS pointer: CPS text: [Tento certifikát je vydán jako Kvalifikovaný systémový certifikát podle zákona 227/2000 Sb. / This is Qualified System Certificate according to Czech Act No. 227/2000 Coll.] Basic Constraints IsCA: false CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 10

131 Authority Key Identifier 95:FE:2:50:2F:CA:6:70:D:C0:C1:25:12:21:72:C5:BA:E6:9E:5D CRL Distribution Points Extended Key Usage id_kp_timestamping QCStatements - crit. = false id_etsi_qcs_qccompliance digitalsignature - nonrepudiation Service Status 49:2:A:9A:F5:B8:D4:FB:79:F2:8:76:6C:22:5:1A:0A:72:5B:D2:1C:47:28:EB:8C:F1:CA:52:49: 55:F0:A5 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T2:00:00Z.4 - Service : (64) ACAeID2.1 - issuing qualified certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name (64) ACAeID2.1 - issuing qualified certificates (64) ACAeID2.1 - vydávání kvalifikovaných certifikátů Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 11

132 MIIGxjCCBa6gAwIBAgIEQQmgjTANBgkqhkiG9w0BAQsFADCB+zELMAkGA1UEBhMCQ1oxFzAVBgNV BAoMDmVJZGVudGl0eSBhLnMuMTwwOgYDVQQLDDNBaJlZGl0bZhbsO9IHBvc2t5dG92YXRlbCBj ZXJ0aWZpa2HEjW7DrWNoIHNsdcW+ZWIxLzAtBgNVBAcMJlZpbm9ocmFkc2vDoSAxODQvMjM5Niwg MTMwIDAwLCBQcmFoYSAzMWQwYgYDVQQDDFtBQ0FlSUQyIC0gUXVhbGlmaWVkIFJvbQgQ2VydGlm awnhdgugkgt2ywxpzmlrbzhbso9ihn5ctdqw1vdso9ignlcnrpzmlrw6f0igtvxzllbm92w6kg Q0EpMB4XDTE1MDIwMTE4MDU0NFoXDTIxMDIwMTE4MDU0NFowggEDMQswCQYDVQQGEwJDWjEXMBUG A1UECgwOZUlkZW50aXR5IGEucy4xPDA6BgNVBAsMM0FrcmVkaXRvdmFuw70gcG9zal0bZhdGVs IGNlcnRpZmlrYcSNbsOtY2ggc2x1xb5lYjEvMC0GA1UEBwwmVmlub2hyYWRza8OhIDE4NC8yMzk2 LCAxMzAgMDAsIFByYWhhIDMxbDBqBgNVBAMMY0FDQWVJRDIuMSAtIFF1YWxpZmllZCBJcN1aW5n IENlcnRpZmljYXRlIChrdmFsaWZpa292YW7DvSBzeXN0w6ltbbDvSBjZXJ0aWZpa8OhdCB2eWTD oxzhasoty8otienbktccasiwdqyjkozihvcnaqebbqadggepadccaqocggebalpfe5esbawr+tbo W2AC7CmnoakJ5iOqDaHtIG1T9juM24iDrwL1C0GXQsjw41Ue77b/NT4AfNA+uKPSRwxDI/8eEt C7NSbDAUiY+IGu/QP+vKGOE67bmryW0PFqu7rOTJo62uRY1iO0jlUrJ7QTcwJu2lV+Zhr5ernrcZ z4gd07sh25qmmrv7dmphcsgpy/z4gbmxxvb0fojbar7najo19vog2wc1x96l4zutwlgnxjarts2j anh8gez15uo6v4mbnq9vecmlknsshmo/gh2prpkwrhtxbbflj/blcyse1p0oihsadrtyoeuzlyey UB8vKgT8FSdyLBMnh0XZicCAwEAAaOCAkUwggJBMB0GA1UdDgQWBBRsVM52ll7TsCnrRW27769 jyivodccarwga1udiascarmwggepmiibcwymkofljpbokqekawidmih6mdigccsgaqufbwibfizo dhrwoi8vddlmfjywvpzc5jei9yb290mi9jcc1ycxnjlnbkzjcbwwyikwybbquhagiwgbymgbnu ZW50byBjZXJ0aWZpa8OhdCBqZSB2eWTDoW4gamFrbyBLdmFsaWZpa292YW7DvSBzeXN0w6ltbbD vsbjzxj0awzpa8ohdcbwb2rszsb6w6frb25hidiyny8ymdawifniliavifroaxmgaxmguxvhbglm awvkifn5crlbsbdzxj0awzpy2f0zsbhy2nvcmrpbmcgdg8gqply2ggqwn0ie5vliaymjcvmjaw MCBDb2xsLjASBgNVHRMBAf8ECDAGAQH/AgEAMB8GA1UdIwQYMBaAFJX+I1AvymNw08DBJRIhcsW6 5p5dMIGgBgNVHR8EgZgwgZUwL6AtoCuGKWh0dHA6Ly9dcuYWNhZWlkLmN6LJvbQyL2NybC9h YR1YWwuYJsMDCgLqAshipodHRwOi8vcHViMS5hY2FlaWQuYovcm9vdDIvYJsL2FjdHVhbC5j cmwwmkauocygkmh0dha6ly9wdwiylmfjywvpzc5jei9yb290mi9jcmwvywn0dwfslmnybdaobgnv HQ8BAf8EBAMCAQYwGAYIKwYBBQUHAQMEDDAKMAgGBgQAjkYBATANBgkqhkiG9w0BAQsFAAOCAQEA pcrauznyp/byh5lup26zz2nuqr0n1ay9sykz6qtof+sarykp6clmxmgqwodfz4m0r8jqscwp9mq 8iU+SP8nV1kvoXv9it+vt4ykd94cWLvhdfVfPVj6UM8hhgZwDnXjfZVclIL7HcDikNjFq6zaHwBp u1kn4q2v4xjhrkgydjxy1p1rd1glv0bq7lvddhx0bpbzwlwiizmefvviiyod+qrrtwqdatuoq Kg1uvHUb2qI58iujoBpUmSVbJqLHt1aTeX8yejCtuRAPE1f/YaJ0pzpIUbeVye8t7jZJWh9S6iQD OQprUJbKpp8QgxnPjztgpkootYJTHV81HMsQ== SHA256withRSA ACAeID2 - Qualified Root Certificate (kvalifikovaný systémový certifikát kořenové CA) Issuer L: Vinohradská 184/296, 10 00, Praha Issuer OU: