Luxembourg (Luxembourg): Trusted List

Transcription

1 Luxembourg (Luxembourg): Trusted List Institut Luxembourgeois de la Normalisation, de l'accréditation de la Sécurité et qualité des produits et services Scheme Information TSL Version 4 TSL Sequence Number 24 TSL Type A TL implementation of a supervision/accreditation status list of trust services from trust service providers which are supervised/accredited by the referenced Member State owning the TL implementation for compliance with the relevant provisions laid down in the applicable European legislation, through a process of direct oversight (whether voluntary or regulatory). Scheme Operator en ILNAS Scheme Operator fr ILNAS Scheme Operator fr Institut Luxembourgeois de la Normalisation, de l'accréditation, de la Sécurité et qualité des produits et services Scheme Operator de ILNAS Scheme Operator Address Street Address en 1, Avenue du Swing Locality en Belvaux State Or Province en Postal Code en L-4367 Country en LU Street Address fr 1, Avenue du Swing Locality fr Belvaux State Or Province fr Postal Code fr L-4367 Country fr LU Street Address de 1, Avenue du Swing Locality de Belvaux State Or Province de Postal Code de L-4367 Country de LU Electronic Address en mailto:confiance-numerique@ilnas.etat.lu Electronic Address fr mailto:confiance-numerique@ilnas.etat.lu Electronic Address de mailto:confiance-numerique@ilnas.etat.lu Electronic Address fr Electronic Address en Scheme en Scheme Information URI en LU:Supervision/Accreditation Status List of certification services from Certification Service Providers, which are supervised/accredited by the referenced Scheme Operator s Member State for compliance with the relevant provisions laid down in Directive 1999/93/EC of the European Parliament and of the Council of 13 December 1999 on a Community framework for electronic signatures. Page 1 / 36

2 Status Determination Approach Scheme Type Community Rule en Scheme Type Community Rule en Scheme Territory LU Policy Or Legal Notice TSL Legal Notice en The applicable legal framework for the present TSL implementation of the Trusted List of supervised/accredited Certification Service Providers for Luxembourg is Directive 1999/93/EC of the European Parliament and of the Council of 13 December 1999 on a Community framework for electronic signatures and its implementation in Luxembourgish laws. The accreditation scheme for all CSPs issuing qualified, nonqualified certificates, or other services related to electronic signature is based upon the Law of 14 August 2000, and Grand-Ducal Regulations of 1st June 2001 and 21 December Historical Information Period Page 2 / 36

3 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISESFCgSJf+NfOVIYHRWWewAm0MA0GCSqGSIb3DQEBCwUAMGYxCz AJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNHbG9i YWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzIwHhcNMTUw MzAzMDg1MTAyWhcNMTgwNDIwMTAwNTA1WjBnMQswCQYDVQQGEwJCRTEQMA4GA1UECB MHQmVsZ2l1bTERMA8GA1UEBxMIQnJ1c3NlbHMxHDAaBgNVBAoTE0V1cm9wZWFuIENvbW1p c3npb24xftatbgnvbamtdgvjlmv1cm9wys5ldtccasiwdqyjkozihvcnaqebbqadggepadcc AQoCggEBAMFBF1FjO2VA4nIvT3MtXToyfWMNFYRvJc2SIJF3pcZNZcUK9wwNL3j/lOB5+eABCT DShJf8fQgmyEcAU7gXhFw9DFgfnXsmmA1a79zzbs5KWzkmAwEE4lfSYcbJoCuUavD79oaR4v3yv7 GZMVab8nXuqWvecwzQWT6sl+rx0ogh1bbeKO9wQ5lbEgRw1MLlyFH2kUieMhjCwO2nQJ9UMTa Lu7px4LpZ7tlaVetY7UpMPiGAD34kct1YIoJWJllYbbz7jmALmRAdLvvu5y6Ice4H4j0kDJ/l3zLiVeCiO Rqrx8ngiiS1LfNSckvz2sbzjVJvXbqxYAEytZQvwxEXdPMCAwEAAaOCAdAwggHMMA4GA1UdDwE B/wQEAwIFoDBJBgNVHSAEQjBAMD4GBmeBDAECAjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3 d3dy5nbg9iywxzawdulmnvbs9yzxbvc2l0b3j5lzaxbgnvhreeedaoggxlyy5ldxjvcgeuzxuwc QYDVR0TBAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0fBEIwQDA +odygooy4ahr0cdovl2nybc5nbg9iywxzawdulmnvbs9ncy9nc29yz2fuaxphdglvbnzhbhnoyt JnMi5jcmwwgaAGCCsGAQUFBwEBBIGTMIGQME0GCCsGAQUFBzAChkFodHRwOi8vc2VjdXJlLm dsb2jhbhnpz24uy29tl2nhy2vydc9nc29yz2fuaxphdglvbnzhbhnoytjnmnixlmnydda/bggrbg EFBQcwAYYzaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2dzb3JnYW5pemF0aW9udmFsc2hhM mcymb0ga1uddgqwbbq9lw0poeott5cktf8vxu3w6zcuhzafbgnvhsmegdawgbsw3mhxvr wwkvmcwmx9o4maqoyafdanbgkqhkig9w0baqsfaaocaqearsonov8kbe8+5vwewgbhhilh ANLIiRmLVJ1siaRXVXL6abmMo8CjW2+VtzAQdnDkzUY6CNATs0y0qkbEcS7fvtvp8QqAiv71+jij6i DT9r9IJ1suNDeQWz6Mng98ecMVsDUzLYieeZXH049tA3hrAnscVRTu7kpT06CGbcJnoNdG7yvxx2B s9civbexrqkmppvhwup23hw/iphhmifprmxpq3fa5fkrqnwjw1brblgloqc1mkj7juvx108khlw a5cgiohctnoh9dfyuqpwqecbrobwdghl4o0ra+bu/z4j85ypob/+f7roqxrfcpv43zpdg65pnopp pjfde4td2bhg== -----END CERTIFICATE----- Version 3 Serial Number SigAlg SHA256withRSA Issuer DN CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE Pointer To Other TSL X509 Certificate Valid from Valid to Subject DN Public Key Algo T08:51:02Z T10:05:05Z CN=ec.europa.eu, O=European Commission, L=Brussels, ST=Belgium, C=BE RSA Public Key d a f7 0d f a c b e2 72 2f 4f 73 2d 5d 3a 32 7d 63 0d f 25 cd a5 c6 4d 65 c5 0a f7 0c 0d 2f 78 ff 94 e0 79 f9 e d fc 7d c b c 3d 0c 58 1f 9d 7b d 5a ef dc f3 6e ce 4a 5b e2 57 d2 61 c6 c9 a0 2b 94 6a f0 fb f e2 fd f2 bf b b f2 75 ee a9 6b de 73 0c d0 59 3e ac 97 ea f1 d d5 b6 de 28 ef b d4 c2 e5 c8 51 f e c2 c0 ed a7 40 9f b bb ba 71 e0 ba 59 ee d9 5a 55 eb 58 ed 4a 4c 3e f 7e dd d bc fb 8e 60 0b d 2e fb ee e7 2e ee 07 e2 3d 24 0c 9f e5 df 32 e2 55 e0 a2 39 1a ab c7 c9 e0 8a 24 b5 2d f b f3 da c6 f3 8d 52 6f 5d ba b b5 94 2f c f Authority Key ObjectId: Criticality=false AuthorityKey [ Key [ 0000: 96 de 61 f1 bd 1c c c0 cc 7d 3b a...S : 40 e6 1a 7c... Page 3 / 36

4 Certificate Policies CRL Distribution Points ObjectId: Criticality=false CertificatePolicies [ [ PolicyInformation: [ CertPolicyId: PolicyQualifiers: [PolicyQualifierInfo: [ CPSuri: [ object identifier: uri: ObjectId: Criticality=false CRLDistributionPoints [ 1 CRL Distribution Points: Distribution Point: [ Distribution Point : [URI: rl Reason Flags: null Issuer: null Subject Key Key Usage ObjectId: Criticality=false SubjectKey [ Key [ 0000: 3d 97 0d a 2d 4f 97 0a 4c 5f 2f c6 ed d6...8j.o..l : e ObjectId: Criticality=true KeyUsage [ DigitalSignature Key_Encipherment Basic Constraints ObjectId: Criticality=false BasicConstraints:[ CA:false PathLen: undefined SHA256 Thumbprint e2 b6 c3 00 9a fa 80 bc ab 2e b5 fe c5 a2 c4 ae ac a2 05 ba 4e d6 2f 2f b7 6c c1 1e 08 da Thumbprint SHA1 b4 c0 ea a5 62 7e 8a 44 8b c c d3 8d bd 63 ec TSL Location TSL Type A TL implementation of a compiled list of pointers towards Member States supervision/accreditation status lists of trust services from trust service providers which are supervised/accredited by the referenced Member State owning the pointed TL implementation for compliance with the relevant provisions laid down in the applicable European legislation, through a process of direct oversight (whether voluntary or regulatory). Scheme Operator European Commission Page 4 / 36

