{
  "url": "https://openlegislation.uk/eu-decision-2015-46/annex",
  "json_url": "https://openlegislation.uk/eu-decision-2015-46/annex.json",
  "legislation": "eudn/2015/46",
  "legislation_title": "Decision (EU) 2016/187 of the European Central Bank of 11 December 2015 amending Decision ECB/2013/1 laying down the framework for a public key infrastructure for the European System of Central Banks (ECB/2015/46)",
  "legislation_url": "https://openlegislation.uk/eu-decision-2015-46",
  "path": "annex",
  "kind": "annex",
  "number": null,
  "heading": null,
  "text": "ANNEX\nInformation concerning the ESCB-PKI certification authority, including its identity, and its technical components\nThe ESCB-PKI certification authority is identified in its certificate as the issuer and its private key is used to sign certificates. The ESCB-PKI certification authority is in charge of:\n(i) issuing private and public key certificates;\n(ii) issuing revocation lists;\n(iii) generating key pairs associated with specific certificates, e.g. those that require key recovery;\n(iv) maintaining overall responsibility for the ESCB-PKI and ensuring that all the requirements necessary to operate it are met.\nThe ESCB-PKI certification authority includes all individuals, policies, procedures and computer systems entrusted with issuing electronic certificates and assigning them to the certificate subscribers.\nThe ESCB-PKI certification authority includes two technical components:\nThe Root ESCB-PKI certification authority: This certification authority, at the first level, only issues certificates for itself and its subordinate certification authorities. It is only in operation when carrying out its own narrowly-defined responsibilities. Its most significant data are:\na)) SHA-1 certificate:\nDistinguished name\nCN=ESCB-PKI ROOT CA, O=EUROPEAN SYSTEM OF CENTRAL BANKS, C=EU\nSerial number\n596F AC4C 218C 21BC 4E00 6B42 A164 46DD\nDistinguished name of issuer\nCN=ESCB-PKI ROOT CA, O=EUROPEAN SYSTEM OF CENTRAL BANKS, C=EU\nValidity period\nFrom 21-06-2011 11:58:26 to 21-06-2041 11:58:26\nMessage digest (SHA-1)\nCEFE 6C32 E850 994A 09EA 1A77 0C60 3D90 ADC9 9192\nMessage Digest (SHA-256)\nC919 CF49 C024 7E50 2E0C C3C9 81E0 FB88 A013 AA2B 15C9 5142 F491 BDE7 E403 E3FB\nCryptographic algorithms\nSHA-1/RSA 4096\nb)) SHA-256 certificate:\nDistinguished name\nCN=ESCB-PKI ROOT CA, O=EUROPEAN SYSTEM OF CENTRAL BANKS, C=EU\nSerial number\n4431 9C5F 91E8 162F 4E00 73F6 6AB8 71D8\nDistinguished name of Issuer\nCN=ESCB-PKI ROOT CA, O=EUROPEAN SYSTEM OF CENTRAL BANKS, C=EU\nValidity period\nFrom 21-06-2011 12:35:34 to 21-06-2041 12:35:34\nMessage digest (SHA-1)\n3663 2FBA FB19 BDBC A202 3994 1926 ED48 4D72 DD4B\nMessage Digest (SHA-256)\n7963 2A97 1D12 A889 9724 BB35 C37B 51D2 3E21 4DF9 20C3 2450 093E 0EA7 49FB AAEB\nCryptographic algorithms\nSHA-256/RSA 4096\nThe Online ESCB-PKI certification authority: This certification authority, at the second level, is subordinate to the Root ESCB-PKI certification authority. It is responsible for issuing ESCB-PKI certificates for users. Its most significant data are:\na)) SHA-1 certificate:\nDistinguished name\nCN= ESCB-PKI ONLINE CA, O=EUROPEAN SYSTEM OF CENTRAL BANKS, C=EU\nSerial number\n2C13 E18F FDB5 91CE 4E9 550B B5A3 F59C\nDistinguished name of issuer\nCN=ESCB-PKI ROOT CA, O=EUROPEAN SYSTEM OF CENTRAL BANKS, C=EU\nValidity period\nFrom 22-07-2011 12:46:35 to 22-07-2026 12:46:35\nMessage digest (SHA-1)\nD316 026C D2CF 1A8C 4AA3 8C29 EE3D 591E 4286 AD08\nMessage Digest (SHA-256)\n4B18 7644 BF79 4F83 D000 999D 7927 433F 75F3 CFB1 643A 6D0F 8A25 9435 BE86 1B7A\nCryptographic algorithms\nSHA-1/RSA 4096\nb)) SHA-256 certificate:\nDistinguished name\nCN= ESCB-PKI ONLINE CA, O=EUROPEAN SYSTEM OF CENTRAL BANKS, C=EU\nSerial number\n660C 9B12 9A0A 6C21 5509 38DD 54A0 ED2D\nDistinguished name of Issuer\nCN=ESCB-PKI ROOT CA, O=EUROPEAN SYSTEM OF CENTRAL BANKS, C=EU\nValidity period\nFrom 22-07-2011 12:46:35 to 22-07-2026 12:46:35\nMessage digest (SHA-1)\nE976 D216 4A5F 62DA C058 6BE0 EC10 EF24 36B8 12AC\nMessage Digest (SHA-256)\n1335 26DC 99E9 CC36 62F8 F5FA 2006 3005 BA90 E663 2BF3 4F18 A84B A39B 5FAA 5700\nCryptographic algorithms\nSHA-256/RSA 4096",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "footnote",
      "label": "f1",
      "text": "This certificate will be used only in systems that do not support higher algorithms."
    },
    {
      "type": "footnote",
      "label": "f2",
      "text": "This certificate will be used only in systems that do not support higher algorithms."
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2015/46/annex",
    "retrieved_at": "2026-11-01T15:14:30.512124+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}