Akreditovaný poskytovatel certifikačních služeb eidentity a.s. ACAeID2.1 - Qualified Issuing Certificate (kvalifikovaný systémový certifikát vydávající CA) Subject L: Vinohradská 184/296, 10 00, Praha Subject OU: Akreditovaný poskytovatel certifikačních služeb eidentity a.s. Sun Feb 01 19:05:44 CET 2015 Mon Feb 01 19:05:44 CET :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:B:DF:7B:91:2C:05:A5:91:FA:D6:E8:5B:60:02:EC:29:A7:A1:A9:09:E6:2:AA:0D:A1:ED:20:6D:5:F6:D:EE::6 E:22:DC:A:F0:2F:50:B4:19:74:2C:8F:0E:5:51:EE:FB:6F:F:5:E0:07:CD:0:EB:8A:D:24:70:C4:2:F:F1:E1:2D:0B:B:52:6C:0:14:89:8F:88:1A:EF:D0:F:EB:CA:18:E1:A:ED:B9:AB:C9:6D:0F:16:AB:BB:AC:E4:C9 :A:AD:AE:45:8D:62:B:48:E5:52:B2:7B:41:7:0:26:ED:A5:57:E6:61:AF:97:AB:9E:B7:19:CF:81:9D:D:B4:A1:DB:94:26:99:1B:FB:76:6A:47:09:21:8F:6:F6:78:18:19:B1:C6:F6:F4:14:E8:DB:69:1E:E7:00:9:B5:F5:5:8 6:D9:67:5:5F:DE:A5:E:B:9:C2:58:0D:C4:90:2B:B6:CD:A:68:D1:FC:19:E6:75:E6:EA:A:BF:8:01:9D:0F:55:78:29:A5:2A:7B:12:1E:6:BF:18:7D:8F:AC:F2:96:AE:1B:71:05:B1:65:27:F0:65:71:84:84:D4:FD:0E:8A:1 B:00:0D:14:F2:A1:E5::2F:21:18:50:1F:7:BC:A8:1:F0:54:9D:C8:B0:4C:9E:1D:17:66:27:02:0:01:00:01 6C:54:CE:76:96:5E:D:B0:29:EB:47:75:B6:EF:BE:BD:8F:22:2F:8 Policy OID: CPS pointer: CPS text: [Tento certifikát je vydán jako Kvalifikovaný systémový certifikát podle zákona 227/2000 Sb. / This is Qualified System Certificate according to Czech Act No. 227/2000 Coll.] Basic Constraints IsCA: true - Path length: 0 Authority Key Identifier 95:FE:2:50:2F:CA:6:70:D:C0:C1:25:12:21:72:C5:BA:E6:9E:5D CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 12

133 CRL Distribution Points QCStatements - crit. = false id_etsi_qcs_qccompliance keycertsign - crlsign Service Status CA:A0:25:8C:B1:98:42:17:CF:52:D6:64:DA:A7:C9:F6:87:92:F1:96:7:E6:C:59:F5:2:45:D2:1B: 6D:6A:2E Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T18:05:44Z Extension (critical): Qualifiers [QCNoSSCD] Qualifier type description [en] it is ensured by the trust service provider and controlled (supervision model) or audited (accreditation model) by the referenced Member State (respectively its Supervisory Body or Accreditation Body) that all Qualified Certificates issued under the service identified in "Service digital identity" and further identified by the filters information used to further identify under the "Sdi" identified trust service that precise set of Qualified Certificates for which this additional information is required with regards to the presence or absence of Secure Signature Creation Device (SSCD) support ARE NOT supported by an SSCD (i.e. that that the private key associated with the public key in the certificate is not stored in a Secure Signature Creation Device conformant with the applicable European legislation). Qualifier Criteria list assert=atleastone Policy Identifier nodes: Identifier Service : (65) ACAeID2 - Time Stamping Authority TSA1, TSU2 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (65) ACAeID2 - Time Stamping Authority TSA1, TSU2 (65) ACAeID2 - autorita časových razítek TSA1, TSU2 Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 1

