2013/662/EU: Commission Implementing Decision of 14 October 2013 amending Decision 2009/767/EC as regards the establishment, maintenance and publication of trusted lists of certification service providers supervised/accredited by Member States (notified under document C(2013) 6543) Text with EEA relevance

‘1 Each Member State shall establish, maintain and publish, in accordance with the technical specifications set out in the Annex, a “trusted list” containing, as a minimum, information related to the certification service providers issuing qualified certificates to the public who are supervised/accredited by them.

2 Member States shall establish and publish a machine processable form of the trusted list in accordance with the specifications set out in the Annex. If a Member State chooses to publish a human readable form of its trusted list, that form of the trusted list shall comply with the specifications set out in the Annex.

2a Member States shall sign electronically the machine processable form of their trusted list in order to ensure its authenticity and integrity. If a Member State publishes a human readable form of the trusted list, it shall ensure that this form of the trusted list contains the same data as the machine processable form and they shall sign it electronically with the same certificate as used for the machine readable form.’;

‘2b Member States shall ensure that the machine processable form of their trusted list is accessible at its location of publication at any time, without interruption, except for maintenance purposes.’;

‘3 Member States shall notify to the Commission the following information: (a) the body or bodies responsible for the establishment, maintenance and publication of the machine processable form of the trusted list; (b) the location where the machine processable form of the trusted list, is published; (c) two or more scheme operator public key certificates, with shifted validity periods of at least three months which correspond to the private keys that can be used to sign electronically the machine processable form of the trusted list; (d) any changes to the information in points (a), (b) and (c).’;

‘3a If a Member State publishes a human readable form of the trusted list, information referred to in paragraph 3 shall be notified for the human readable form as well.’;

This Decision shall apply from 1 February 2014.

This Decision is addressed to the Member States.