# Council Decision (EU) 2018/1926 of 19 November 2018 on the position to be taken, on behalf of the European Union, in the Group of Experts on the European Agreement concerning the work of crews of vehicles engaged in international road transport of the United Nations Economic Commission for Europe, Division 2.2.3.2

Extent: E+W+S+N.I.

The following process shall be carried out for the certificate request creation:
(a) The Organisation shall navigate to the user web interface to request the certificate via the URL https://sbca.telesec.de/sbca/ee/login/displayLogin.html?locale=en:, and shall enter the username ‘sbca/CEF_eDelivery.europa.eu’ and the password ‘digit.333’
(b) The Organisation shall click on ‘request’ on the left side of the panel and shall select ‘CEF_TACHOnet’ in the dropdown list.
(c) The Organisation shall populate the certificate request form laid down in Figure 4 with the information in Table 3, clicking on ‘Next (soft-PSE)’ to finish the process.
Requested Fields
Description
Country
C = Country Code, location of certificate owner, verified using a public directory;
Constraints: 2 characters, in accordance to ISO 3166-1, alpha-2, Case Sensitive;
Examples: DE, BE, NL,
Specific cases: UK (for Great-Britain), EL (for Greece)
Organisation/Company (O)
O = Organisation name of the certificate owner
Master domain (OU1)
OU = CEF_eDelivery.europa.eu
Area of responsibility (OU2)
OU = CEF_TACHOnet
Department (OU3)
Mandatory value per ‘AREA OF RESPONSIBILITY’
The content must be checked using a positive list (white list) when the certificate is requested. If the information does not correspond to the list, the request is prevented.
Format:
OU=<TYPE>-<GTC_NUMBER>
Where ‘<TYPE>’ is replaced by AP_PROD: Access Point in Production environment.
And where <GTC_NUMBER> is GTC_OID-1.3.130.0.2018.xxxxxx, where Ares(2018)xxxxxx is the GTC number for the TACHOnet project.
e.g.:
AP_PROD-GTC_OID-1.3.130.0.2018.xxxxxx
First name (CN)
Must be Empty
Last name (CN)
Must start with ‘GRP:’, followed by a common name.
Format:
CN = GRP:<AREA OF RESPONSIBILITY>_<TYPE>_<COUNTRY CODE>_<UNIQUE IDENTIFIER>
e.g.:
GRP:CEF_TACHOnet_AP_PROD_BE_001
Email
E = CEF-EDELIVERY-SUPPORT@ec.europa.eu
Email 1 (SAN)
Must be Empty
Email 2 (SAN)
Must be Empty
Email 3 (SAN)
Must be Empty
Address
Must be Empty
Street
Must be the official address of the Organisation of the Certificate Owner. (Used for the Power of Attorney.)
Street no.
Must be the official address of the Organisation of the Certificate Owner. (Used for the Power of Attorney.)
Zip Code
Must be the official address of the Organisation of the Certificate Owner. (Used for the Power of Attorney.)
Attention : if the ZIP code is NOT a 5-digit ZIP code, leave the ZIP code field empty and put the ZIP code in the City field.
City
Must be the official address of the Organisation of the Certificate Owner. (Used for the Power of Attorney.)
Attention : if the ZIP code is NOT a 5-digit ZIP code, leave the ZIP code field empty and put the ZIP code in the City field.
Phone no
Must be Empty
Identification data
The email address must be the same as the one used for registering the Unique Identifier.
+
Must be the name of the person representing the organisation. (Used for the Power of Attorney)
+ Commercial Register No (only mandatory for private organisations)
Entered at the Local Court of (only required for German and Austrian private organisations)
Revocation password
Mandatory field chosen by the requestor
Revocation password repetition
Mandatory field chosen by the requestor repeated
Table 3. Complete details of each requested field
(d) The selected key length shall be 2 048 (High Grade).
(e) The Organisation shall record the reference number to retrieve the certificate.
(f) The CEF Support Team shall check for new requests of certificates and verify if the information in the certificate request is valid, i.e. that it conforms to the naming convention specified in Appendix 5.1 Certificate Naming Convention.
(g) The CEF Support Team shall verify that the information entered in the request is in a valid format.
(h) When either check from points 5 or 6 above fails, the CEF Support Team shall send an email to the email address provided in the ‘Identification data’ of the request form, with the Domain Owner in cc, in which the Organisation is requested to start the process again. The failed certificate request shall be cancelled.
(i) The CEF Support Team shall send an email to the Registration Authority about the validity of the request. The email shall include:
(1) the name of the Organisation, available in the field ‘Organisation (O)’ of the certificate request;
(2) the certificate data including the name of the AP for which the certificate is to be issued, available in the field ‘Last Name (CN)’ of the certificate request;
(3) the certificate reference number;
(4) the address of the Organisation, its email and the name of the person representing it.

---
Source: https://www.legislation.gov.uk/eudn/2018/1926/annex/ATTACHMENT/division/10/division/2/division/2.2/division/2.2.3/division/2.2.3.2 (the official version)
Page: https://openlegislation.uk/eu-decision-2018-1926/annex-ATTACHMENT/division-10/division-2/division-2.2/division-2.2.3/division-2.2.3.2
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.

