{
  "url": "https://openlegislation.uk/eu-decision-2018-1926/annex-ATTACHMENT/division-10/division-4/division-4.4",
  "json_url": "https://openlegislation.uk/eu-decision-2018-1926/annex-ATTACHMENT/division-10/division-4/division-4.4.json",
  "legislation": "eudn/2018/1926",
  "legislation_title": "Council Decision (EU) 2018/1926 of 19 November 2018 on the position to be taken, on behalf of the European Union, in the Group of Experts on the European Agreement concerning the work of crews of vehicles engaged in international road transport of the United Nations Economic Commission for Europe",
  "legislation_url": "https://openlegislation.uk/eu-decision-2018-1926",
  "path": "annex/ATTACHMENT/division/10/division/4/division/4.4",
  "kind": "division",
  "number": "4.4",
  "heading": "Additional obligations of the certificate owner",
  "text": "The detailed terms and conditions of the SBCA are defined by T-Systems in the Certificate Policy (CP)/Certification Practice Statement (CPS) of the SBCA service. This document includes security specifications and guidelines regarding technical and organisational aspects and describes the activities of the Trust Centre operator in the roles of Certification Authority (CA) and Registration Authority (RA) as well as the Registration Authority's (RA) delegated third party.\nOnly entities authorised to participate TACHOnet can request a certificate.\nRegarding certificate acceptance, clause 4.4.1 of the SBCA Certificate Policy and Certification Practice Statement (‘CP/CPS’) applies, furthermore the terms of use and provisions described in the present document are deemed accepted by the organisation to which the certificate is issued (‘O=’) when first used.\nRegarding publication of the certificate, clause 2.2 of the SBCA CP/CPS applies.\nAll certificate owners shall comply with the following requirements:\n(1) protect their private key against unauthorised use;\n(2) refrain from transferring or revealing their private key to third parties, even as representatives;\n(3) refrain from continued use of the private key following expiry of the validity period or revocation of the certificate, other than to view encrypted data (e.g., decrypting emails);\n(4) the certificate owner is responsible for copying or forwarding the key to the end-entity or entities;\n(5) the certificate owner must obligate the end-entity/all end-entities to comply with the present terms and conditions, including the SBCA CP/CPS, when dealing with the private key;\n(6) the certificate owner must provide the identification of those authorised representatives who are authorised to request revocation of certificates issued to the organisation with the details of events that lead to revocation and the revocation password;\n(7) for certificates associated to groups of persons and functions and/or legal persons, after a person leaves the group of end-entities (e.g. termination of the employment relationship), the certificate owner must prevent misuse of the private key by revoking the certificate;\n(8) the certificate owner is responsible and shall request revocation of the certificate under the circumstances referred to in clause 4.9.1 of the SBCA CP/CPS.\nRegarding renewal or rekey of certificates, clause 4.6 or 4.7 of the SBCA CP/CPS applies.\nRegarding amendment of certificate, clause 4.8 of the SBCA CP/CPS applies.\nRegarding certificate revocation, clause 4.9 of the SBCA CP/CPS applies.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "footnote",
      "label": "f1",
      "text": "The latest version of the T-Systems SBCA CP/CPS is available from https://www.telesec.de/en/sbca-en/support/download-area/"
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2018/1926/annex/ATTACHMENT/division/10/division/4/division/4.4",
    "retrieved_at": "2026-11-01T15:12:54.978628+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}