Certificates required for verifying digital signatures

In order to verify files that are digitally signed with an ID-card or a mobile-ID (or another digital document) and/or digitally stamped, all of the root certificates, certifiers and OCSP-responder certificates used to date, incl. expired certificates, must be configured in the information system.

Over the years, different certifier and OCSP-responder combinations have been used, an overview of which is presented in the tables below.

All of the certificates can be downloaded from the SK ID Solutions website:

Signing combinations:

The following certifier/OCSP-responder combinations exist in the case of files signed with ID-cards and mobile-IDs:

ESTEID2018 ESTEID-SK 2015 ESTEID-SK 2011 ESTEID-SK 2007 ESTEID-SK EID-SK 2016 EID-SK 2011 EID-SK 2007 EID-SK 
SK OCSP RESPONDER 2011 N/A N/A N/A N/A
ESTEID-SK 2007 OCSP RESPONDER 2010 N/A N/A N/A N/A N/A N/A N/A N/A
ESTEID-SK 2007 OCSP RESPONDER N/A N/A N/A N/A N/A N/A N/A N/A
ESTEID-SK OCSP RESPONDER 2005 N/A N/A N/A N/A N/A N/A N/A N/A
ESTEID-SK OCSP RESPONDER N/A N/A N/A N/A N/A N/A N/A N/A
EID-SK 2007 OCSP RESPONDER 2010 N/A N/A N/A N/A N/A N/A N/A N/A
EID-SK 2007 OCSP RESPONDER N/A N/A N/A N/A N/A N/A N/A N/A
EID-SK OCSP RESPONDER N/A N/A N/A N/A N/A N/A N/A N/A

*N/A – such a combination does not exist

Digital stamping combinations:

The following certifier/OCSP-responder combinations exist in the case of digitally stamped files:

KLASS3-SK 2016 KLASS3-SK 2010 
(valid from 2015)
KLASS3-SK 2010 
(valid from 2011)
KLASS3-SK 2010 
(valid from 2010)
KLASS3-SK
SK OCSP RESPONDER 2011 (in use as of 15.08.16) N/A
KLASS3-SK 2010 OCSP RESPONDER N/A N/A
KLASS3-SK OCSP RESPONDER 2009 N/A N/A N/A N/A
KLASS3-SK OCSP RESPONDER (valid from 2006) N/A N/A N/A N/A
KLASS3-SK OCSP RESPONDER (valid from 2003) N/A N/A N/A N/A

 *N/A – such a combination does not exist