Qualified Certification Authority
Description
An electronic signature helps you communicate with public authorities via email. Here you can find information on how to get qualified certificates for electronic signature authentication from the PostSignum QCA?
The Czech Post became an accredited provider of certification services by decision of the Ministry of Informatics of the Czech Republic issued on 3 August 2005.
The PostSignum QCA information system received a certificate of compliance (21.12.2007) with ISO 9001 (quality management system) and ISO 27001 (information security management system).
Benefits
Electronic signature - PostSignum QCA issued qualified certificates for electronic signature authentication for the use by the person named in the certificate.
Electronic signage - PostSignum QCA also issues qualified system certificates for electronic sign authentication for automated use by applications or equipment.
Large possibilities of use - you can use your qualified certificate(s) e.g. for electronic communication with your revenue office, courts of justice, the Czech Social Security Administration, the Customs Administration, the SEPO electronic marketplace of the Ministry of Defense, the CzechInvest application, and a number of other institutions.
Papers only at the beginning - paper documents to check the identity of the customer and the user(s) are required only at the signing of the agreement and issuance of the first certificate; you can use an electronic application form to get any subsequent certificate.
Certificates issued under control - employees of an organisation cannot have a certificate issued at will, unless approved by a designated representative of the organisation; the latter has also the power to invalidate certificates of those employees who themselves could or would not do so.
Universality - you can create an application for certificate form in almost any application programme and under any operation system; almost any chipcard or USB token can be used to store the encryption keys.
Multiplatform generator of applications for certificates - you can generate the application for certificate forms in the PostSignum Tool programme available for the operation systems Windows, Linux, Solaris and Mac OS X.
Services at the customer's premises - you can order our Mobile Registration Authority staff to provide you with the required services at a place given by you.
Parameters
| Parameter | |
|---|---|
| Qualified certificates for electronic signature authentication | Yes |
| Qualified system certificates for electronic sign authentication | Yes |
| Time stamps | From July 2009 |
| Purpose of use of the certificates | Data signature - Yes Data encryption - No User authentication - No |
| Acceptance of certificates by state administration bodies | Yes |
| Certification services provided to | Legal persons - Yes Enterpreneurs - Yes Private customers - Yes |
| Stationary offices | 7 points of sale 75 contact points |
| Mobile offices | 7 Mobile Registration Authorities |
| Generation of electronic applications for certificate | Yes (website or the PostSignum Tool) |
| Signature key deposit | According to the customer |
| Accepted signature key size | 1,024 bits2,048 bits |
| Accepted signature key algorithm | RSA |
| Signature key algorithm used in certificates | SHA1withRSA |
| Prohibition to publish a certificate | Optional |
| Possibility to add the Ministry of Labour and Social Affairs Client Identifier to a certificate | Optional |
| Notice of expiry of a certificate | Yes (e-mail notification) |
| Possibility to issue subsequent certificates | Yes (against application filed in person or by e-mail) |
| Invalidation of certificates | Yes (against application filed in person, by telephone, fax, e-mail or post ) |
| Publication of certificates | Web server Directory server (LDAP) |
| User support | Yes (by telephone, e-mail) |
| Information on new developments | Yes (e-mail notification, RSS channel) |
Pricing
The following services are subject to a fee:
- issue of certificate,
- issue of subsequent certificate,
- services of the Mobile Registration Authority,
- sale of chipcards.
Prerequisites
To get a certificate you need to enter into an Agreement on the Provision of Certification Services with the Czech Post. You can do so at a contact point or point of sale. You will also need to fill in customer forms with data on the applicants and certificates issued to them.
If your data have changed, you will have to enter into an amended agreement or produce a changed customer form.
Additional services
Mobile Registration Authority – Mobile Registration Authority staff provide certification services at a place given by the customer.
Sale of chipcards – you can buy chipcards, chipcard reader and control software at select contact points.