SIST EN 319 412-3 V1.3.1:2023

• Abstract:

  The present document specifies a certificate profile for certificates issued to legal persons. The profile defined in the; present document builds on requirements defined in ETSI EN 319 412-2 [2].; The present document supports the requirements of EU qualified certificates as specified in the Regulation (EU); No 910/2014 [i.3] as well as other forms of certificate.

• Status: Published
• Public Enquiry End Date: 20-Sep-2023
• Publication Date: 13-Nov-2023
• ICS: 03.080.99 - Other services
• ICS: 35.040.01 - Information coding in general
• Technical Committee: SPN - Services and Protocols for Networks
• Current Stage: 6060 - National Implementation/Publication (Adopted Project)
• Start Date: 09-Nov-2023
• Due Date: 14-Jan-2024
• Completion Date: 14-Nov-2023
• Ref Project: ETSI EN 319 412-3 V1.3.1 (2023-09) - Electronic Signatures and Infrastructures (ESI); Certificate Profiles; Part 3: Certificate profile for certificates issued to legal persons

Overview

SIST EN 319 412-3 V1.3.1:2023 is a Slovenian-adopted European Standard focused on the provision of electronic certificates issued to legal persons within digital trust service environments. Published by SIST and based on ETSI EN 319 412-3, this standard specifies the precise certificate profile requirements for certificates used by organizations, supporting both EU qualified certificates under the eIDAS Regulation (EU) No 910/2014 and other certificate types.

The standard builds on the foundational requirements laid out in ETSI EN 319 412-2, which addresses certificates for natural persons, ensuring compatibility and interoperability within a wider trust services framework for electronic signatures and seals.

Key keywords: electronic signatures, certificate profiles, qualified certificates, legal persons, trust services, eIDAS compliance.

Key Topics

• Certificate Profile Requirements
  The standard details the required structure for certificates issued to legal entities (e.g., corporations or organizations). This includes necessary fields and extensions, such as country name, organization name, organization identifier, and common name, all essential for uniquely identifying a legal person.

• EU Qualified Certificate Support
  The standard ensures that certificates meet requirements set out in the eIDAS Regulation (EU) No 910/2014, supporting trusted electronic transactions and identity management across the European Union.

• Standardized Attributes
  It references ITU-T X.520 for attribute types to ensure international compatibility, and clarifies how naming attributes like organization name and common name should be implemented.

• Key Usage Extensions
  The document specifies allowed types and usages for certificate key pairs, particularly when used for digital signatures, advanced electronic seals, and ensuring content integrity and origin within electronic transactions.

Applications

• Digital Trust Services
  Organizations can use certificates conforming to this standard to establish secure, authenticated electronic seals and signatures, which are legally recognized throughout the EU under eIDAS.

• Cross-Border Electronic Transactions
  The certificate profile improves interoperability for international digital transactions, enabling cross-border business, secure document exchange, and digital contract signing.

• Regulatory Compliance
  Businesses and trust service providers benefit from a clear framework for issuing and handling qualified certificates for legal persons, ensuring compliance with the required EU and international regulations.

• Advanced Business Process Automation
  The profile supports a range of use cases including e-invoicing, electronic procurement, secure communication between enterprises, and automated document workflows, where the identity of an organization must be reliably established and maintained.

Related Standards

• ETSI EN 319 412-1: Overview and common data structures for electronic signature certificates.
• ETSI EN 319 412-2: Certificate profiles for certificates issued to natural persons, serving as the basis for requirements in Part 3.
• IETF RFC 5280: Defines the X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile, internationally recognized for certificate structure.
• Recommendation ITU-T X.520: Specifies attribute types for Directory services, referenced for the structure of certificate subject fields.

Implementing SIST EN 319 412-3 V1.3.1:2023 ensures that digital certificates for organizations meet both technical and regulatory requirements, enhancing security, interoperability, and legal certainty in electronic transactions for businesses and trust service providers across Europe and beyond.

