In order to verify files that are digitally signed with an ID-card or a mobile-ID (or another digital document) and/or digitally stamped, all of the root certificates, certifiers and OCSP-responder certificates used to date, incl. expired certificates, must be configured in the information system.
Over the years, different certifier and OCSP-responder combinations have been used, an overview of which is presented in the tables below.
All of the certificates can be downloaded from the SK ID Solutions website:
Signing combinations:
The following certifier/OCSP-responder combinations exist in the case of files signed with ID-cards and mobile-IDs:
| ESTEID2018 | ESTEID-SK 2015 | ESTEID-SK 2011 | ESTEID-SK 2007 | ESTEID-SK | EID-SK 2016 | EID-SK 2011 | EID-SK 2007 | EID-SK | |
|---|---|---|---|---|---|---|---|---|---|
| SK OCSP RESPONDER 2011 | ✔ | ✔ | ✔ | N/A | N/A | ✔ | ✔ | N/A | N/A |
| ESTEID-SK 2007 OCSP RESPONDER 2010 | N/A | N/A | N/A | ✔ | N/A | N/A | N/A | N/A | N/A |
| ESTEID-SK 2007 OCSP RESPONDER | N/A | N/A | N/A | ✔ | N/A | N/A | N/A | N/A | N/A |
| ESTEID-SK OCSP RESPONDER 2005 | N/A | N/A | N/A | N/A | ✔ | N/A | N/A | N/A | N/A |
| ESTEID-SK OCSP RESPONDER | N/A | N/A | N/A | N/A | ✔ | N/A | N/A | N/A | N/A |
| EID-SK 2007 OCSP RESPONDER 2010 | N/A | N/A | N/A | N/A | N/A | N/A | N/A | ✔ | N/A |
| EID-SK 2007 OCSP RESPONDER | N/A | N/A | N/A | N/A | N/A | N/A | N/A | ✔ | N/A |
| EID-SK OCSP RESPONDER | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | ✔ |
*N/A - such a combination does not exist
Digital stamping combinations:
The following certifier/OCSP-responder combinations exist in the case of digitally stamped files:
| KLASS3-SK 2016 | KLASS3-SK 2010 (valid from 2015) |
KLASS3-SK 2010 (valid from 2011) |
KLASS3-SK 2010 (valid from 2010) |
KLASS3-SK | |
|---|---|---|---|---|---|
| SK OCSP RESPONDER 2011 (in use as of 15.08.16) | ✔ | ✔ | ✔ | ✔ | N/A |
| KLASS3-SK 2010 OCSP RESPONDER | N/A | ✔ | ✔ | ✔ | N/A |
| KLASS3-SK OCSP RESPONDER 2009 | N/A | N/A | N/A | N/A | ✔ |
| KLASS3-SK OCSP RESPONDER (valid from 2006) | N/A | N/A | N/A | N/A | ✔ |
| KLASS3-SK OCSP RESPONDER (valid from 2003) | N/A | N/A | N/A | N/A | ✔ |
*N/A - such a combination does not exist