ETSI TS 101 456

To define minimum essential requirements for CSP's operating at different levels of trust. In the case of CSPs issuing qualified certificates, through the use of CSPs supporting this policy, users ca be assured that the legal rquirements of electronic equivalents to hand-written signatures can be met. Te specification is to be based on the framework defined in RFC 2527. (The original scope was: to cover specific infrastructure aspects related to electronic signature standardization for business transactions, with the focus being on purchase requisition, contract and invoice applications. The areas to be covered include: Technical framework for qualified Electronic Signatures using asymmetric cryptography, certificate-based verification and hardware devices for signature creation Electronic Signature syntax and encoding formats Standard for the use of X.509 public key certificates as qualified certificates Standard for the profiling of CRLs, ARLs, OCSP responses and Time Stamps Signature Policy)