134 MIIGFDCCBPygAwIBAgIEVY/7TDANBgkqhkiG9w0BAQsFADCB+zELMAkGA1UEBhMCQ1oxFzAVBgNV BAoMDmVJZGVudGl0eSBhLnMuMTwwOgYDVQQLDDNBaJlZGl0bZhbsO9IHBvc2t5dG92YXRlbCBj ZXJ0aWZpa2HEjW7DrWNoIHNsdcW+ZWIxLzAtBgNVBAcMJlZpbm9ocmFkc2vDoSAxODQvMjM5Niwg MTMwIDAwLCBQcmFoYSAzMWQwYgYDVQQDDFtBQ0FlSUQyIC0gUXVhbGlmaWVkIFJvbQgQ2VydGlm awnhdgugkgt2ywxpzmlrbzhbso9ihn5ctdqw1vdso9ignlcnrpzmlrw6f0igtvxzllbm92w6kg Q0EpMB4XDTE1MDMxNzE0MjYzOFoXDTIxMDMxNzE0MjYzOFowRDELMAkGA1UEBhMCQ1oxFzAVBgNV BAoMDmVJZGVudGl0eSBhLnMuMQ0wCwYDVQQLDARUU0ExMQ0wCwYDVQQDDARUU1UyMIIBIjANBgkq hkig9w0baqefaaocaq8amiibcgkcaqeas4jluu+nn0d+1p8ylaniybr2euin4bjq8kpd81mhmcjy freysx21oswj1vy4di2s0dxgde/bn5itaq/fhkjxf+dnwgaxliiahrbmhud6+ljvnrvajksewxp 7+pvU5SLdVMq6CkDZKMF6w62shkmbZPzzNvPAxycTAi9KTuZc7NIEZHkxGciWrHp8l0zad12DmM SnQCKerS5kbatnzkklg5W5uXMflKkzgmVkrEI+8v5qijuQkbWB7ez5CnKwResaFARmW8SX/a92R QvXpkcmBzFYr0eVm7rL1vPhcdz1HVKf5/uGBOuzSTBEn+X0bbQsbcjXMVL16stqV/2FwIDAQAB o4icvdccalawhqydvr0obbyefatvf+pdlvbovx7zwau+iqpvcwqdmiibhaydvr0gbiibezccaq8w ggelbgwqguum9ugpaqodagmwgfowmgyikwybbquhagewjmh0dha6ly9dcuywnhzwlklmn6ljv bqyl2nwlxjxc2mucgrmmihdbggrbgefbqccajcbtgybs1rlbnrvignlcnrpzmlrw6f0igplihz5 ZMOhbiBqYWtvIEt2YWxpZmlrbZhbsO9IHN5cTDqW1vdsO9IGNlcnRpZmlrw6F0IHBvZGxlIHrD owtvbmegmjilziwmdagu2iuic8gvghpcybpcybrdwfsawzpzwqgulzdgvtienlcnrpzmljyxrl IGFjY29yZGluZyB0byBDemVjaCBBYQgTm8uIDIyNy8yMDAwIENvbGwuMAkGA1UdEwQCMAAwHwYD VR0jBBgwFoAUlf4jUC/KYDTwMElEiFyxbrmnl0wgaAGA1UdHwSBmDCBlTAvoC2gK4YpaHR0cDov Lddy5hY2FlaWQuYovcm9vdDIvYJsL2FjdHVhbC5jcmwwMKAuoCyGKmh0dHA6Ly9wdWIxLmFj YWVpZC5jei9yb290Mi9jcmwvYWN0dWFsLmNybDAwoC6gLIYqaHR0cDovLB1YjIuYWNhZWlkLmN6 LJvbQyL2NybC9hYR1YWwuYJsMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQE AwIGwDAYBggrBgEFBQcBAwQMMAowCAYGBACORgEBMA0GCSqGSIbDQEBCwUAA4IBAQB9REaVhGap BeiMNzkqNg8N+xGvaSSrA5TjV09eyE2BS8jtpuXWy9EYwiWdno711jVXYec4AkqAfU86GFMCkie IMAikIPJ+gsn/zN/fvBPUc+7vUY6bGTEVQyqWPYkmJ0+HaA7p/yY4gtQsBtAZlw7UadWbvBhYPv akok1wh/0kydigral4t1l/ml9e/e6k2ykvotcxqewexfzyh1asy8uxndytv/itd0umiun+vuq9hq ywfj9g8g1bmq5di51iw5ekkwejbv7zdpanvutnu9lbkb/ck+pfz+7wvznh/6v4sth8uberuqs8o 1ypIATC9SWQ+PlyOgW/LFQkBUXVM SHA256withRSA ACAeID2 - Qualified Root Certificate (kvalifikovaný systémový certifikát kořenové CA) Issuer L: Vinohradská 184/296, 10 00, Praha Issuer OU: Akreditovaný poskytovatel certifikačních služeb eidentity a.s. TSU2 Subject OU: TSA1 eidentity a.s. Tue Mar 17 15:26:8 CET 2015 Wed Mar 17 15:26:8 CET :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:B:82:65:B9:4F:8D:9F:47:7E:D6:9F:18:94:09:E2:61:B4:76:12:E2:0D:E0:12:6A:F2:4:C:F:59:87:1:C8:D8:7D:17: 98:B1:7D:B5:A2:C5:A:D6:FC:B8:76:2D:92:D1:DC:46:0D:EF:C1:9F:98:AD:01:0F:C5:84:A8:F1:17:7F:9D:9D:68:00:5C:B2:22:6A:1A:DB:2:1B:9D:EB:E9:49:BE:7A:D5:68:99:12:7B:0C:4F:EF:EA:6F:5:94:8B:75:5:2A:E 8:29:0:64:A:05:EB:0E:B6:B2:19:26:6D:9:F:CC:DB:CF:0:1C:9C:4C:08:BD:29:B:99:7:B:48:11:91:E4:C4:67:22:5A:B1:E9:F2:5D::69:DD:F5:D8:9:8C:4A:74:02:29:EA:D2:E6:46:DA:B6:7C:E4:92:58:9:5B:9B:97 :1:F9:4A:9:8:26:56:4A:C4:2:EF:2F:E6:A8:B7:8E:E4:24:6D:60:7B:7B:E:42:9C:AC:11:7A:C6:85:01:19:96:F1:25:FF:6B:DD:91:DD:0B:D7:A6:47:26:07:1:58:AF:47:95:9B:BA:CB:D6:F:E1:71:DC:F5:1F:75:4A:7F:9F: EE:18:1:AE:CD:24:C1:12:7F:97:D1:B6:D0:B1:B7:2:5C:C5:4B:D7:AB:2D:A9:5F:F6:17:02:0:01:00:01 04:EF:7F:E:DD:2E:F6:CE:57:1E:D9:58:0B:BE:8A:AA:55:7:04:1D Policy OID: CPS pointer: CPS text: [Tento certifikát je vydán jako Kvalifikovaný systémový certifikát podle zákona 227/2000 Sb. / This is Qualified System Certificate according to Czech Act No. 227/2000 Coll.] Basic Constraints IsCA: false CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 14

