# Decision (EU) 2016/187 of the European Central Bank of 11 December 2015 amending Decision ECB/2013/1 laying down the framework for a public key infrastructure for the European System of Central Banks (ECB/2015/46), Annex

Extent: E+W+S+N.I.

ANNEX
Information concerning the ESCB-PKI certification authority, including its identity, and its technical components
The ESCB-PKI certification authority is identified in its certificate as the issuer and its private key is used to sign certificates. The ESCB-PKI certification authority is in charge of:
(i) issuing private and public key certificates;
(ii) issuing revocation lists;
(iii) generating key pairs associated with specific certificates, e.g. those that require key recovery;
(iv) maintaining overall responsibility for the ESCB-PKI and ensuring that all the requirements necessary to operate it are met.
The ESCB-PKI certification authority includes all individuals, policies, procedures and computer systems entrusted with issuing electronic certificates and assigning them to the certificate subscribers.
The ESCB-PKI certification authority includes two technical components:
The Root ESCB-PKI certification authority: This certification authority, at the first level, only issues certificates for itself and its subordinate certification authorities. It is only in operation when carrying out its own narrowly-defined responsibilities. Its most significant data are:
a)) SHA-1 certificate:
Distinguished name
CN=ESCB-PKI ROOT CA, O=EUROPEAN SYSTEM OF CENTRAL BANKS, C=EU
Serial number
596F AC4C 218C 21BC 4E00 6B42 A164 46DD
Distinguished name of issuer
CN=ESCB-PKI ROOT CA, O=EUROPEAN SYSTEM OF CENTRAL BANKS, C=EU
Validity period
From 21-06-2011 11:58:26 to 21-06-2041 11:58:26
Message digest (SHA-1)
CEFE 6C32 E850 994A 09EA 1A77 0C60 3D90 ADC9 9192
Message Digest (SHA-256)
C919 CF49 C024 7E50 2E0C C3C9 81E0 FB88 A013 AA2B 15C9 5142 F491 BDE7 E403 E3FB
Cryptographic algorithms
SHA-1/RSA 4096
b)) SHA-256 certificate:
Distinguished name
CN=ESCB-PKI ROOT CA, O=EUROPEAN SYSTEM OF CENTRAL BANKS, C=EU
Serial number
4431 9C5F 91E8 162F 4E00 73F6 6AB8 71D8
Distinguished name of Issuer
CN=ESCB-PKI ROOT CA, O=EUROPEAN SYSTEM OF CENTRAL BANKS, C=EU
Validity period
From 21-06-2011 12:35:34 to 21-06-2041 12:35:34
Message digest (SHA-1)
3663 2FBA FB19 BDBC A202 3994 1926 ED48 4D72 DD4B
Message Digest (SHA-256)
7963 2A97 1D12 A889 9724 BB35 C37B 51D2 3E21 4DF9 20C3 2450 093E 0EA7 49FB AAEB
Cryptographic algorithms
SHA-256/RSA 4096
The Online ESCB-PKI certification authority: This certification authority, at the second level, is subordinate to the Root ESCB-PKI certification authority. It is responsible for issuing ESCB-PKI certificates for users. Its most significant data are:
a)) SHA-1 certificate:
Distinguished name
CN= ESCB-PKI ONLINE CA, O=EUROPEAN SYSTEM OF CENTRAL BANKS, C=EU
Serial number
2C13 E18F FDB5 91CE 4E9 550B B5A3 F59C
Distinguished name of issuer
CN=ESCB-PKI ROOT CA, O=EUROPEAN SYSTEM OF CENTRAL BANKS, C=EU
Validity period
From 22-07-2011 12:46:35 to 22-07-2026 12:46:35
Message digest (SHA-1)
D316 026C D2CF 1A8C 4AA3 8C29 EE3D 591E 4286 AD08
Message Digest (SHA-256)
4B18 7644 BF79 4F83 D000 999D 7927 433F 75F3 CFB1 643A 6D0F 8A25 9435 BE86 1B7A
Cryptographic algorithms
SHA-1/RSA 4096
b)) SHA-256 certificate:
Distinguished name
CN= ESCB-PKI ONLINE CA, O=EUROPEAN SYSTEM OF CENTRAL BANKS, C=EU
Serial number
660C 9B12 9A0A 6C21 5509 38DD 54A0 ED2D
Distinguished name of Issuer
CN=ESCB-PKI ROOT CA, O=EUROPEAN SYSTEM OF CENTRAL BANKS, C=EU
Validity period
From 22-07-2011 12:46:35 to 22-07-2026 12:46:35
Message digest (SHA-1)
E976 D216 4A5F 62DA C058 6BE0 EC10 EF24 36B8 12AC
Message Digest (SHA-256)
1335 26DC 99E9 CC36 62F8 F5FA 2006 3005 BA90 E663 2BF3 4F18 A84B A39B 5FAA 5700
Cryptographic algorithms
SHA-256/RSA 4096

---
Source: https://www.legislation.gov.uk/eudn/2015/46/annex (the official version)
Page: https://openlegislation.uk/eu-decision-2015-46/annex
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.