Draft ETSI EN 319 412-3 V1.3.0 (2023-06)

EUROPEAN STANDARD
Electronic Signatures and Infrastructures (ESI);
Certificate Profiles;
Part 3: Certificate profile for certificates issued
to legal persons
2 Draft ETSI EN 319 412-3 V1.3.0 (2023-06)

Reference
REN/ESI-0019412-3
Keywords
electronic signature, IP, profile, security,
trust services
ETSI
650 Route des Lucioles
F-06921 Sophia Antipolis Cedex - FRANCE

Tel.: [phone]  Fax: [phone]

Siret N° 348 623 562 00017 - APE 7112B
Association à but non lucratif enregistrée à la
Sous-Préfecture de Grasse (06) N° w061004871

Important notice
The present document can be downloaded from:
https://www.etsi.org/standards-search
The present document may be made available in electronic versions and/or in print. The content of any electronic and/or
print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any
existing or perceived difference in contents between such versions and/or in print, the prevailing version of an ETSI
deliverable is the one made publicly available in PDF format at www.etsi.org/deliver.
Users of the present document should be aware that the document may be subject to revision or change of status.
Information on the current status of this and other ETSI documents is available at
https://portal.etsi.org/TB/ETSIDeliverableStatus.aspx
If you find errors in the present document, please send your comment to one of the following services:
https://portal.etsi.org/People/CommiteeSupportStaff.aspx
If you find a security vulnerability in the present document, please report it through our
Coordinated Vulnerability Disclosure Program:
https://www.etsi.org/standards/coordinated-vulnerability-disclosure
Notice of disclaimer & limitation of liability
The information provided in the present deliverable is directed solely to professionals who have the appropriate degree of
experience to understand and interpret its content in accordance with generally accepted engineering or
other professional standard and applicable regulations.
No recommendation as to products and services or vendors is made or should be implied.
In no event shall ETSI be held liable for loss of profits or any other incidental or consequential damages.

Any software contained in this deliverable is provided "AS IS" with no warranties, express or implied, including but not
limited to, the warranties of merchantability, fitness for a particular purpose and non-infringement of intellectual property
rights and ETSI shall not be held liable in any event for any damages whatsoever (including, without limitation, damages
for loss of profits, business interruption, loss of information, or any other pecuniary loss) arising out of or related to the use
of or inability to use the software.
Copyright Notification
No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and
microfilm except as authorized by written permission of ETSI.
The content of the PDF version shall not be modified without the written authorization of ETSI.
The copyright and the foregoing restriction extend to reproduction in all media.

© ETSI 2023.
All rights reserved.
ETSI
3 Draft ETSI EN 319 412-3 V1.3.0 (2023-06)
Contents
Intellectual Property Rights . 4
Foreword . 4
Modal verbs terminology . 4
Introduction . 5
1 Scope . 6
2 References . 6
2.1 Normative references . 6
2.2 Informative references . 6
3 Definition of terms, symbols, abbreviations and notations . 7
3.1 Terms . 7
3.2 Symbols . 7
3.3 Abbreviations . 7
3.4 Notations . 7
4 Profile requirements . 7
4.1 Generic requirements . 7
4.2 Basic certificate fields . 7
4.2.1 Subject . 7
4.3 Standard certificate extensions . 8
4.3.1 Key usage. 8
Annex A (informative): Change History . 9
History . 10

ETSI
4 Draft ETSI EN 319 412-3 V1.3.0 (2023-06)
Intellectual Property Rights
Essential patents
IPRs essential or potentially essential to normative deliverables may have been declared to ETSI. The declarations
pertaining to these essential IPRs, if any, are publicly available for ETSI members and non-members, and can be
found in ETSI SR 000 314: "Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to
ETSI in respect of ETSI standards", which is available from the ETSI Secretariat. Latest updates are available on the
ETSI Web server (https://ipr.etsi.org/).
Pursuant to the ETSI Directives including the ETSI IPR Policy, no investigation regarding the essentiality of IPRs,
including IPR searches, has been carried out by ETSI. No guarantee can be given as to the existence of other IPRs not
referenced in ETSI SR 000 314 (or the updates on the ETSI Web server) which are, or may be, or may become,
essential to the present document.
Trademarks
The present document may include trademarks and/or tradenames which are asserted and/or registered by their owners.
ETSI claims no ownership of these except for any which are indicated as being the property of ETSI, and conveys no
right to use or reproduce any trademark and/or tradename. Mention of those trademarks in the present document does
not constitute an endorsement by ETSI of products, services or organizations associated with those trademarks.
DECT™, PLUGTESTS™, UMTS™ and the ETSI logo are trademarks of ETSI registered for the benefit of its