5 Scheme Type Community Rules A URI pointing towards a descriptive text where users can obtain information about the scheme of schemes type (i.e. a compiled list listing pointers to all trusted lists published as part of the scheme Scheme Territory EU of schemes and maintained in the form of a TL) and the relevant driving rules and policy. Mime Type application/pdf Page 5 / 36

6 -----BEGIN CERTIFICATE----- MIIHPDCCBSSgAwIBAgIBcjANBgkqhkiG9w0BAQsFADAxMQswCQYDVQQGEwJFUzERMA8GA1U ECgwIRk5NVC1SQ00xDzANBgNVBAMMBklTQSBDQTAeFw0xMTExMTYxNTExMDdaFw0xNTEx MTYxNTExMDdaME0xCzAJBgNVBAYTAkJFMRwwGgYDVQQKDBNFVVJPUEVBTiBDT01NSVNTS U9OMSAwHgYDVQQDDBcoU0lHTikgQU5ORUxJIEFORFJFU1NPTjCCASIwDQYJKoZIhvcNAQEBB QADggEPADCCAQoCggEBAMw881fbxBn5Eq64Hf6pqEqn0Intg49k5D+E2JBMcyeOMYE4WwuzVq s7fukmx5mhifw7llvx42s7gidnka6ascf7irissytgotd6dgt8oeoqkg5i24wxt3we63vw1w/peo0 WoRjkPDBqgljnqcLn+WJLr3Yl9fpkxyT+H3pl0jnGkGi7UUKEDuoCglFy9Tb1TE+eVNiGWmfskRy6q 9Pioujp2FqrwNm95VAkLFGoNF4iZQda79bgjvAYnA5p4QXgr/5sWZjgsa3Ea9PlRwEvO7C8ndnRE/P TUNwaSmOZsmPH/ksCCnfTDqqehHVnry3K6QIUKhRsoT1m60qv4UKrvrsCAwEAAaOCA0EwggM9 MF0GA1UdEQRWMFSBHUFOTkVMSS5BTkRSRVNTT05ARUMuRVVST1BBLkVVpDMwMTEYMB YGCSsGAQQBrGYBAgwJQU5EUkVTU09OMRUwEwYJKwYBBAGsZgEBDAZBTk5FTEkwCQYDVR0 TBAIwADAOBgNVHQ8BAf8EBAMCBkAwHQYDVR0OBBYEFEoUEf+0Oe59fVRs/rW2M0KhmlDsM B8GA1UdIwQYMBaAFEft+GPwma9e/n4OXFjL/uI1N6a9MIHgBgNVHSAEgdgwgdUwgcgGCisGAQ QBrGYDBAEwgbkwKQYIKwYBBQUHAgEWHWh0dHA6Ly93d3cuY2VydC5mbm10LmVzL2RwY3M vmiglbggrbgefbqccajb/dh1rdwfsawzpzwqgy2vydglmawnhdguuifvuzgvyihrozsb1c2f nzsbjb25kaxrpb25zigfzc2vydgvkigluihrozsbgtk1ulvjdtsbdufmgkdewniwgsm9yz2ugs nvhbibzdhjlzxqsmjgwmdksie1hzhjpzcwgu3bhaw4pljaibgyeaiswaqewgyygccsgaqufbwe BBHoweDBBBggrBgEFBQcwAYY1aHR0cDovL29jc3BJU0FjYS5jZXJ0LmZubXQuZXMvb2NzcElTQ WNhL09jc3BSZXNwb25kZXIwMwYIKwYBBQUHMAKGJ2h0dHA6Ly93d3cuY2VydC5mbm10LmVz L2NlcnRzL0lTQUNBLmNydDBGBggrBgEFBQcBAwQ6MDgwCAYGBACORgEBMAsGBgQAjkYBAwI BDzAVBgYEAI5GAQIwCxMDRVVSAgECAgECMAgGBgQAjkYBBDCBzAYDVR0fBIHEMIHBMIG+oI G7oIG4hoGIbGRhcDovL2xkYXBJU0FjYS5jZXJ0LmZubXQuZXMvQ049Q1JMMixjbj1JU0ElMjBDQSx vpuzotvqtuknnlem9rvm/y2vydglmawnhdgvszxzvy2f0aw9utglzddtiaw5hcnk/ymfzzt9v YmplY3RjbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludIYraHR0cDovL3d3dy5jZXJ0LmZubXQuZXMvY3 Jsc19JU0FjYS9DUkwyLmNybDANBgkqhkiG9w0BAQsFAAOCAgEALIKumRPBo9NIYyzm4LSJklE9C msirjc89mpcfic9+vg4yro9mmakr8g5zavzf+zr6hglcif93/bsge4udfd9maropdelqx2ppg1+f oivlqg57eihh2kos4iyjejpwcs4iqcbkskcs5vj5xvpnjl4elpemqjsgoqjmkkdr1iezqvoxoiw/bnh M9Fw6R1aMMLbnziwAgHWDpmIj2Se74HuS3ca0ctm9fAPp/2Y87bgZ1ETs9A6wc4GxYEuGTwh1H PbDB6tgjSnjH0hY3qBITjB8IM0xGvUR9dQkt8Ez4dvyxcaFlyCMfLaeMf8jlJOv4uU1yRRT9wESIj5Gc oe43cy1cuvrmifqyhoi3kpojjaltv7asy1x0yubwyg0jgyve6atiau3xgcwdgyb1wnszeupjboqcyj ydkxxxnbkfchw602pvb0ituqitgh+kfix2mqqf+v0rdewqu3wdadnhc+cqoc7sxkjxko657dyz T/Ey5MR+gXRm6oK52iXIqjM8kbDqCqAOHVC73u+bUvh0y5B5PjGYuE2K9xK36ooavh5ytF/kY+y0 Ju804CRF00b4wKcibGxplOrU1g+ncONNmBHGbsLULXrum8+fsD3O04Mf0t0O9Mt/ZwAZTa8Cwq /0pqOWdRqucV7pq/A7fEnRb5AdBaAzxqrXVaa92NkScAm80= -----END CERTIFICATE----- Version 3 Serial Number 114 Pointer To Other TSL X509 Certificate SigAlg Issuer DN SHA256withRSA CN=ISA CA, O=FNMT-RCM, C=ES Valid from T15:11:07Z Valid to T15:11:07Z Subject DN CN=(SIGN) ANNELI ANDRESSON, O=EUROPEAN COMMISSION, C=BE Public Key Algo RSA Public Key d a f7 0d f a cc 3c f3 57 db c4 19 f9 12 ae b8 1d fe a9 a8 4a a7 d0 89 ed 83 8f 64 e4 3f 84 d8 90 4c e b 0b b3 56 ab 3b 7e e2 8c 5f 99 a1 88 5c 3b e3 64 bb e7 29 ae 9a b1 c1 7b 8a b2 12 b1 84 c6 3a d0 fa 74 6b 7c e 62 db 8c 31 4f 7c 1e eb d5 6f cf 10 ed 16 a1 18 e4 3c 30 6a e7 a9 c2 e7 f9 62 4b af f5 fa 64 c7 24 fe 1f 7a 65 d2 39 c bb e ea f5 36 f5 4c 4f 9e 54 d8 86 5a 67 ec 91 1c ba ab d3 e2 a2 e8 e9 d8 5a ab c0 d9 bd e c 51 a8 34 5e a ef d6 e0 8e f0 18 9c 0e 69 e1 05 e0 af fe 6c e0 b1 ad c4 6b d3 e f 3b b0 bc 9d d9 d1 13 f3 d3 50 dc 1a 4a b2 63 c7 fe 4b 02 0a 77 d3 0e aa 9e af 2d ca e a 14 6c a1 3d 66 eb 4a af e1 42 ab be bb Page 6 / 36