135 Authority Key Identifier 95:FE:2:50:2F:CA:6:70:D:C0:C1:25:12:21:72:C5:BA:E6:9E:5D CRL Distribution Points Extended Key Usage id_kp_timestamping QCStatements - crit. = false id_etsi_qcs_qccompliance digitalsignature - nonrepudiation Service Status 2B:A2:D8:AE:62:5:25:29:EB:10:F7:F4:8:48:F9:4B:52:1C:65:4C:48:6C:4B:6F::52:9B:72:AC:E B:E6:90 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T14:26:8Z.6 - Service : (74) ACAeID2 - Time Stamping Authority TSA1, TSU Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (74) ACAeID2 - Time Stamping Authority TSA1, TSU (74) ACAeID2 - autorita časových razítek TSA1, TSU Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 15

136 MIIGFDCCBPygAwIBAgIEI+LSDANBgkqhkiG9w0BAQsFADCB+zELMAkGA1UEBhMCQ1oxFzAVBgNV BAoMDmVJZGVudGl0eSBhLnMuMTwwOgYDVQQLDDNBaJlZGl0bZhbsO9IHBvc2t5dG92YXRlbCBj ZXJ0aWZpa2HEjW7DrWNoIHNsdcW+ZWIxLzAtBgNVBAcMJlZpbm9ocmFkc2vDoSAxODQvMjM5Niwg MTMwIDAwLCBQcmFoYSAzMWQwYgYDVQQDDFtBQ0FlSUQyIC0gUXVhbGlmaWVkIFJvbQgQ2VydGlm awnhdgugkgt2ywxpzmlrbzhbso9ihn5ctdqw1vdso9ignlcnrpzmlrw6f0igtvxzllbm92w6kg Q0EpMB4XDTE1MDczMTEwMDUwMFoXDTIxMDczMTEwMDUwMFowRDELMAkGA1UEBhMCQ1oxFzAVBgNV BAoMDmVJZGVudGl0eSBhLnMuMQ0wCwYDVQQLDARUU0ExMQ0wCwYDVQQDDARUU1UzMIIBIjANBgkq hkig9w0baqefaaocaq8amiibcgkcaqea1wgnjthcq7u+a0pi2t5uzli9jz7+ym/krfrcqogyisdg FJaZh1sB0o6LEDHYtboCfFKvVGulle/QDQqAlkoRZploQIeF+XiriKQ61FIIO1gsLF6ODCFqQzo yyxuyzl0hsqc2/2vlkitpku+vabaaqcu7jrdqa46rjn46i9d7dyost9vo9kyukelaewfzeyq2bfb XHRHlBxL5P/7Nen/6az2KmZwUVHqgG4/Jj7b8moRCyjCDJUqZSEecOxtXHmkrMAqo4gtnt+gUU k+xnuyexnpg2dzcvvuwjlatigncadhau6svl5+w/8noxy+6pmugjm0xqf4awk2yjaxqmqidaqab o4icvdccalawhqydvr0obbyeffllwoscsdmwsmprbe66xeaftfztmiibhaydvr0gbiibezccaq8w ggelbgwqguum9ugpaqodagmwgfowmgyikwybbquhagewjmh0dha6ly9dcuywnhzwlklmn6ljv bqyl2nwlxjxc2mucgrmmihdbggrbgefbqccajcbtgybs1rlbnrvignlcnrpzmlrw6f0igplihz5 ZMOhbiBqYWtvIEt2YWxpZmlrbZhbsO9IHN5cTDqW1vdsO9IGNlcnRpZmlrw6F0IHBvZGxlIHrD owtvbmegmjilziwmdagu2iuic8gvghpcybpcybrdwfsawzpzwqgulzdgvtienlcnrpzmljyxrl IGFjY29yZGluZyB0byBDemVjaCBBYQgTm8uIDIyNy8yMDAwIENvbGwuMAkGA1UdEwQCMAAwHwYD VR0jBBgwFoAUlf4jUC/KYDTwMElEiFyxbrmnl0wgaAGA1UdHwSBmDCBlTAvoC2gK4YpaHR0cDov Lddy5hY2FlaWQuYovcm9vdDIvYJsL2FjdHVhbC5jcmwwMKAuoCyGKmh0dHA6Ly9wdWIxLmFj YWVpZC5jei9yb290Mi9jcmwvYWN0dWFsLmNybDAwoC6gLIYqaHR0cDovLB1YjIuYWNhZWlkLmN6 LJvbQyL2NybC9hYR1YWwuYJsMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQE AwIGwDAYBggrBgEFBQcBAwQMMAowCAYGBACORgEBMA0GCSqGSIbDQEBCwUAA4IBAQAaxpHVB6cA uezjdaewi5vx1rdlgm7hhel99fyimfgqyoaajn+hgw5bytychdduyygt+wasu1gfmbnfpbyo1wqu yzqos6lwqf40armjl6yhzbqxoyyg5tonnzuwkzxuk1musklv2gcpfmeizksanw8nhupzzzfaban L91AqclOGedWLvMnfSPVA/i6KTbWRMhQctxrOkjaT8tZjSfQw1GlMhYc2DTpZO9FoHfmqmZBT4RW sy+nhla7+sb5tgcwici9ohwgtljvae5ks+kzjzajtqme7ytaw4aajldvxu8btr0lxjqsd+zpgxq9 D75gp4O+Nbc4vHiymZqJstKOm7 SHA256withRSA ACAeID2 - Qualified Root Certificate (kvalifikovaný systémový certifikát kořenové CA) Issuer L: Vinohradská 184/296, 10 00, Praha Issuer OU: Akreditovaný poskytovatel certifikačních služeb eidentity a.s. TSU Subject OU: TSA1 eidentity a.s. Fri Jul 1 12:05:00 CEST 2015 Sat Jul 1 12:05:00 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:D7:01:A7:8E:D8:5C:4:B5:E:0:4A:48:DA:DE:6E:CE:58:BD:27:E:FE:62:6F:CA:AD:FA:DC:AA:81:B2:89:20:E0: 14:96:99:87:5B:01:D2:8E:8B:10:1:D8:B5:BA:7:09:F1:4A:BD:51:AE:96:57:BF:40:4:2A:02:59:28:45:9A:65:A1:02:1E:17:E5:E2:AE:22:90:EB:51:48:20:ED:60:B0:B1:7A:8:0:85:A9:0C:E8:CB:2C:6E:6:9:74:86:C4:1C: DB:FD:95:2C:A8:AD:C:AB:BE:BD:A6:DA:01:07:14:EC:94:5D:41:AE:A:AE:9:F8:EA:2F:4:ED:DC:8E:49:F:55:A:D2:98:52:41:0B:68:45:9F:CD:E6:2A:D8:11:5B:5C:74:47:94:1C:4B:E4:FF:FB:5:E9:FF:E9:AC:F6:2 