Members. 3GPP™ and LTE™ are trademarks of ETSI registered for the benefit of its Members and of the 3GPP
Organizational Partners. oneM2M™ logo is a trademark of ETSI registered for the benefit of its Members and of the ®
oneM2M Partners. GSM and the GSM logo are trademarks registered and owned by the GSM Association.
Foreword
This draft European Standard (EN) has been produced by ETSI Technical Committee Electronic Signatures and
Infrastructures (ESI), and is now submitted for the combined Public Enquiry and Vote phase of the ETSI standards EN
Approval Procedure.
The present document is part 3 of multi-part deliverable covering the Certificate Profiles. Full details of the entire series
can be found in part 1 [i.4].
Proposed national transposition dates
Date of latest announcement of this EN (doa): 3 months after ETSI publication
Date of latest publication of new National Standard
or endorsement of this EN (dop/e): 6 months after doa
Date of withdrawal of any conflicting National Standard (dow): 6
...

EUROPEAN STANDARD
Electronic Signatures and Infrastructures (ESI);
Certificate Profiles;
Part 3: Certificate profile for certificates issued
to legal persons
2 ETSI EN 319 412-3 V1.3.1 (2023-09)

Reference
REN/ESI-0019412-3
Keywords
electronic signature, IP, profile, security, trust
services
ETSI
650 Route des Lucioles
F-06921 Sophia Antipolis Cedex - FRANCE

Tel.: [phone]  Fax: [phone]

Siret N° 348 623 562 00017 - APE 7112B
Association à but non lucratif enregistrée à la
Sous-Préfecture de Grasse (06) N° w061004871

Important notice
The present document can be downloaded from:
https://www.etsi.org/standards-search
The present document may be made available in electronic versions and/or in print. The content of any electronic and/or
print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any
existing or perceived difference in contents between such versions and/or in print, the prevailing version of an ETSI
deliverable is the one made publicly available in PDF format at www.etsi.org/deliver.
Users of the present document should be aware that the document may be subject to revision or change of status.
Information on the current status of this and other ETSI documents is available at
https://portal.etsi.org/TB/ETSIDeliverableStatus.aspx
If you find errors in the present document, please send your comment to one of the following services:
https://portal.etsi.org/People/CommiteeSupportStaff.aspx
If you find a security vulnerability in the present document, please report it through our
Coordinated Vulnerability Disclosure Program:
https://www.etsi.org/standards/coordinated-vulnerability-disclosure
Notice of disclaimer & limitation of liability
The information provided in the present deliverable is directed solely to professionals who have the appropriate degree of
experience to understand and interpret its content in accordance with generally accepted engineering or
other professional standard and applicable regulations.
No recommendation as to products and services or vendors is made or should be implied.
In no event shall ETSI be held liable for loss of profits or any other incidental or consequential damages.

Any software contained in this deliverable is provided "AS IS" with no warranties, express or implied, including but not
limited to, the warranties of merchantability, fitness for a particular purpose and non-infringement of intellectual property
rights and ETSI shall not be held liable in any event for any damages whatsoever (including, without limitation, damages
for loss of profits, business interruption, loss of information, or any other pecuniary loss) arising out of or related to the use
of or inability to use the software.
Copyright Notification
No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and
microfilm except as authorized by written permission of ETSI.
The content of the PDF version shall not be modified without the written authorization of ETSI.
The copyright and the foregoing restriction extend to reproduction in all media.