7 Authority Key ObjectId: Criticality=false AuthorityKey [ Key [ 0000: 47 ed f8 63 f0 99 af 5e fe 7e 0e 5c 58 cb fe e2 G..c...X : a6 bd 57.. Certificate Policies CRL Distribution Points ObjectId: Criticality=false CertificatePolicies [ [ PolicyInformation: [ CertPolicyId: PolicyQualifiers: [PolicyQualifierInfo: [ CPSuri: [ object identifier: uri: PolicyQualifierInfo: [ UserNotice: [ Object: NoticeReference: null ExplicitText: Qualified certificate. Under the usage conditions asserted in the FNMT-RCM CPS (106, Jorge Juan street,28009, Madrid, Spain)., PolicyInformation: [ CertPolicyId: PolicyQualifiers: null ObjectId: Criticality=false CRLDistributionPoints [ 1 CRL Distribution Points: Distribution Point: [ Distribution Point : [URI: ldap://ldapisaca.cert.fnmt.es/cn=crl2,cn=isa%20c A,o=FNMT- RCM,C=ES?certificateRevocationList;binary?base?obj ectclass=crldistributionpoint, URI: Reason Flags: null Issuer: null Subject Key Key Usage ObjectId: Criticality=false SubjectKey [ Key [ 0000: 4a ff b4 39 ee 7d 7d 54 6c fe b5 b J Tl...3B 0010: a1 9a 50 ec..p. ObjectId: Criticality=true KeyUsage [ Non_repudiation Page 7 / 36

8 Basic Constraints ObjectId: Criticality=false BasicConstraints:[ CA:false PathLen: undefined Thumbprint Thumbprint SHA256 5d 39 e8 f e ad 26 6f c c4 a df 61 ef cb 84 9d b2 fc 60 4a SHA1 a8 4e f 85 c5 55 d0 3f 48 f5 a1 95 d6 3c 6a a6 5b Page 8 / 36

9 -----BEGIN CERTIFICATE----- MIIHSDCCBTCgAwIBAgIQHaaUHzn5vENUk+T/aHIefTANBgkqhkiG9w0BAQsFADAxMQswCQYD VQQGEwJFUzERMA8GA1UECgwIRk5NVC1SQ00xDzANBgNVBAMMBklTQSBDQTAeFw0xNDEyM TkwODQyMzlaFw0xODEyMTkwODQyMzlaMEwxCzAJBgNVBAYTAkJFMRwwGgYDVQQKDBNFVVJ PUEVBTiBDT01NSVNTSU9OMR8wHQYDVQQDDBYoU0lHTikgQUdOSUVTWktBIEJBSk5PMIIBIjA NBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog6nQQcoPlHOrwXYDD+wj38lwn1zbalTTJL7y W3N7OgO9/eSCIY5nGgfnslapC36vSO9RbSxW3cV4CJCf2nGZdsZHxNJpf4IG4CEsByui30UGFANtB PlFj/r5avf0OrDGKTI2H/6sN2swgs43grcRFQ5yt/ZPhOIgjXjzK4s36IFMBG1GGRQUSDJo+uv3cbuBc NjdFro3Zmm9TypDv194f1NwXRbFOon1WtaIsJNKzw4+MKCAyD9BBVATQxGLYeCT2tZt3DFbSSX ZbBfSnfwGe7eMc99S12Hr/MwAPJhUwZZpienadVNlMNWxwutxcDO5HrmOdtxv8Vh9MKlAwvN4Q IDAQABo4IDPzCCAzswWwYDVR0RBFQwUoEcQUdOSUVTWktBLkJBSk5PQEVDLkVVUk9QQS5FV aqymdaxfdasbgkrbgeeaaxmaqimbujbsk5pmrgwfgyjkwybbagszgebdalbr05jrvnas0ew CQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBkAwHQYDVR0OBBYEFIe8EqP5sxbiNrSKwgNC00F ssfkjmb8ga1udiwqymbaafeft+gpwma9e/n4oxfjl/ui1n6a9mihgbgnvhsaegdgwgduwgcggc isgaqqbrgydbaewgbkwkqyikwybbquhagewhwh0dha6ly93d3cuy2vydc5mbm10lmvzl2r wy3mvmiglbggrbgefbqccajb/dh1rdwfsawzpzwqgy2vydglmawnhdguuifvuzgvyihrozs B1c2FnZSBjb25kaXRpb25zIGFzc2VydGVkIGluIHRoZSBGTk1ULVJDTSBDUFMgKDEwNiwgSm9yZ 2UgSnVhbiBzdHJlZXQsMjgwMDksIE1hZHJpZCwgU3BhaW4pLjAIBgYEAIswAQEwgYYGCCsGAQU FBwEBBHoweDBBBggrBgEFBQcwAYY1aHR0cDovL29jc3BJU0FjYS5jZXJ0LmZubXQuZXMvb2Nzc ElTQWNhL09jc3BSZXNwb25kZXIwMwYIKwYBBQUHMAKGJ2h0dHA6Ly93d3cuY2VydC5mbm10L mvzl2nlcnrzl0ltqunblmnyddbgbggrbgefbqcbawq6mdgwcaygbacorgebmasgbgqajky BAwIBDzAVBgYEAI5GAQIwCxMDRVVSAgECAgECMAgGBgQAjkYBBDCBzAYDVR0fBIHEMIHBMI G+oIG7oIG4hoGIbGRhcDovL2xkYXBJU0FjYS5jZXJ0LmZubXQuZXMvQ049Q1JMMSxjbj1JU0ElMjB DQSxvPUZOTVQtUkNNLEM9RVM/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDtiaW5hcnk/YmFz ZT9vYmplY3RjbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludIYraHR0cDovL3d3dy5jZXJ0LmZubXQuZX MvY3Jsc19JU0FjYS9DUkwxLmNybDANBgkqhkiG9w0BAQsFAAOCAgEAd2CyyRljkbR+hxMwnjwz NE9q6nw29uLWx4c/kWfWGNxyjO/mbE2KhgXfUm7e441Ih87PX1p8jpTeOhtfvL8CxmsqyDg56GBN q5nprbagpmkhincp77bazilmffevc915ktllyqeh+wie5i0gmpmrwja2urb/m+fxwlgqqdoee4e 0NSLr7YJqHeL1sWQsS4r1zK8ZGv1uJ0v+vAmYXwFtaYYht/c9X+QtVxYaflDcBVnPBxj3xUG7vQHe 7g5/RPX4vvzAZNV9d5IBk+sCX05dRfRqsym4qw1sw4j0W2nxAfQwk3bfW6NP5SgOHfC9sh2LrC3F /wlvepy8pitxfukrzlseb8zwm2vfz3qrnggbxcz3dy3kfavdel/gnnhog5q4tn2tvv7yfxlegu7zn +IqBOdlAtbJXEu60FiF9Cs35IGqwWlbeOK8QvogFYDxlgIPrs3ijEA1WHyY+GH1mofSA7u30wEvoo CzohFf4DBv06I4q9aCNBnTo4yki1yFhBm71r60hlAas6aK6TZ+NUoFWwPypMP617SlHdy8QlFx1s3 V+rIt2hxUUGddid/FXDKtuUCRqKqx6x8J8bI7DecZsCS7ijPCApjJ84HB8UASRzdGtEwc97hvnAqXjp CS/tHAVcVvmP3isNDu4WtV2LQfL/TIY8zMxUebv/E5JyB3KAw= -----END CERTIFICATE----- Version 3 Serial Number X509 Certificate SigAlg Issuer DN Valid from Valid to Subject DN Public Key Algo SHA256withRSA CN=ISA CA, O=FNMT-RCM, C=ES T08:42:39Z T08:42:39Z CN=(SIGN) AGNIESZKA BAJNO, O=EUROPEAN COMMISSION, C=BE RSA Public Key d a f7 0d f a a2 0e a e 51 ce af 05 d8 0c 3f b0 8f 7f 25 c2 7d 73 6d a9 53 4c 92 fb c9 6d cd ec e8 0e f7 f c 68 1f 9e c9 5a a4 2d fa bd 23 bd 45 b4 b1 5b e f 69 c6 65 db 19 1f a5 fe 08 1b b0 1c ae 8b 7d d b4 13 e5 16 3f eb e5 ab df d0 ea c3 18 a4 c8 d8 7f fa b0 dd ac c2 0b 38 de 0a dc ca df d9 3e e3 cc ae 2c df a b c9 a3 eb af dd c6 ee 05 c a e8 dd 99 a6 f5 3c a9 0e fd 7d e1 fd 4d c1 74 5b 14 ea 27 d5 6b 5a 22 c2 4d 2b 3c 38 f8 c fd d 0c 46 2d f 6b 59 b7 70 c5 6d b0 5f 4a 77 f0 19 ee de 31 cf 7d 4b 5d 87 af f f a6 27 a7 69 d5 4d 94 c3 56 c7 0b ad c5 c0 ce e4 7a e6 39 db 71 bf c5 61 f4 c2 a5 03 0b cd e Page 9 / 36