A:66:70:51:51:EA:8:71:B8:FC:98:FB:6F:C9:A8:44:2C:A:08:2:54:A9:94:84:79:C:B1:B5:71:E6:92:B:00:DE:AA:8:82:D9:ED:FA:05:14:9:EC:67:51:81:1:9C:F8:6:0F:0:AF:BD:45:A:2C:0B:48:82:70:9A:0C:70:14: EA:CB:E5:E7:E5:BF:F2:7:97:6:EE:8F:99:48:2::45:EA:17:7E:1A:C2:4D:B2:8C:0C:50:1:02:0:01:00:01 59:4B:5A:84:82:48::16:B2:6A:6B:04:4E:BA:C4:46:9F:4C:56:6D Policy OID: CPS pointer: CPS text: [Tento certifikát je vydán jako Kvalifikovaný systémový certifikát podle zákona 227/2000 Sb. / This is Qualified System Certificate according to Czech Act No. 227/2000 Coll.] Basic Constraints IsCA: false Authority Key Identifier 95:FE:2:50:2F:CA:6:70:D:C0:C1:25:12:21:72:C5:BA:E6:9E:5D CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 16

137 CRL Distribution Points Extended Key Usage id_kp_timestamping QCStatements - crit. = false id_etsi_qcs_qccompliance digitalsignature - nonrepudiation Service Status 4D:76:86:2B:0C:CD:C7:E:92:88:E9:04:66:0B:4A:59:65:2F:21:FF:97:A8:4D:F0:14:7D:54:9:1D:7 1:C0:E4 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T10:05:00Z.7 - Service : (75) ACAeID2 - Time Stamping Authority TSA1, TSU4 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (75) ACAeID2 - Time Stamping Authority TSA1, TSU4 (75) ACAeID2 - autorita časových razítek TSA1, TSU4 Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 17

138 MIIGFDCCBPygAwIBAgIELh2sKDANBgkqhkiG9w0BAQsFADCB+zELMAkGA1UEBhMCQ1oxFzAVBgNV BAoMDmVJZGVudGl0eSBhLnMuMTwwOgYDVQQLDDNBaJlZGl0bZhbsO9IHBvc2t5dG92YXRlbCBj ZXJ0aWZpa2HEjW7DrWNoIHNsdcW+ZWIxLzAtBgNVBAcMJlZpbm9ocmFkc2vDoSAxODQvMjM5Niwg MTMwIDAwLCBQcmFoYSAzMWQwYgYDVQQDDFtBQ0FlSUQyIC0gUXVhbGlmaWVkIFJvbQgQ2VydGlm awnhdgugkgt2ywxpzmlrbzhbso9ihn5ctdqw1vdso9ignlcnrpzmlrw6f0igtvxzllbm92w6kg Q0EpMB4XDTE1MDczMTEwMDUwOVoXDTIxMDczMTEwMDUwOVowRDELMAkGA1UEBhMCQ1oxFzAVBgNV BAoMDmVJZGVudGl0eSBhLnMuMQ0wCwYDVQQLDARUU0ExMQ0wCwYDVQQDDARUU1U0MIIBIjANBgkq hkig9w0baqefaaocaq8amiibcgkcaqeanxj9uznrlq8dgnh+sm84szrluntojyy55d6ths8eatqf /MsqEs0gVGGbkALW8JVsvJfYf06xpKa6RJL9e85jKdQoHp0TTTltkWTew/9cman7EHDj7yeUI8g 6mfw+hB7y8bQ8/Tj41TQt4Ursm6eOeaz7lXeumfJZoHto8PK8nJJTVOZOl8iUBF9mm4wYQgayO1f Tq61UTcprYEvXBGLM77tziPLK87k+X5FraYdaRzK9nYm2CknlDIF4LC6eFGMUtvgaM0lMbab8c k4w41tm8wthnkimy5sx2kemanoutbznzofxnulbjlsuat4fsdx4gtlayycwbikt/mcvgbwidaqab o4icvdccalawhqydvr0obbyefmjwlshgdruqrw8vaqlz9c8qxkdamiibhaydvr0gbiibezccaq8w ggelbgwqguum9ugpaqodagmwgfowmgyikwybbquhagewjmh0dha6ly9dcuywnhzwlklmn6ljv bqyl2nwlxjxc2mucgrmmihdbggrbgefbqccajcbtgybs1rlbnrvignlcnrpzmlrw6f0igplihz5 ZMOhbiBqYWtvIEt2YWxpZmlrbZhbsO9IHN5cTDqW1vdsO9IGNlcnRpZmlrw6F0IHBvZGxlIHrD owtvbmegmjilziwmdagu2iuic8gvghpcybpcybrdwfsawzpzwqgulzdgvtienlcnrpzmljyxrl IGFjY29yZGluZyB0byBDemVjaCBBYQgTm8uIDIyNy8yMDAwIENvbGwuMAkGA1UdEwQCMAAwHwYD VR0jBBgwFoAUlf4jUC/KYDTwMElEiFyxbrmnl0wgaAGA1UdHwSBmDCBlTAvoC2gK4YpaHR0cDov Lddy5hY2FlaWQuYovcm9vdDIvYJsL2FjdHVhbC5jcmwwMKAuoCyGKmh0dHA6Ly9wdWIxLmFj YWVpZC5jei9yb290Mi9jcmwvYWN0dWFsLmNybDAwoC6gLIYqaHR0cDovLB1YjIuYWNhZWlkLmN6 LJvbQyL2NybC9hYR1YWwuYJsMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQE AwIGwDAYBggrBgEFBQcBAwQMMAowCAYGBACORgEBMA0GCSqGSIbDQEBCwUAA4IBAQDTcy1JWGIu eeyj4xkubd8utb1w6gdvdewvlrxgrjlmfkbdvnsy1aw/iyd9mesgi+cjzck4qgiso0xepcti/nxv LILs0CQY84AIvBkblD9iV8+CQ8Ct4s9y8V4mhYojTy1FC2P9Sl5rWl4BCFlvUaUKIzzQRjRTuRD hike/7ufh8/kxuxsqjre12fwpk5265gpaa8fxgkrbz2dkqpoakdqrycwultqx4eti2wa1+hgbdt5 9lKACe2jtIae4S0ohdduHaI+WsTSNbeAcAX5Zjng/6rEoE5AIoIZqfDWpZCs7jH4i9TOEs/EdYc otceqouqvfdpl4sw6mime+bkenni SHA256withRSA ACAeID2 - Qualified Root Certificate (kvalifikovaný systémový certifikát kořenové CA) Issuer L: Vinohradská 184/296, 10 00, Praha Issuer OU: Akreditovaný poskytovatel certifikačních služeb eidentity a.s. TSU4 Subject OU: TSA1 eidentity a.s. Fri Jul 1 12:05:09 CEST 2015 Sat Jul 1 12:05:09 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:9F:12:7D:51:9:6B:2E:AF:0:82:78:7E:4A:6F:8:49:9A:CB:BA:7B:68:8F:2C:B9:E5:DE:9:1D:2F:1E:6A:D4:1F:FC: CB:2A:12:CD:20:54:61:9B:90:02:D6:DF:C2:55:B2:F2:5F:61:FD:A:C6:92:9A:E9:12:4B:F5:EF:9:8C:A7:50:A0:7A:74:4D:4:E5:B6:45:9:7B:0F:FD:72:66:A7:EC:41:C:8F:BC:9E:50:8F:20:EA:67:F0:FA:10:7B:CB:C6:D0: F:F4:E:E:54:D0:B7:85:2B:B2:6E:9E:9:E6:B:EE:55:DE:BA:67:C9:66:81:ED:A:C:CA:F2:72:49:4D:5:99:A:5F:22:50:11:7D:9A:6E:0:61:08:1A:C8:ED:5F:4E:AE:B5:51:7:29:AD:81:2F:5C:11:8B::BE:ED:CE:2D :CF:2C:AF:B:9:E5:F9:16:B6:98:75:A4:7:2B:D9:D8:9B:60:A4:9E:50:C8:17:82:C2:E9:E1:46:1:4B:6F:81:A:4:94:C6:DA:6F:CD:DC:9:8C:8:D5::C:C1:8:67:92:2:2:E6:C5:F6:29:E:00:9C:EB:AD:6F::59:9:F 5:CD:BA:50:49:95:25:00:B7:87:EC:75:7E:06:4E:56:98:61:CC:01:22:4B:7F:1:C5:60:07:02:0:01:00:01 C8:D6:95:28:46:0D:15:2A:45:6F:2F:69:09:7:F5:CF:10:C6:47:5A Policy OID: CPS pointer: CPS text: [Tento certifikát je vydán jako Kvalifikovaný systémový certifikát podle zákona 227/2000 Sb. / This is Qualified System Certificate according to Czech Act No. 227/2000 Coll.] Basic Constraints IsCA: false Authority Key Identifier 95:FE:2:50:2F:CA:6:70:D:C0:C1:25:12:21:72:C5:BA:E6:9E:5D CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 18

139 CRL Distribution Points Extended Key Usage id_kp_timestamping QCStatements - crit. = false id_etsi_qcs_qccompliance digitalsignature - nonrepudiation Service Status FF:F:12:9D:D:B9:12:8B:F:7F:76:AC:18:92:1E:51:5A:84:49:7D:CB:45:78:11:9F:22:5D:F4:E0:0 0:1:FD Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T10:05:09Z.8 - Service : (76) ACAeID2 - Time Stamping Authority TSA1, TSU5 Service Type Identifier Service type description [en] A time-stamping generation service creating and signing qualified time-stamps tokens. Service Name (76) ACAeID2 - Time Stamping Authority TSA1, TSU5 (76) ACAeID2 - autorita časových razítek TSA1, TSU5 Service digital identities Certificate fields details CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 19

140 MIIGFDCCBPygAwIBAgIEK5QhozANBgkqhkiG9w0BAQsFADCB+zELMAkGA1UEBhMCQ1oxFzAVBgNV BAoMDmVJZGVudGl0eSBhLnMuMTwwOgYDVQQLDDNBaJlZGl0bZhbsO9IHBvc2t5dG92YXRlbCBj ZXJ0aWZpa2HEjW7DrWNoIHNsdcW+ZWIxLzAtBgNVBAcMJlZpbm9ocmFkc2vDoSAxODQvMjM5Niwg MTMwIDAwLCBQcmFoYSAzMWQwYgYDVQQDDFtBQ0FlSUQyIC0gUXVhbGlmaWVkIFJvbQgQ2VydGlm awnhdgugkgt2ywxpzmlrbzhbso9ihn5ctdqw1vdso9ignlcnrpzmlrw6f0igtvxzllbm92w6kg Q0EpMB4XDTE1MDczMTEwMDUxNFoXDTIxMDczMTEwMDUxNFowRDELMAkGA1UEBhMCQ1oxFzAVBgNV BAoMDmVJZGVudGl0eSBhLnMuMQ0wCwYDVQQLDARUU0ExMQ0wCwYDVQQDDARUU1U1MIIBIjANBgkq hkig9w0baqefaaocaq8amiibcgkcaqeaqkhpzkjjw0vqqkmd8nmpnxvf5aepzaaa7xwkezeqhd PoNAur2V9FDQ1kLX4IMg1H5TH2Juo649m2vFiQNeJfx46okKzCushP1bmX4KebvmTJ25Hywp jszczzlvj5ggbiugnhd71k1/0gtox7xltfzl7zm/qjvysuaiqcfvq66pxqdxw0tp0seyhwk77l vnquzjyzjtpcrk/1ueku6chsjdhztu5ubggxajxnwn/mwjouqmixoevnqywfz5amkrzzvgtwy j7pc+4qgzhlsocj5n7t02icrbpardd8ngqfg1m4z/ois1alii54trlpmrtxmvlw6jcb87widaqab o4icvdccalawhqydvr0obbyefiex/pi5kffvkevzfh46ces8tzmiibhaydvr0gbiibezccaq8w ggelbgwqguum9ugpaqodagmwgfowmgyikwybbquhagewjmh0dha6ly9dcuywnhzwlklmn6ljv bqyl2nwlxjxc2mucgrmmihdbggrbgefbqccajcbtgybs1rlbnrvignlcnrpzmlrw6f0igplihz5 ZMOhbiBqYWtvIEt2YWxpZmlrbZhbsO9IHN5cTDqW1vdsO9IGNlcnRpZmlrw6F0IHBvZGxlIHrD owtvbmegmjilziwmdagu2iuic8gvghpcybpcybrdwfsawzpzwqgulzdgvtienlcnrpzmljyxrl