Conditions for Issuing New Specialized Public Service Digital Signature Certificates? What are the Contents of the Specialized Public Service Digital Signature Certificates?
Conditions for Issuing New Digital Signature Certificates for Official Use
Pursuant to Article 10 of Decree 68/2024/ND-CP, the conditions for issuing new digital signature certificates for official use are as follows:
- Conditions for issuing new digital signature certificates for individuals:
+ Must be individuals from agencies or organizations stipulated in Article 2 of Decree 68/2024/ND-CP and require electronic transactions;
+ A written request from the directly managing agency or organization is required.
- Conditions for issuing new digital signature certificates for agencies, organizations:
+ Must be agencies or organizations with legal status stipulated in Article 2 of Decree 68/2024/ND-CP;
+ Have a decision on the establishment of the agency or organization or confirmation from the head of the superior agency;
+ A written request from the directly managing agency or organization is required.
- Conditions for issuing new digital signature certificates for devices, services, software:
+ The devices, services, software must be owned and managed by agencies or organizations with legal status stipulated in Article 2 of Decree 68/2024/ND-CP;
+ A written request from the directly managing agency or organization is required.
Thus, these are the conditions for issuing new digital signature certificates for official use for individuals; agencies, organizations; and devices, services, software.
Conditions for issuing new digital signature certificates for official use? What are the contents of the digital signature certificate for official use? (Image from the Internet)
What Are the Contents of the Digital Signature Certificate for Official Use?
Pursuant to Article 7 of Decree 68/2024/ND-CP, the contents of the digital signature certificate for official use include:
The name of the digital signature certification service provider for official use.
The name of the subscriber.
The serial number of the digital signature certificate for official use.
The validity period of the digital signature certificate for official use.
The public key.
The digital signature of the digital signature certification service provider for official use.
The limitations on the purpose and scope of use of the digital signature certificate for official use.
Thus, the contents of the digital signature certificate for official use will include the 7 contents mentioned above.
Process of Creating Digital Signature for Official Use from August 15, 2024
Pursuant to Article 29 of Decree 68/2024/ND-CP, the process of creating a digital signature for official use is as follows:
Process of creating a digital signature for official use
1. Check the validity of the digital signature certificate for official use according to the provisions of Article 31 of this Decree.
2. Check the validity of the certification path according to the provisions of Article 32 of this Decree.
3. Use the corresponding private key with the digital signature certificate for official use of the signing entity to create the digital signature for official use.
4. In cases where the law requires timestamps on the data message, the data message is considered fulfilled if it is attached with a timestamp corresponding to the created digital signature for official use; the timestamp server address is published by the digital signature certification service provider for official use.
5. Display information about the digital signature for official use according to the relevant laws.
Thus, from August 15, 2024, the process of creating a digital signature for official use will be carried out as follows:
(1) Check the validity of the digital signature certificate for official use according to the provisions of Article 31 of Decree 68/2024/ND-CP.
Specifically: checking the validity of the digital signature certificate for official use includes:
- The digital signature certificate for official use is valid when it meets the following conditions:
+ It is within the validity period at the time of signing;
+ It is suitable for the intended use of the digital signature certificate for official use, the legal liability of the signing entity, and meets the inspection conditions of this Decree;
+ The status of the digital signature certificate for official use is checked according to the provisions of Clause 2, Article 31 of Decree 68/2024/ND-CP and is active at the time of signing.
- Check the status of the digital signature certificate for official use via the Certificate Revocation List (CRL) or through the Online Certificate Status Protocol (OCSP) provided by the digital signature certification service provider for official use at the time of signing.
(2) Check the validity of the certification path according to the provisions of Article 32 of Decree 68/2024/ND-CP.
Specifically: checking the validity of the certification path includes:
- Check the validity of the digital signature certificate for official use in the certification path according to the provisions of Article 31 of Decree 68/2024/ND-CP; ensuring the following digital signature certificates for official use are valid at the time of signing:
+ The digital signature certificate for official use of the signing entity;
+ The intermediate digital signature certificate for official use (if any);
+ The root digital signature certificate for official use.
- The root digital signature certificate for official use in the certification path must match the root digital signature certificate for official use published by the digital signature certification service provider for official use.
(3) Use the corresponding private key with the digital signature certificate for official use of the signing entity to create the digital signature for official use.
(4) In cases where the law requires timestamps on the data message, the data message is considered fulfilled if it is attached with a timestamp corresponding to the created digital signature for official use; the timestamp server address is published by the digital signature certification service provider for official use.
(5) Display information about the digital signature for official use according to relevant laws.
Note: Decree 68/2024/ND-CP takes effect from August 15, 2024.
LawNet