10 Authority Key ObjectId: Criticality=false AuthorityKey [ Key [ 0000: 47 ed f8 63 f0 99 af 5e fe 7e 0e 5c 58 cb fe e2 G..c...X : a6 bd 57.. Certificate Policies CRL Distribution Points ObjectId: Criticality=false CertificatePolicies [ [ PolicyInformation: [ CertPolicyId: PolicyQualifiers: [PolicyQualifierInfo: [ CPSuri: [ object identifier: uri: PolicyQualifierInfo: [ UserNotice: [ Object: NoticeReference: null ExplicitText: Qualified certificate. Under the usage conditions asserted in the FNMT-RCM CPS (106, Jorge Juan street,28009, Madrid, Spain)., PolicyInformation: [ CertPolicyId: PolicyQualifiers: null ObjectId: Criticality=false CRLDistributionPoints [ 1 CRL Distribution Points: Distribution Point: [ Distribution Point : [URI: ldap://ldapisaca.cert.fnmt.es/cn=crl1,cn=isa%20c A,o=FNMT- RCM,C=ES?certificateRevocationList;binary?base?obj ectclass=crldistributionpoint, URI: Reason Flags: null Issuer: null Subject Key Key Usage ObjectId: Criticality=false SubjectKey [ Key [ 0000: 87 bc 12 a3 f9 b3 16 e2 36 b4 8a c d B.A 0010: 6c 49 f9 23 li.. ObjectId: Criticality=true KeyUsage [ Non_repudiation Page 10 / 36

11 Basic Constraints ObjectId: Criticality=false BasicConstraints:[ CA:false PathLen: undefined Thumbprint Thumbprint SHA f5 07 de 3a 84 c6 3f 29 f f7 30 ad d1 73 ca df a0 9b 76 ab 07 f5 f fd 9a aa SHA b b9 5e 4b 76 fc 09 c3 6b ef 8f d2 db 46 d2 ab ab 1a Page 11 / 36

12 -----BEGIN CERTIFICATE----- MIIHYDCCBUigAwIBAgIQLc4fd1CtIihUFtlELwMLDDANBgkqhkiG9w0BAQsFADAxMQswCQYDVQ QGEwJFUzERMA8GA1UECgwIRk5NVC1SQ00xDzANBgNVBAMMBklTQSBDQTAeFw0xNDA5MTU xmje5mtvafw0xoda5mtuxmje5mtvamfqxczajbgnvbaytakjfmrwwggydvqqkdbnfvvjp UEVBTiBDT01NSVNTSU9OMScwJQYDVQQDDB4oU0lHTikgSk9MQU5EQSBWQU4gRUlKTkRUSE 9WRU4wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0sin8VvNtcuOnUuGDWtXjZlT x5sozzjidg4/6bot3geypivqhzci8hslijb1yqjnimglti6blhelr/skf8regueyn/ijgio2/89b82rsfm1r+ ehsjklmvuu+kj7uunhrcdlahgnohmpwide3dixy4jw0rbdjtyewv7cndedoc4le9iuj71zlsphmedt LfLdwIF0ay/r5Bx1vaiapmzxjDIcArsQlHNmNpK3ysHW+poAhzN8Tj9VowjhTDSw/FTBNbQASzuK0 L2IWD0PXrsZSO+yW86Dx0kAN1qSmWxdwZ0PAX+n39mL2GGuG8StIrpvLMZDGgN6G52msz2gr niaulagmbaagjggnpmiidszbrbgnvhreezdbigsrkt0xbtkrbllzbti1fsuporfrit1zftkbfqy 5FVVJPUEEuRVWkOjA4MR4wHAYJKwYBBAGsZgECDA9WQU4gRUlKTkRUSE9WRU4xFjAUBgkr BgEEAaxmAQEMB0pPTEFOREEwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBkAwHQYDVR0O BBYEFIz+jZkpky2xCorjhNpu1m1pDZ76MB8GA1UdIwQYMBaAFEft+GPwma9e/n4OXFjL/uI1N6a9 MIHgBgNVHSAEgdgwgdUwgcgGCisGAQQBrGYDBAEwgbkwKQYIKwYBBQUHAgEWHWh0dHA6L y93d3cuy2vydc5mbm10lmvzl2rwy3mvmiglbggrbgefbqccajb/dh1rdwfsawzpzwqgy2vyd GlmaWNhdGUuIFVuZGVyIHRoZSB1c2FnZSBjb25kaXRpb25zIGFzc2VydGVkIGluIHRoZSBGTk1UL VJDTSBDUFMgKDEwNiwgSm9yZ2UgSnVhbiBzdHJlZXQsMjgwMDksIE1hZHJpZCwgU3BhaW4pLj AIBgYEAIswAQEwgYYGCCsGAQUFBwEBBHoweDBBBggrBgEFBQcwAYY1aHR0cDovL29jc3BJU0 FjYS5jZXJ0LmZubXQuZXMvb2NzcElTQWNhL09jc3BSZXNwb25kZXIwMwYIKwYBBQUHMAKGJ2h 0dHA6Ly93d3cuY2VydC5mbm10LmVzL2NlcnRzL0lTQUNBLmNydDBGBggrBgEFBQcBAwQ6MDg wcaygbacorgebmasgbgqajkybawibdzavbgyeai5gaqiwcxmdrvvsagecagecmaggbgqaj kybbdcbzaydvr0fbihemihbmig+oig7oig4hogibgrhcdovl2xkyxbju0fjys5jzxj0lmzubxqu ZXMvQ049Q1JMNixjbj1JU0ElMjBDQSxvPUZOTVQtUkNNLEM9RVM/Y2VydGlmaWNhdGVSZXZvY 2F0aW9uTGlzdDtiaW5hcnk/YmFzZT9vYmplY3RjbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludIYraHR0 cdovl3d3dy5jzxj0lmzubxquzxmvy3jsc19ju0fjys9dukw2lmnybdanbgkqhkig9w0baqsfaao CAgEAYnVYxWe3b57eq6qGlVE9f7tiEPUGqmKm2cXlRLY50Hat4O/dVDv9teyNd/fvcaK4UHdhRaF+ EhOoDsm9RTKrkc4VzWIUA8xbgJL8NlJd1OdVgdIk0kuI7QvQQ/x4c9PTyk0ucBw5MNWyr97UO68r OBNiF+tS2mrOMJqjQS6vX7tf/HOvyPg9dLY/+KiiuijnAFS9+DPJNWQh8UkvSEqgBkydy0pDFLLOR EFHiBY7cOflfjoQm+tKxsPt8Mw/z/p5OLeg8cMyVprtVZ2LohgkJP/Do0SB1lgenlVWAY7f/7swSgn4y6 yd99hb74mkdgreqpbvin5syrgpfzfkyyelz9/q7fhddr3tvxlsdcjlia5+5d8iprdw70vstu9p3mmp XCZNvBFSmVeGNDVm2jszt7oD254nj5dm/8tXdXqeq4MEi1wHRposKRc6pPtAPFRTcIzRLQ8BRKT EkA6sUbeshjyIIA0942/zEFRO/H+cEMTqz1ZuCHoS3mwM6qjh0cEsZ0tmUpHzrNltR5WPo0IKiqqa DxdxN/9OuTId+P5zLRdwsVSduvUm+5krW8Pxn2pkyTg16NN2wLQ7p/XnsEPwBVV2lEUJt8n0obH VYZvBZSUchbcpLQaQxMbIG5dpzFXXBYgXSUMhuf3SeoauoMhXPm9N2UyFJ5fwcoXHZPNI1Uw= -----END CERTIFICATE----- Version 3 Serial Number X509 Certificate SigAlg Issuer DN Valid from Valid to Subject DN Public Key Algo SHA256withRSA CN=ISA CA, O=FNMT-RCM, C=ES T12:19:15Z T12:19:15Z CN=(SIGN) JOLANDA VAN EIJNDTHOVEN, O=EUROPEAN COMMISSION, C=BE RSA Public Key d a f7 0d f a b4 b2 29 fc 56 f3 6d 72 e3 a7 52 e1 83 5a d5 e f1 e5 2a 19 cc b 8f fa 6c eb ec 8f 22 fa 87 cd c8 bc 1d d 58 aa d 23 a0 65 1d e9 51 fe c9 1f f2 b1 20 b fc 88 e0 8a 8d bf f3 d6 fc da bb e 7a 1b b3 2f ba ef 8a 8f b5 2e 9e b a1 98 fc 08 0d ed dd d 2b 05 d8 ed c8 4c 15 ed c d3 82 e2 51 3d 8a e2 7b d7 39 6c a4 73 1e 76 d2 df 2d dc b2 fe be 41 c7 5b da 89 aa 66 cf 18 c3 21 c0 2b b b 7c ac 1d 6f a9 a c4 e3 f5 5a 30 8e 14 c3 4b 0f c5 4c 13 5b b3 b8 ad 0b d d0 f5 eb b1 94 8e fb 25 bc e8 3c a c5 dc 19 d0 f0 17 fa 7d fd 98 bd 86 1a e1 bc 4a d2 2b a6 f2 cc a0 37 a1 b9 da 6b 33 da 0a e7 20 0b a Page 12 / 36

