(title available in French only)
Official Binding
Note
ETSI standard, part 2, specifying the content of certificates issued to natural persons, based on RFC 5280 and for EU qualified certificates (version 2.4.1).
The full text is not reproduced here (copyright): see the official source.
Summary
Purpose
European standard ETSI EN 319 412-2 (version 2.4.1, June 2025) sets the profile of certificates issued to natural persons ETSI EN 319 412-2 V2.4.1, § 1 Scope ETSI EN 319 412-2 V2.4.1, History. Its scope begins as follows:
The present document specifies requirements on the content of certificates issued to natural persons.
The profile builds on IETF RFC 5280. It covers EU qualified certificates as well as other certificates, and aims above all at interoperable processing and display of the certificate information ETSI EN 319 412-2 V2.4.1, § 1 Scope.
Who it applies to
- To providers that issue qualified certificates for signatures or seals Annex I Annex II.
- To Member States, for the certificates they notify to the Commission in the context of the wallet Annex II.
Key points
- Basic fields: version, signature algorithm, issuer (legal or natural person), subject, subject public key ETSI EN 319 412-2 V2.4.1, § 4.2 Basic certificate fields.
- Extensions: key usage, certificate policies, alternative names, CRL distribution points, authority information access ETSI EN 319 412-2 V2.4.1, § 4.3 Standard certificate extensions ETSI EN 319 412-2 V2.4.1, § 4.4 IETF RFC 5280 internet certificate extensions.
- EU qualified certificates: qualified certificate statements (QCStatements) and certificate policies ETSI EN 319 412-2 V2.4.1, § 5 EU Qualified Certificate requirements.
What the acts apply, and how
-
Implementing Regulation 2025/1943: Annexes I (signature) and II (seal) make EN 319 412-2 version 2.4.1 applicable, subject to adaptations Annex I Annex II. The annex replaces normative references (EN 319 412-5 version 2.5.1, agreed cryptographic mechanisms published by ENISA) and lists requirements for clauses 4.2.2 (signature), 4.2.3.1 (legal person issuer), 4.2.5 (subject public key) and 4.2.6 (serial number): it provides for choosing the signature algorithm and the public key according to the ENISA mechanisms, with wording that differs between language versions (see below), and requires the issuer’s organizationIdentifier attribute carrying the registration number as stated in the official register, if such a number is known to exist, as well as a unique serial number Annex I. A qualified certificate that complies with these standards is presumed to comply with the requirements of Annex I or III to the regulation
Art. 28(6)Art. 38(6); a recital adds that supervisory bodies should presume such compliance laying down rules for the application of Regulation (EU) No 910/2014 of the European Parliament and of the Council as regards reference standards for qualified certificates for electronic signatures and qualified certificates for electronic seals.
Wording that differs between language versions. For clauses 4.2.2 and 4.2.5, the English version of Annexes I and II reads:
Signature algorithm shall be selected in accordance with the Agreed Cryptographic Mechanisms
The subject public key shall be selected in accordance with the Agreed Cryptographic Mechanisms
The French version of the same passages uses “il convient” (“it is recommended”) instead Annex I Annex II. The summary does not decide between the two.
- Implementing Regulation 2024/2980: the information that Member States send to the Commission includes one or more certificates conforming to EN 319 412-2 version 2.4.1 or EN 319 412-3 version 1.3.1. These certificates are used to verify the signature or seal applied by registrars of relying parties, providers of person identification data (PID) and providers of access certificates or relying party registration certificates; for wallet providers, they are used to authenticate and validate wallet unit attestations Annex II Art. 4(1). The obligation concerns the notification by Member States. The first four points were replaced, and the fifth (providers of registration certificates) added, by Implementing Regulation 2026/1731 Annex X.
- Implementing Regulation 2025/2162: Annex II cites EN 319 412-2, without a version, for the issuance of qualified certificates for signatures and seals Annex II.
Cited version
Implementing Regulations 2025/1943 and 2024/2980 cite version 2.4.1 Annex I Annex II. The index of ETSI standards in the corpus, consulted on 31 October 2026, mentions a more recent published version, 2.5.1, whose text is not in the corpus. The annex to Implementing Regulation 2025/1943 also names EN 319 412-5 in version 2.5.1 Annex I, and Implementing Regulation 2024/2980 names EN 319 412-3 in version 1.3.1 Annex II. For these two standards, the index of ETSI standards in the corpus, consulted on 31 October 2026, mentions more recent published versions, 2.6.1 and 1.4.1, whose text is not in the corpus.
Error in the act
In the French version of Implementing Regulation 2025/1943, the title of Annex II refers to qualified certificates “de signature électronique” (for electronic signatures), like Annex I; the English version refers to electronic seals, and the regulation links Annex II to the provision of Regulation 910/2014 on qualified certificates for electronic seals
Annex IIArt. 1Important clauses
- ETSI EN 319 412-2 V2.4.1, § 1 Scope: scope.
- ETSI EN 319 412-2 V2.4.1, § 4.2.4 Subject: certificate subject.
- ETSI EN 319 412-2 V2.4.1, § 5.1 EU QCStatements: qualified certificate statements.
Links
- Overview of the series: EN 319 412-1 ETSI EN 319 412-1 V1.6.1.
- Profile for legal persons: EN 319 412-3 ETSI EN 319 412-3 V1.3.1.
- Policies for qualified certificates: EN 319 411-2 ETSI EN 319 411-2 V2.6.1.
- Learning path: step 4, trust services.
Consolidation without official value
This summary relies on the consolidated versions, published on EUR-Lex, of Regulation 910/2014 and Implementing Regulation 2024/2980 Regulation (EU) No 910/2014 — consolidated version of 18/10/2024 Implementing Regulation (EU) 2024/2980 — consolidated version of 11/08/2026. They serve as documentation: only the texts published in the Official Journal are authentic.
ETSI standard: the site reproduces only short extracts; the full text is available from ETSI ETSI EN 319 412-2 V2.4.1. Written by Asphalia.