IGFjY29yZGluZyB0byBDemVjaCBBYQgTm8uIDIyNy8yMDAwIENvbGwuMAkGA1UdEwQCMAAwHwYD VR0jBBgwFoAUlf4jUC/KYDTwMElEiFyxbrmnl0wgaAGA1UdHwSBmDCBlTAvoC2gK4YpaHR0cDov Lddy5hY2FlaWQuYovcm9vdDIvYJsL2FjdHVhbC5jcmwwMKAuoCyGKmh0dHA6Ly9wdWIxLmFj YWVpZC5jei9yb290Mi9jcmwvYWN0dWFsLmNybDAwoC6gLIYqaHR0cDovLB1YjIuYWNhZWlkLmN6 LJvbQyL2NybC9hYR1YWwuYJsMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQE AwIGwDAYBggrBgEFBQcBAwQMMAowCAYGBACORgEBMA0GCSqGSIbDQEBCwUAA4IBAQDOch5WGmQ/ Bb4gvhvXIg2hMRG6YrmcLVZX/yTzWGOmM0hztYQtlEVnrTVuzJaqZjpRl/iLqaIg5ut4KOAPKWK 7YHfskA8ZVMexvzvEOFaNMU+iF0lGkeMZ0L0VfFWEJKGac7IiDJQ0NECQrhF4qlibebz9TF7LGTe zzvhaws0wgf64hr8dduumyvszxy/6i/hkyqhl9yvg9nkg80szhg10dpwldd/s5/n/k0iikkihsuq KWXLAuozvuPGawjSqN+A6+hrpqAxWqW1v1u+cr5S5l1ACsUVq7DuV7hrLXk+LlPzwfig+DLiGTa 9gNh4N+eV4WhBmZwGqe4o/XhPT/6 SHA256withRSA ACAeID2 - Qualified Root Certificate (kvalifikovaný systémový certifikát kořenové CA) Issuer L: Vinohradská 184/296, 10 00, Praha Issuer OU: Akreditovaný poskytovatel certifikačních služeb eidentity a.s. TSU5 Subject OU: TSA1 eidentity a.s. Fri Jul 1 12:05:14 CEST 2015 Sat Jul 1 12:05:14 CEST :82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:AA:48:69:CC:A8:C9:5B:4D:EF:A9:02:A6:DD:DF:27:0:F9:D7:54:5E:40:7A:9C:DA:00:0E:F1:58:A7:B:7A:A1:DD: DC:FA:0D:02:EA:F6:57:D1:4:4:59:0B:5F:82:0C:8:51:F9:4C:7D:89:DE:EA:A:DF:8F:66:DA:F1:62:40:D7:89:7F:1E:A:A2:42:B:0A:EB:21:F:56:E6:5F:82:9E:6E:F9:9:27:6E:47:CB:7C:29:8E:CC:DC:67:2:D5:8F:98: 20:04:85:06:9E:17:7B:D6:4D:7F:D0:6B:68:DD:7E:D7:2D:1:7:2F:7E:D9:9B:FA:A:55:84:AE:02:24:1C:15:54:A:E8:F5:D0:77:1C:4:B4:FD:12:1:21:D6:2B:BE:CB:BC:DA:94:66:C:99:8D:A:5C:44:AF:F5:DD:41:0A:B B:A0:87:B2:7:47:DD:94:EE:E5:46:E0:81:76:A:C6:75:8D:FE:6C:2:A1:44:26:DC:8C:68:12:F:50:C9:67:D9:E5:A:24:AF:C:D5:19:C:18:8F:B:C2:FB:8A:A0:64:79:6C:9:C2:79:9F:B4:F4:D8:87:2B:06:90:2B:74:F:0D: 81:01:46:D4:CE:19:FC:E2:2C:D5:A9:62:2:9E:1:AE:5:E6:45:5:E6:BE:55:BA:8D:C6:FC:EF:02:0:01:00:01 81:1:FE:98:B9:28:51:6F:29:EB:D9:17:78:77:E:A0:84:4B:CB:7 Policy OID: CPS pointer: CPS text: [Tento certifikát je vydán jako Kvalifikovaný systémový certifikát podle zákona 227/2000 Sb. / This is Qualified System Certificate according to Czech Act No. 227/2000 Coll.] Basic Constraints IsCA: false Authority Key Identifier 95:FE:2:50:2F:CA:6:70:D:C0:C1:25:12:21:72:C5:BA:E6:9E:5D CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 140

141 CRL Distribution Points Extended Key Usage id_kp_timestamping QCStatements - crit. = false id_etsi_qcs_qccompliance digitalsignature - nonrepudiation Service Status D:C7:A6:E1:F4:2E:F1:F:CD:46:12:D7:82:99:01:B1:6A:92:AE:FC:21:A9:9E:60:14:F0:49:A4:AE :A7:F8:B8 Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/9/EC. Status Starting Time T10:05:14Z CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 141

142 4 - Signature node - Id: xmldsig-8224c1e0-eddd-46c6-8c80-db2d8dd05640 Signer issuer name Signing Time I.CA - Accredited Provider of Certification Services T09:04:16.968Z TSL Scheme Operator certificate fields details MIIFqDCCBJCgAwIBAgIEAKhcEzANBgkqhkiG9w0BAQsFADCBtzELMAkGA1UEBhMCQ1oxOjA4BgNV BAMMMUkuQ0EgLSBRdWFsaWZpZWQgQ2VydGlmaWNhdGlvbiBBdXRobJpdHksIDA5LzIwMDkxLTAr BgNVBAoMJFBydm7DrSBjZXJ0aWZpa2HEjW7DrSBhdXRvcml0YSwgYS5zLjE9MDsGA1UECww0SS5D QSAtIEFjYJlZGl0ZWQgUHJvdmlkZXIgb2YgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlczAeFw0xNTA2 MDMxMTI4NTZaFw0xNjA2MDIxMTI4NTZaMH4xCzAJBgNVBAYTAkNaMR0wGwYDVQQDDBRJbmcuIFJh