13 Authority Key ObjectId: Criticality=false AuthorityKey [ Key [ 0000: 47 ed f8 63 f0 99 af 5e fe 7e 0e 5c 58 cb fe e2 G..c...X : a6 bd 57.. Certificate Policies CRL Distribution Points ObjectId: Criticality=false CertificatePolicies [ [ PolicyInformation: [ CertPolicyId: PolicyQualifiers: [PolicyQualifierInfo: [ CPSuri: [ object identifier: uri: PolicyQualifierInfo: [ UserNotice: [ Object: NoticeReference: null ExplicitText: Qualified certificate. Under the usage conditions asserted in the FNMT-RCM CPS (106, Jorge Juan street,28009, Madrid, Spain)., PolicyInformation: [ CertPolicyId: PolicyQualifiers: null ObjectId: Criticality=false CRLDistributionPoints [ 1 CRL Distribution Points: Distribution Point: [ Distribution Point : [URI: ldap://ldapisaca.cert.fnmt.es/cn=crl6,cn=isa%20c A,o=FNMT- RCM,C=ES?certificateRevocationList;binary?base?obj ectclass=crldistributionpoint, URI: Reason Flags: null Issuer: null Subject Key Key Usage ObjectId: Criticality=false SubjectKey [ Key [ 0000: 8c fe 8d d b1 0a 8a e3 84 da 6e d6 6d...n.m 0010: 69 0d 9e fa i... ObjectId: Criticality=true KeyUsage [ Non_repudiation Page 13 / 36

14 Basic Constraints ObjectId: Criticality=false BasicConstraints:[ CA:false PathLen: undefined SHA256 Thumbprint f0 e7 c9 5c 09 a5 f a0 35 3e bb dc e eb 1f f5 7e 6d 2d f9 62 e8 02 a2 e4 0c Thumbprint SHA c af df af 48 db 03 6b 0d 5b 9c 6e a d0 d2 21 TSL Location TSL Type supervision/accreditation status lists of trust services from trust service providers which are supervised/accredited by the referenced Member State owning the pointed TL implementation for compliance with the relevant provisions laid down in the applicable European legislation, through a process of direct oversight (whether voluntary or regulatory). Scheme Operator Scheme Type Community Rules European Commission A URI pointing towards a descriptive text where users can obtain information about the scheme of schemes type (i.e. a compiled list listing pointers to all trusted lists published as part of the scheme Scheme Territory EU of schemes and maintained in the form of a TL) and the relevant driving rules and policy. Mime Type application/vnd.etsi.tsl+xml List Issue Date Time T00:00:00Z Next Update datetime T00:00:00Z Distribution Point A TL implementation of a compiled list of pointers towards Member States List of Trust Service Providers TSP 1 Information TSP en LuxTrust S.A. TSP Trade en VATLU TSP Trade fr TVALU Street Address en IVY Building Parc d'activités Locality en Capellen State Or Province en Postal Code en L-8308 Country en LU Street Address fr IVY Building Parc d'activités Locality fr Capellen State Or Province fr Postal Code fr L-8308 Country fr LU Street Address de IVY Building Parc d'activités Locality de Capellen State Or Province de Postal Code de L-8308 Country de LU Page 14 / 36

15 Electronic Address URI en: Electronic Address URI fr: Electronic Address URI de: Electronic Address URI en: Electronic Address URI fr: Electronic Address URI de: TSP Information URI URI en TSP Information URI URI fr TSP Information URI URI de List of Services TSP 1, Service 1 Service Type A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service en LuxTrust Qualified Certification Authority Digital Id CN=LuxTrust Qualified CA,O=LuxTrust S.A.,C=LU Page 15 / 36

16 -----BEGIN CERTIFICATE----- MIID8DCCAtigAwIBAgICA+swDQYJKoZIhvcNAQEFBQAwQDELMAkGA1UEBhMCTFUxFjAUBgN VBAoTDUx1eFRydXN0IHMuYS4xGTAXBgNVBAMTEEx1eFRydXN0IHJvb3QgQ0EwHhcNMDgwNj A1MDkyNTI0WhcNMTYxMDE4MTA0MDM0WjBFMQswCQYDVQQGEwJMVTEWMBQGA1UEChM NTHV4VHJ1c3QgUy5BLjEeMBwGA1UEAxMVTHV4VHJ1c3QgUXVhbGlmaWVkIENBMIIBIjANBgk qhkig9w0baqefaaocaq8amiibcgkcaqeaybfxza+8rnnvlcd+sz8bnh6wo3lmali419ygd9v BYcIwLmMx9KgAKF3u4B87Hee5NL4Xvhm/B9DuDUH5OGZ3P2Dwf7putVEvATvW8jzYq6CzarUth zb9ux+ktdtt+d4y6tkgvggy9dbe+bz635ozm2ppqt9kzor48rbn730ka/mjia0sa7zdphl37whs A4/TWh9F1/LBRVGC0F4Mg1hU/u+kovF5mTuUK+ncU7+FS0cQRhAD+C4WfLI/WuzuE+T6ZuZ6I qg6+vqgf6ikwl6ivzmwkkjpvv3+3wgy3zq5tpdvsigj4kxd1riqgkseedfn8y71dg3odbqf1yd7ue 7ziwIDAQABo4HuMIHrMA8GA1UdEwQIMAYBAf8CAQAwQgYDVR0gBDswOTA3BggrgSsBAQEBA DArMCkGCCsGAQUFBwIBFh1odHRwOi8vcmVwb3NpdG9yeS5sdXh0cnVzdC5sdTARBglghkgBhvh CAQEEBAMCAAcwDgYDVR0PAQH/BAQDAgHGMB8GA1UdIwQYMBaAFN2K1zDx+ZFx6UdwDCXl rkgn34wlmdega1udhwqqmcgwjqakockgigh0dha6ly9jcmwubhv4dhj1c3qubhuvtfrsq0e uy3jsmb0ga1uddgqwbbsnkkmh3rotd5lmkqtnq94/zslkbtanbgkqhkig9w0baqufaaocaqe AapxOpigXTejGgHBWMAwDBMdZQHpPyoCmw32OIj1qqezO5nDnjG5gfJni/rp5IFMpV//xmCkjqyO9 2PyYbcHNSUpP1SjCkyn10e6ipmzpXK0MbgFvIPglAgA5dXxTNf0Q77eWu36fz5VKQEmJzqoXTccq4 null9rlz88yulczmawscetizcb4keckvyqhf4+t0juczqx7zzfpivytr2m+ogl9qiomkwbgkzsejt+ MgYWrskJADKDZMr4bQxkxnhzCSQoraX7DugxM0fH47MitCc74uZrWIJ6qQjCLBtKzxUGy7B3pYOj LlThr7S64cd12yuR+NjHAFZ2DTXwxKg/FQg== -----END CERTIFICATE----- Version 3 Serial Number 1003 SigAlg Issuer DN Valid from Valid to Subject DN Public Key Algo SHA1withRSA CN=LuxTrust root CA, O=LuxTrust s.a., C=LU T09:25:24Z T10:40:34Z CN=LuxTrust Qualified CA, O=LuxTrust S.A., C=LU RSA DigitalId X509 Certificate Public Key d a f7 0d f a c9 b1 57 cc 0f bc 44 d9 ef e b1 9f 01 9c 7e 96 3b 72 e6 68 b8 b8 d7 d d c2 30 2e f4 a d ee e0 1f 3b 1d e7 b9 34 be 17 be 19 bf 07 d0 ee 0d 41 f f 60 f0 7f ba 6e b5 51 2f 01 3b d6 f2 3c d8 ab a0 b3 6a b5 2d fd bb 1f 8a 4d d4 d3 f9 de 32 ea d f4 30 5e f9 bc fa df 9a 19 9b 63 cf 41 3f 64 ce f1 10 4d ef 7d 0a 03 f ad 12 6b b6 43 a6 12 f7 ed 61 d2 03 8f d3 5a 1f 45 d7 f2 c d0 5e 0c fe ef a4 a2 f b 94 2b e9 dc 53 bf 85 4b f8 2e 16 7c b2 3f 5a ec ee 13 e4 fa 66 e6 7a 22 a8 3a fa fa a0 7f a8 8a c0 be a b0 2a 42 4f bd 5d fe dd df 3a b9 b6 90 ef b0 81 a3 e2 45 dd d6 b ab cd f3 2e f5 0c 6d ce 74 1a 85 d5 87 7b b9 ee f3 8b Authority Key ObjectId: Criticality=false AuthorityKey [ Key [ 0000: dd 8a d7 30 f1 f e c 25 e5 ac a q.gp : 8d df 8c Page 16 / 36