© ETSI 2023.
All rights reserved.
ETSI
3 ETSI EN 319 412-3 V1.3.1 (2023-09)
Contents
Intellectual Property Rights . 4
Foreword . 4
Modal verbs terminology . 4
Introduction . 5
1 Scope . 6
2 References . 6
2.1 Normative references . 6
2.2 Informative references . 6
3 Definition of terms, symbols, abbreviations and notations . 7
3.1 Terms . 7
3.2 Symbols . 7
3.3 Abbreviations . 7
3.4 Notations . 7
4 Profile requirements . 7
4.1 Generic requirements . 7
4.2 Basic certificate fields . 7
4.2.1 Subject . 7
4.3 Standard certificate extensions . 8
4.3.1 Key usage. 8
Annex A (informative): Change History . 9
History . 10

ETSI
4 ETSI EN 319 412-3 V1.3.1 (2023-09)
Intellectual Property Rights
Essential patents
IPRs essential or potentially essential to normative deliverables may have been declared to ETSI. The declarations
pertaining to these essential IPRs, if any, are publicly available for ETSI members and non-members, and can be
found in ETSI SR 000 314: "Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to
ETSI in respect of ETSI standards", which is available from the ETSI Secretariat. Latest updates are available on the
ETSI Web server (https://ipr.etsi.org/).
Pursuant to the ETSI Directives including the ETSI IPR Policy, no investigation regarding the essentiality of IPRs,
including IPR searches, has been carried out by ETSI. No guarantee can be given as to the existence of other IPRs not
referenced in ETSI SR 000 314 (or the updates on the ETSI Web server) which are, or may be, or may become,
essential to the present document.
Trademarks
The present document may include trademarks and/or tradenames which are asserted and/or registered by their owners.
ETSI claims no ownership of these except for any which are indicated as being the property of ETSI, and conveys no
right to use or reproduce any trademark and/or tradename. Mention of those trademarks in the present document does
not constitute an endorsement by ETSI of products, services or organizations associated with those trademarks.
DECT™, PLUGTESTS™, UMTS™ and the ETSI logo are trademarks of ETSI registered for the benefit of its

Members. 3GPP™ and LTE™ are trademarks of ETSI registered for the benefit of its Members and of the 3GPP
Organizational Partners. oneM2M™ logo is a trademark of ETSI registered for the benefit of its Members and of the ®
oneM2M Partners. GSM and the GSM logo are trademarks registered and owned by the GSM Association.
Foreword
This European Standard (EN) has been produced by ETSI Technical Committee Electronic Signatures and
Infrastructures (ESI).
The present document is part 3 of multi-part deliverable covering the Certificate Profiles. Full details of the entire series
can be found in part 1 [i.4].
National transposition dates
Date of adoption of this EN: 21 September 2023
Date of latest announcement of this EN (doa): 31 December 2023
Date of latest publication of new National Standard
or endorsement of this EN (dop/e): 30 June 2024
Date of withdrawal of any conflicting National Standard (dow): 30 June 2024

Modal verbs terminology
In the present docum
...

SLOVENSKI STANDARD
01-december-2023
Elektronski podpisi in infrastruktura (ESI) - Profili potrdil - 3. del: Profil potrdila za
potrdila, izdana pravnim osebam
Electronic Signatures and Infrastructures (ESI) - Certificate Profiles - Part 3: Certificate
profile for certificates issued to legal persons
Ta slovenski standard je istoveten z: ETSI EN 319 412-3 V1.3.1 (2023-09)
ICS:
03.080.99 Druge storitve Other services
35.040.01 Kodiranje informacij na Information coding in general
splošno
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EUROPEAN STANDARD
Electronic Signatures and Infrastructures (ESI);
Certificate Profiles;
Part 3: Certificate profile for certificates issued
to legal persons
2 ETSI EN 319 412-3 V1.3.1 (2023-09)

Reference
REN/ESI-0019412-3
Keywords
electronic signature, IP, profile, security, trust
services
ETSI
650 Route des Lucioles
F-06921 Sophia Antipolis Cedex - FRANCE

Tel.: [phone]  Fax: [phone]

Siret N° 348 623 562 00017 - APE 7112B
Association à but non lucratif enregistrée à la
Sous-Préfecture de Grasse (06) N° w061004871