ZG9tw61yIMWgaW1lazEMDUGA1UECgwuTWluaXN0cnkgb2YgdGhlIEludGVyaW9yIG9mIHRoZSBD emvjacbszxb1ymxpyzexmbuga1uebrmosunbic0gmtazndq4mjewggeima0gcsqgsibdqebaqua A4IBDwAwggEKAoIBAQCawspfUgMcHE6NKJmbpUU0oe1+qJPJnw7MMd/c+aSummSNw8DnoYrsjQm C7Iii1U4JIytzlYwJ/uOkvT7XGz7dkkl995RC8gVMnarGOIrkDbRo5PbzKUfKa92faFvbnn2uv HPZDIreEdHvX5hR4BOdaeH29gSmSzBhDvZ4xnH6uFyh/SX5cIv/5QJRHz99ZlfA4K9cZG2aAMJ zh968ctqqxl7jjammire2gzflho9j5dykfmchgty1qp/pyuv47m2v8ynzi1imi9gsvxuermjm +0BOUHWd1pyGCcqSSMN86jqNESJFW1fzR7fstd08UG5MPRj0/m8NpfRAgMBAAGjggHyMIIB7jAR BgNVHSUECjAIBgYEAJEAwAwgd8GA1UdIASB1zCB1DCB0QYNKwYBBAGBuEgBAR4DATCBvzCBvAYI KwYBBQUHAgIwga8agaxUZW50byBrdmFsaWZpa292YW55IGNlcnRpZmlrYXQgamUgdnlkYW4gcG9k bgugemfrb25hienlc2tlihjlchvibglresbjliaymjcvmjawmcbtyi4gdibwbgf0bmvtihpuzw5p L1RoaXMgaXMgcXVhbGlmaWVkIGNlcnRpZmljYXRlIGFjY29yZGluZyB0byBDemVjaCBBYQgTm8u IDIyNy8yMDAwIENvbGwuMIGBBgNVHR8EejB4MCagJKAihiBodHRwOi8vcWNybGRwMS5pY2EuYov cwljyta5lmnybdamocsgioygahr0cdovlfjcmxkcdiuawnhlmn6lfpy2ewos5jcmwwjqakockg IGh0dHA6Ly9xYJsZHAzLmljYS5jei9xaWNhMDkuYJsMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQD AgZAMBgGCCsGAQUFBwEDBAwwCjAIBgYEAI5GAQEwHwYDVR0jBBgwFoAUecvQI+k6ZCRdE/TUeLg IPhKPswHQYDVR0OBBYEFC6CFzYHEofr962LdU1w+xy0PFJXMA0GCSqGSIbDQEBCwUAA4IBAQCB 2lBGEdViXN7Qr5voDGlZGE4kzeK+eXLlyDIFEPrRV/MeIN5+Rtk7MCWZmHUbbzFoJzsqvBG5yB Y5uNlhJZZ4Ee7xrHykrxpCx4CrD+hkqLNeaI+IocTxMG/4y0adaEx7ooVZH7+elE+0WVIBzPPuWH 298zVrdS6LKNAjodqFWK8R84lLZPjh+lFHciznwgaKOz+JKvBuBQYznP1DAvQ21Cspe6lB9XpVQA 9O0mwoCiXD6buW1COz2MGwMLwn6k/eJKfEqWzOa8cdYm2GpdxAAnU9XE1aLnbjHBBlAf6uZ+/YOV 8JgiDEOCCVmnt9aPZZmX8HIqh8FxC5ykQ46T SHA256withRSA Issuer OU: I.CA - Accredited Provider of Certification Services První certifikační autorita, a.s. I.CA - Qualified Certification Authority, 09/2009 Subject SERIAL NUMBER: ICA Ministry of the Interior of the Czech Republic Ing. Radomír Šimek Wed Jun 0 1:28:56 CEST 2015 Thu Jun 02 1:28:56 CEST 2016 Extended Key Usage 0:82:01:22:0:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:0:82:01:0F:00:0:82:01:0A:02:82:01:01:00:9A:C2:CA:5F:52:0:1C:1C:4E:8D:28:99:9B:A5:45:4:A:77:B5:FA:A2:4F:26:7C:B:0:C7:7F:7:E6:92:BA:69:92: 7:0F:0:9E:86:2B:B2:4:26:0B:B2:22:8B:55:8:24:8C:AD:CE:56:0:27:FB:8E:92:F4:FB:5C:6D:F:ED:D9:24:97:DD:FD:E5:10:BC:81:5:27:6A:B1:8E:22:B9:0:6D:1A:9:D:BC:CA:51:F2:9A:F7:67:DA:16:F6:E7:9F:6B:A F:1C:F6:4:22:B7:84:74:7B:D7:DF:98:51:E0:1:9D:69:E1:F6:F6:04:A6:4B:0:61:0E:F6:78:C6:71:FA:B8:5C:A1:FD:25:F9:70:8B:FF:E5:02:51:1F:D:FD:F5:99:5F:0:82:BD:71:91:B6:68:0:09:CE:1F:7A:F1:CB:50:AB:12:F B:8E:0:26:0:8D:D1:7B:61:99:14:B1:CE:F4:9E:5D:62:41:66:70:78:2D:CB:54:29:FC:F6:14:57:8E:F7:9B:65:7C:6:79:D9:8B:58:A6:8B:D8:12:57:1B:84:44:C8:CC:FB:40:4E:50:75:9D:D6:9C:86:09:CA:92:48:C:7C:EA:A: 8D:11:22:45:5B:7D:5F:CD:1E:DF:B2:D7:74:F1:41:B9:0:F4:6:D:F9:BC:6:97:D1:02:0:01:00:01 id-tsl-kp-tslsigning CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 142

143 Policy OID: CPS text: [Tento kvalifikovany certifikat je vydan podle zakona Ceske republiky c. 227/2000 Sb. v platnem zneni/this is qualified certificate according to Czech Act No. 227/2000 Coll.] CRL Distribution Points Basic Constraints IsCA: false QCStatements - crit. = false id_etsi_qcs_qccompliance Authority Key Identifier 79:CB:D0:2:E9:A:67:70:91:74:4F:D:51:E2:E0:20:FD:E1:28:FB 2E:82:17:6:07:12:87:EB:F7:AD:8B:75:4D:70:FB:1C:B4:C:52:57 nonrepudiation D:C:A6:01:7D:7A:0:14:90:4D:56:22:B1:9F:58:27:1:D7:B2:C7:60:2B:04:CC:B4:8F:8E:8C:4B: C4:EC:89 CESKÁ REPUBLIKA (ECH REPUBLIC) - Trusted List ID: TSL_ Page 14