17 Certificate Policies CRL Distribution Points ObjectId: Criticality=false CertificatePolicies [ [ PolicyInformation: [ CertPolicyId: PolicyQualifiers: [PolicyQualifierInfo: [ CPSuri: [ object identifier: uri: ObjectId: Criticality=false CRLDistributionPoints [ 1 CRL Distribution Points: Distribution Point: [ Distribution Point : [URI: Reason Flags: null Issuer: null Subject Key Key Usage ObjectId: Criticality=false SubjectKey [ Key [ 0000: 8d 90 a3 07 dd 1a c 92 ab 4d 43 de 3f...w.L..MC : cd d. ObjectId: Criticality=true KeyUsage [ DigitalSignature Non_repudiation Key_CertSign Crl_Sign Basic Constraints ObjectId: Criticality=false BasicConstraints:[ CA:true PathLen:0 Thumbprint Thumbprint SHA256 fe 5d 1f de a c6 9f c 4e 69 4a cf 0a fa 05 6b 56 a4 ea d 52 a8 5b f7 d7 SHA1 77 b1 b f5 16 3a 89 ca 41 4a ca 7c 7e ac a2 aa Service Status The service is currently under supervision, for compliance with the provisions laid down in the applicable European legislation T00:00:00Z TSP 1, Service 1, History N.1 Service Type A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service en LuxTrust Qualified Certification Authority Page 17 / 36

18 Digital Id CN=LuxTrust Qualified CA,O=LuxTrust S.A.,C=LU Service Status The service is currently under supervision, for compliance with the provisions laid down in the applicable European legislation T00:00:00Z TSP 1, Service 1, History N.2 Service Type A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service en LuxTrust Qualified Certification Authority Digital Id CN=LuxTrust Qualified CA,O=LuxTrust S.A.,C=LU Service Status An accreditation assessment has been performed by the Accreditation Body and the service is found to be in compliance with the provisions laid down in Directive 1999/93/EC T00:00:00Z TSP 1, Service 1, History N.3 Service Type A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service en LuxTrust Qualified Certification Authority Digital Id CN=LuxTrust Qualified CA,O=LuxTrust S.A.,C=LU Service Status The validity of the accreditation assessment has lapsed without the service being re-assessed T23:59:59Z TSP 1, Service 2 Service Type Service en LuxTrust Time Stamping Authority Digital Id CN=LuxTrust Qualified CA,O=LuxTrust S.A.,C=LU Page 18 / 36

19 -----BEGIN CERTIFICATE----- MIID8DCCAtigAwIBAgICA+swDQYJKoZIhvcNAQEFBQAwQDELMAkGA1UEBhMCTFUxFjAUBgN VBAoTDUx1eFRydXN0IHMuYS4xGTAXBgNVBAMTEEx1eFRydXN0IHJvb3QgQ0EwHhcNMDgwNj A1MDkyNTI0WhcNMTYxMDE4MTA0MDM0WjBFMQswCQYDVQQGEwJMVTEWMBQGA1UEChM NTHV4VHJ1c3QgUy5BLjEeMBwGA1UEAxMVTHV4VHJ1c3QgUXVhbGlmaWVkIENBMIIBIjANBgk qhkig9w0baqefaaocaq8amiibcgkcaqeaybfxza+8rnnvlcd+sz8bnh6wo3lmali419ygd9v BYcIwLmMx9KgAKF3u4B87Hee5NL4Xvhm/B9DuDUH5OGZ3P2Dwf7putVEvATvW8jzYq6CzarUth zb9ux+ktdtt+d4y6tkgvggy9dbe+bz635ozm2ppqt9kzor48rbn730ka/mjia0sa7zdphl37whs A4/TWh9F1/LBRVGC0F4Mg1hU/u+kovF5mTuUK+ncU7+FS0cQRhAD+C4WfLI/WuzuE+T6ZuZ6I qg6+vqgf6ikwl6ivzmwkkjpvv3+3wgy3zq5tpdvsigj4kxd1riqgkseedfn8y71dg3odbqf1yd7ue 7ziwIDAQABo4HuMIHrMA8GA1UdEwQIMAYBAf8CAQAwQgYDVR0gBDswOTA3BggrgSsBAQEBA DArMCkGCCsGAQUFBwIBFh1odHRwOi8vcmVwb3NpdG9yeS5sdXh0cnVzdC5sdTARBglghkgBhvh CAQEEBAMCAAcwDgYDVR0PAQH/BAQDAgHGMB8GA1UdIwQYMBaAFN2K1zDx+ZFx6UdwDCXl rkgn34wlmdega1udhwqqmcgwjqakockgigh0dha6ly9jcmwubhv4dhj1c3qubhuvtfrsq0e uy3jsmb0ga1uddgqwbbsnkkmh3rotd5lmkqtnq94/zslkbtanbgkqhkig9w0baqufaaocaqe AapxOpigXTejGgHBWMAwDBMdZQHpPyoCmw32OIj1qqezO5nDnjG5gfJni/rp5IFMpV//xmCkjqyO9 2PyYbcHNSUpP1SjCkyn10e6ipmzpXK0MbgFvIPglAgA5dXxTNf0Q77eWu36fz5VKQEmJzqoXTccq4 null9rlz88yulczmawscetizcb4keckvyqhf4+t0juczqx7zzfpivytr2m+ogl9qiomkwbgkzsejt+ MgYWrskJADKDZMr4bQxkxnhzCSQoraX7DugxM0fH47MitCc74uZrWIJ6qQjCLBtKzxUGy7B3pYOj LlThr7S64cd12yuR+NjHAFZ2DTXwxKg/FQg== -----END CERTIFICATE----- Version 3 Serial Number 1003 SigAlg Issuer DN Valid from Valid to Subject DN Public Key Algo SHA1withRSA CN=LuxTrust root CA, O=LuxTrust s.a., C=LU T09:25:24Z T10:40:34Z CN=LuxTrust Qualified CA, O=LuxTrust S.A., C=LU RSA DigitalId X509 Certificate Public Key d a f7 0d f a c9 b1 57 cc 0f bc 44 d9 ef e b1 9f 01 9c 7e 96 3b 72 e6 68 b8 b8 d7 d d c2 30 2e f4 a d ee e0 1f 3b 1d e7 b9 34 be 17 be 19 bf 07 d0 ee 0d 41 f f 60 f0 7f ba 6e b5 51 2f 01 3b d6 f2 3c d8 ab a0 b3 6a b5 2d fd bb 1f 8a 4d d4 d3 f9 de 32 ea d f4 30 5e f9 bc fa df 9a 19 9b 63 cf 41 3f 64 ce f1 10 4d ef 7d 0a 03 f ad 12 6b b6 43 a6 12 f7 ed 61 d2 03 8f d3 5a 1f 45 d7 f2 c d0 5e 0c fe ef a4 a2 f b 94 2b e9 dc 53 bf 85 4b f8 2e 16 7c b2 3f 5a ec ee 13 e4 fa 66 e6 7a 22 a8 3a fa fa a0 7f a8 8a c0 be a b0 2a 42 4f bd 5d fe dd df 3a b9 b6 90 ef b0 81 a3 e2 45 dd d6 b ab cd f3 2e f5 0c 6d ce 74 1a 85 d5 87 7b b9 ee f3 8b Authority Key ObjectId: Criticality=false AuthorityKey [ Key [ 0000: dd 8a d7 30 f1 f e c 25 e5 ac a q.gp : 8d df 8c Page 19 / 36