Important notice
The present document can be downloaded from:
https://www.etsi.org/standards-search
The present document may be made available in electronic versions and/or in print. The content of any electronic and/or
print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any
existing or perceived difference in contents between such versions and/or in print, the prevailing version of an ETSI
deliverable is the one made publicly available in PDF format at www.etsi.org/deliver.
Users of the present document should be aware that the document may be subject to revision or change of status.
Information on the current status of this and other ETSI documents is available at
https://portal.etsi.org/TB/ETSIDeliverableStatus.aspx
If you find errors in the present document, please send your comment to one of the following services:
https://portal.etsi.org/People/CommiteeSupportStaff.aspx
If you find a security vulnerability in the present document, please report it through our
Coordinated Vulnerability Disclosure Program:
https://www.etsi.org/standards/coordinated-vulnerability-disclosure
Notice of disclaimer & limitation of liability
The information provided in the present deliverable is directed solely to professionals who have the appropriate degree of
experience to understand and interpret its content in accordance with generally accepted engineering or
other professional standard and applicable regulations.
No recommendation as to products and services or vendors is made or should be implied.
In no event shall ETSI be held liable for loss of profits or any other incidental or consequential damages.

Any software contained in this deliverable is provided "AS IS" with no warranties, express or implied, including but not
limited to, the warranties of merchantability, fitness for a particular purpose and non-infringement of intellectual property
rights and ETSI shall not be held liable in any event for any damages whatsoever (including, without limitation, damages
for loss of profits, business interruption, loss of information, or any other pecuniary loss) arising out of or related to the use
of or inability to use the software.
Copyright Notification
No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and
microfilm except as authorized by written permission of ETSI.
The content of the PDF version shall not be modified without the written authorization of ETSI.
The copyright and the foregoing restriction extend to reproduction in all media.

© ETSI 2023.
All rights reserved.
ETSI
3 ETSI EN 319 412-3 V1.3.1 (2023-09)
Contents
Intellectual Property Rights . 4
Foreword . 4
Modal verbs terminology . 4
Introduction . 5
1 Scope . 6
2 References . 6
2.1 Normative references . 6
2.2 Informative references . 6
3 Definition of terms, symbols, abbreviations and notations . 7
3.1 Terms . 7
3.2 Symbols . 7
3.3 Abbreviations . 7
3.4 Notations . 7
4 Profile requirements . 7
4.1 Generic requirements . 7
4.2 Basic certificate fields . 7
4.2.1 Subject . 7
4.3 Standard certificate extensions . 8
4.3.1 Key usage. 8
Annex A (informative): Change History . 9
History . 10

ETSI
4 ETSI EN 319 412-3 V1.3.1 (2023-09)
Intellectual Property Rights
Essential patents
IPRs essential or potentially essential to normative deliverables may have been declared to ETSI. The declarations
pertaining to these essential IPRs, if any, are publicly available for ETSI members and non-members, and can be
found in ETSI SR 000 314: "Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to
ETSI in respect of ETSI standards", which is available from the ETSI Secretariat. Latest updates are available on the
ETSI Web server (https://ipr.etsi.org/).
Pursuant to the ETSI Directives including the ETSI IPR Policy, no investigation regarding the essentiality of IPRs,
including IPR searches, has been carried out by ETSI. No guarantee can be given as to the existence of other IPRs not
referenced in ETSI SR 000 314 (or the updates on the ETSI Web server) which are, or may be, or may become,
essential to the present document.
Trademarks
The present document may include trademarks and/or tradenames which are asserted and/or registered by their owners.
ETSI claims no ownership of these except for any which are indicated as being the property of ETSI, and conveys no
right to use or reproduce any trademark and/or tradename. Mention of those trademarks in the present document does
not constitute an endorsement by ETSI of products, services or organizations associated with those trademarks.
DECT™, PLUGTESTS™, UMTS™ and the ETSI logo are trademarks of ETSI registered for the benefit of its

Members. 3GPP™ and LTE™ are trademarks of ETSI registered for the benefit of its Members and of the 3GPP
Organizational Partners. oneM2M™ logo is a trademark of ETSI registered for the benefit of its Members and of the ®
oneM2M Partners. GSM and the GSM logo are trademarks registered and owned by the GSM Association.
Foreword
This European Standard (EN) has been produced by ETSI Technical Committee Electronic Signatures and
Infrastructures (ESI).
The present document is part 3 of multi-part deliverable covering the Certificate Profiles. Full details of the entire series
can be found in part 1 [i.4].
...