20 Certificate Policies CRL Distribution Points ObjectId: Criticality=false CertificatePolicies [ [ PolicyInformation: [ CertPolicyId: PolicyQualifiers: [PolicyQualifierInfo: [ CPSuri: [ object identifier: uri: ObjectId: Criticality=false CRLDistributionPoints [ 1 CRL Distribution Points: Distribution Point: [ Distribution Point : [URI: Reason Flags: null Issuer: null Subject Key Key Usage ObjectId: Criticality=false SubjectKey [ Key [ 0000: 8d 90 a3 07 dd 1a c 92 ab 4d 43 de 3f...w.L..MC : cd d. ObjectId: Criticality=true KeyUsage [ DigitalSignature Non_repudiation Key_CertSign Crl_Sign Basic Constraints ObjectId: Criticality=false BasicConstraints:[ CA:true PathLen:0 Thumbprint Thumbprint SHA256 fe 5d 1f de a c6 9f c 4e 69 4a cf 0a fa 05 6b 56 a4 ea d 52 a8 5b f7 d7 SHA1 77 b1 b f5 16 3a 89 ca 41 4a ca 7c 7e ac a2 aa Service Status The service is currently under supervision, for compliance with the provisions laid down in the applicable European legislation T00:00:00Z TSP 1, Service 2, History N.1 Service Type Service en LuxTrust Time Stamping Authority Digital Id CN=LuxTrust Qualified CA,O=LuxTrust S.A.,C=LU Page 20 / 36

21 Service Status An accreditation assessment has been performed by the Accreditation Body and the service is found to be in compliance with the provisions laid down in Directive 1999/93/EC T00:00:00Z TSP 1, Service 2, History N.2 Service Type Service en LuxTrust Time Stamping Authority Digital Id CN=LuxTrust Qualified CA,O=LuxTrust S.A.,C=LU Service Status The validity of the accreditation assessment has lapsed without the service being re-assessed T23:59:59Z TSP 1, Service 3 Service Type A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service en LuxTrust Global Qualified Certification Authority Digital Id CN=LuxTrust Global Qualified CA,O=LuxTrust S.A.,C=LU Page 21 / 36

22 -----BEGIN CERTIFICATE----- MIID5zCCAs+gAwIBAgICDJcwDQYJKoZIhvcNAQELBQAwRDELMAkGA1UEBhMCTFUxFjAUBgN VBAoTDUx1eFRydXN0IHMuYS4xHTAbBgNVBAMTFEx1eFRydXN0IEdsb2JhbCBSb290MB4XDTEx MTEyMjA5MzQyNFoXDTE3MTEyMjA5MzQyNFowTDELMAkGA1UEBhMCTFUxFjAUBgNVBAoTD Ux1eFRydXN0IFMuQS4xJTAjBgNVBAMTHEx1eFRydXN0IEdsb2JhbCBRdWFsaWZpZWQgQ0Ewg geima0gcsqgsib3dqebaquaa4ibdwawggekaoibaqco0cl9yek22xzb2pnzn0gigx26qgqchkj 3az/r+qhAv/d/jVBLZy5mQvKRQFrvnLZp5gY5RzrgIcMyZxCwCitQ+MyLPiUYZ4mg/lUrHfOfhWRjY ajy4dz+m69icdzaskuvrfsurj/uemaikgvgjbzecd0qd8bxynnt6gat9basj7vh8ldytho4d1mbude6j mupbtrnqw1tqnuzejcooi8jawkwz0x4ggxzg0izlc4irilb/aaqijoo+8qvr511t+zajsjv2cpps68d pl7azbtw7/fhsyf84hcbf4tch7qhl9zfrdawgdqrziebsm4setbanuukudyuuzyjoahfnjj3agmba AGjgdowgdcwDwYDVR0TBAgwBgEB/wIBADBDBgNVHSAEPDA6MDgGCCuBKwEBAQoDMCwwK gyikwybbquhagewhmh0dhbzoi8vcmvwb3npdg9yes5sdxh0cnvzdc5sdtalbgnvhq8ebamc AQYwHwYDVR0jBBgwFoAUFxWFiQkvJIdvPx0b5PKWeYNIE84wMgYDVR0fBCswKTAnoCWgI4Yha HR0cDovL2NybC5sdXh0cnVzdC5sdS9MVEdSQ0EuY3JsMB0GA1UdDgQWBBQ0Fhvx02RnYkyjNL wns1okfkhxfzanbgkqhkig9w0baqsfaaocaqeagpcwto1sqy6kmpwin+gawvw9h2jo3qwr6 qvwzaqhxphzgqtd+ghixn949sgyommkgtvjjosais8qj5lgtdwjuy056rn5fcc2p+0qyofpgdng SkyRY3xtuKteEPcoi+eFBphY+dlilSPXm3j6Vp/6BRb70Zd35O1Zic95ZUNCxDDVkaDbuN9tjGIBKhn q/extpheedzjpjppvxpsbrcuupj0a9ossfoqewwksmd/vjkf32m9a2tlrd62xdhenjrahdu/to55f 9tz3ekl/aKoS2khJxMfBvdvlw2Yc2g02g5rYsBxrSphph6IjqIkALM95jbm9T2Xo2CSROTAtprdhKw== -----END CERTIFICATE----- Version 3 Serial Number 3223 SigAlg Issuer DN Valid from Valid to Subject DN Public Key Algo SHA256withRSA CN=LuxTrust Global Root, O=LuxTrust s.a., C=LU T09:34:24Z T09:34:24Z CN=LuxTrust Global Qualified CA, O=LuxTrust S.A., C=LU RSA DigitalId X509 Certificate Public Key d a f7 0d f a a8 d0 29 7d c9 e9 36 db 16 5b d8 f d ba aa a2 77 6b 3f eb fa a8 40 bf f7 7f 8d 50 4b 67 2e f a ef 9c b6 69 e a e0 21 c b0 0a 2b 50 f8 cc 8b 3e a0 fe 55 2b 1d f3 9f a2 58 e0 3c fe 33 af dc c0 b0 ab 95 ad fb 2e ac 9f d b e0 8c 1c de 09 dd 2a 77 c ed e f5 b0 2c 27 b5 61 f2 50 f2 4e 1a 38 0f 59 9b b9 d7 ba 8e 6b a d a9 6d 53 aa 7b b a0 8f f f3 1b e 22 ac fd a a 28 fb c4 15 af 9d 75 4f ec c f d8 2a 4f 4b af 1d a4 be c f0 ef f7 e1 b3 21 7c e f 8b 42 1f b dc c5 ad d da ab b 48 ce e eb 8a 51 d6 2e b9 9c a3 a0 01 c5 9e 38 f Authority Key ObjectId: Criticality=false AuthorityKey [ Key [ 0000: f f 3f 1d 1b e4 f o...y 0010: ce.h.. Page 22 / 36

23 Certificate Policies CRL Distribution Points ObjectId: Criticality=false CertificatePolicies [ [ PolicyInformation: [ CertPolicyId: PolicyQualifiers: [PolicyQualifierInfo: [ CPSuri: [ object identifier: uri: ObjectId: Criticality=false CRLDistributionPoints [ 1 CRL Distribution Points: Distribution Point: [ Distribution Point : [URI: Reason Flags: null Issuer: null Subject Key Key Usage ObjectId: Criticality=false SubjectKey [ Key [ 0000: b f1 d c a3 34 bc 0d b3 53 a4 4...dgbL.4...S. 0010: 7c a1 f ObjectId: Criticality=false KeyUsage [ Key_CertSign Crl_Sign Basic Constraints ObjectId: Criticality=false BasicConstraints:[ CA:true PathLen:0 Thumbprint Thumbprint SHA256 db ec e4 e5 7a 3c 91 ec 80 4c 5d e4 c6 fd e7 3c c8 28 1c d2 f5 ba ed 76 dd SHA1 d5 0c f d6 31 bd 29 9b c2 6e f5 3a Service Status The service is currently under supervision, for compliance with the provisions laid down in the applicable European legislation T00:00:00Z TSP 1, Service 3, History N.1 Service Type A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service en LuxTrust Global Qualified Certification Authority Digital Id CN=LuxTrust Global Qualified CA,O=LuxTrust S.A.,C=LU Page 23 / 36

24 Service Status The service is currently under supervision, for compliance with the provisions laid down in the applicable European legislation T00:00:00Z TSP 1, Service 3, History N.2 Service Type A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service en LuxTrust Global Qualified Certification Authority Digital Id CN=LuxTrust Global Qualified CA,O=LuxTrust S.A.,C=LU Service Status An accreditation assessment has been performed by the Accreditation Body and the service is found to be in compliance with the provisions laid down in Directive 1999/93/EC T00:00:00Z TSP 1, Service 3, History N.3 Service Type A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service en LuxTrust Global Qualified Certification Authority Digital Id CN=LuxTrust Global Qualified CA,O=LuxTrust S.A.,C=LU Service Status The validity of the accreditation assessment has lapsed without the service being re-assessed T23:59:59Z TSP 1, Service 4 Service Type Service en LuxTrust Global Time Stamping Authority Digital Id CN=LuxTrust Global Timestamping CA,O=LuxTrust S.A.,C=LU Page 24 / 36

25 -----BEGIN CERTIFICATE----- MIID6jCCAtKgAwIBAgICDtswDQYJKoZIhvcNAQELBQAwRDELMAkGA1UEBhMCTFUxFjAUBgNV BAoTDUx1eFRydXN0IHMuYS4xHTAbBgNVBAMTFEx1eFRydXN0IEdsb2JhbCBSb290MB4XDTEy MDgyODEzMDc0N1oXDTIxMDMxNzA5NTEzN1owTzELMAkGA1UEBhMCTFUxFjAUBgNVBAoTD Ux1eFRydXN0IFMuQS4xKDAmBgNVBAMTH0x1eFRydXN0IEdsb2JhbCBUaW1lc3RhbXBpbmcgQ 0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC62E7tAeIGoLM3xRc4SNpdb9+Me ejlq91vpecvb8svhi4skmutiebwg13hjqglkcn9pao650pehxwebgm2aukrnsimm74pnbhyb0 sa0rqui8npzbp1x5ildwqitkj1iftv5byrh8hj0qpx6u4cluemo9h/ao/4exw2ws8hshwdgc0enu+4s RoXM+ngPrqZetKYD6bEVFw0PSLfCJpGx82JU6/7+Ml0vB6Y/JMcU6xH5u6XdUyayjIvBmKYGSBRC el7yrjknbs8hcurhf8pmaltddr481dykiwgkyy6xq4v5iudsicrcah2wurqcjyfi/s6kxjmvzuabh 8oxuy8HFyNAgMBAAGjgdowgdcwDwYDVR0TBAgwBgEB/wIBADBDBgNVHSAEPDA6MDgGCCuB KwEBAQoIMCwwKgYIKwYBBQUHAgEWHmh0dHBzOi8vcmVwb3NpdG9yeS5sdXh0cnVzdC5sdTA LBgNVHQ8EBAMCAQYwHwYDVR0jBBgwFoAUFxWFiQkvJIdvPx0b5PKWeYNIE84wMgYDVR0fBC swktanocwgi4yhahr0cdovl2nybc5sdxh0cnvzdc5sds9mvedsq0euy3jsmb0ga1uddgqwbbt 1vyLGHf7yBoMjXV7CJZGUGR08hzANBgkqhkiG9w0BAQsFAAOCAQEAWRIoTruey0uMSs3+g0yT3 IefiTtU10fqOuyOmK8q3MUjmWhwX06CJIbWuTAQ6X4oAEGS0A0TWVHgYuGZwSefMz/CAsDUtmI z9egs6bsfvof+fta68bgot9vblendc3tktjun0r0ukwktjx5gsxfps9fjlpwppbv4xpiimmh4cpy1 duj5qrf26xxynjgbx1uf3uxljbp6s8+p2mmkfaup01nmxwfarye3g8kjovjhauro/8qrduqh48+ HimlMVzxAVhZ/r5ux6auyNafqsjcQ0xkMgRKqPtNZQ5LChbGZyRxO6Itg+JH4CaOkB8mwwVyzJNz EgbArJreC4sBajUdjVw== -----END CERTIFICATE----- Version 3 Serial Number 3803 SigAlg Issuer DN Valid from Valid to Subject DN Public Key Algo SHA256withRSA CN=LuxTrust Global Root, O=LuxTrust s.a., C=LU T13:07:47Z T09:51:37Z CN=LuxTrust Global Timestamping CA, O=LuxTrust S.A., C=LU RSA DigitalId X509 Certificate Public Key d a f7 0d f a ba d8 4e ed 01 e2 06 a0 b3 37 c da 5d 6f df 8c 79 e8 cb ab dd 55 3d e7 2f 07 cb 15 1e 2e c e6 d6 1b 5d c7 26 a1 8b 29 c9 fd a5 a3 ba e7 43 de e 09 b a6 33 be b 1a d2 b4 2e 8b c9 e9 65 ba 75 c7 98 a5 0f 0a a2 4e b 55 e5 b6 2b 1f c8 49 d1 0a 57 ea ee 1c b d8 7f 02 8f f b6 c1 2f 21 4a 1c cd 1e 36 ef b8 49 1a e9 e0 3e ba 99 7a d2 98 0f a6 c4 54 5c 34 3d 22 df 08 9a 46 c7 cd af fb f8 c9 74 bc 1e 98 fc 93 1c 53 ac 47 e6 ee c 9a ca 32 2f e2 fb 62 b2 4a 9c 1b 3c 84 2b ab 1d ff d d4 78 f a a c6 ae 15 e4 8b f c 85 8b fb 3a c bf 3b 80 6c 7f 28 c6 ec bc 1c 5c 8d Authority Key ObjectId: Criticality=false AuthorityKey [ Key [ 0000: f f 3f 1d 1b e4 f o...y 0010: ce.h.. Page 25 / 36

26 Certificate Policies CRL Distribution Points ObjectId: Criticality=false CertificatePolicies [ [ PolicyInformation: [ CertPolicyId: PolicyQualifiers: [PolicyQualifierInfo: [ CPSuri: [ object identifier: uri: ObjectId: Criticality=false CRLDistributionPoints [ 1 CRL Distribution Points: Distribution Point: [ Distribution Point : [URI: Reason Flags: null Issuer: null Subject Key Key Usage ObjectId: Criticality=false SubjectKey [ Key [ 0000: f5 bf 22 c6 1d fe f d 5e c : 19 1d 3c ObjectId: Criticality=false KeyUsage [ Key_CertSign Crl_Sign Basic Constraints ObjectId: Criticality=false BasicConstraints:[ CA:true PathLen:0 Thumbprint SHA b 1d 74 9b e7 ad 3a 7b b b2 81 db cc 5d f6 ea 5f 41 4a 7b 29 b9 70 b6 54 8b SHA1 Thumbprint db 5c ea 71 c0 1f da d8 59 5a ec 2a 00 a Service Status The service is currently under supervision, for compliance with the provisions laid down in the applicable European legislation T00:00:00Z TSP 1, Service 4, History N.1 Service Type Service en LuxTrust Global Time Stamping Authority Digital Id CN=LuxTrust Global Timestamping CA,O=LuxTrust S.A.,C=LU Page 26 / 36

27 Service Status The service is currently under supervision, for compliance with the provisions laid down in the applicable European legislation T00:00:00Z TSP 1, Service 4, History N.2 Service Type Service en LuxTrust Global Time Stamping Authority Digital Id CN=LuxTrust Global Timestamping CA,O=LuxTrust S.A.,C=LU Service Status An accreditation assessment has been performed by the Accreditation Body and the service is found to be in compliance with the provisions laid down in Directive 1999/93/EC T00:00:00Z TSP 1, Service 4, History N.3 Service Type Service en LuxTrust Global Time Stamping Authority Digital Id CN=LuxTrust Global Timestamping CA,O=LuxTrust S.A.,C=LU Service Status The validity of the accreditation assessment has lapsed without the service being re-assessed T23:59:59Z TSP 1, Service 5 Service Type A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service en LuxTrust Global Qualified Certification Authority 2 Digital Id CN=LuxTrust Global Qualified CA 2,O=LuxTrust S.A.,C=LU Page 27 / 36