Document repository › Standards
Standards
The standards and technical specifications under which the operations of CENTRUL DE CALCUL S.A. are carried out, audited, assessed or certified as conformant: European and international standards (ETSI, CEN, ISO/IEC, IETF, NIST), the implementing acts and the European and national cybersecurity framework.
This page reproduces the document “List of applicable standards”, version 8 (25.10.2026), drawn up under Article 5(2)(n) of the procedure approved by Order No 102/2026 of the Minister of Economy, Digitalisation, Entrepreneurship and Tourism.
1. Standards and specifications applicable to all qualified trust services
- ETSI EN 319 401 V3.1.1 (2024-06) – official document, etsi.org — General policy requirements for trust service providers, with the adaptations set out in the implementing acts listed in section 2 (for service No 14, EAA/Q: ETSI EN 319 401 V3.2.1 (2026-01) – official document, etsi.org, the normative reference of ETSI TS 119 471 V1.1.1 – official document, etsi.org as adapted by Regulation (EU) 2026/1735);
- Commission Implementing Regulation (EU) 2025/2530 — requirements for qualified trust service providers (Article 24(5) of Regulation (EU) No 910/2014), including the clauses of the reference standards indicated in its Annex for each service;
- ISO/IEC 15408:2022 (Parts 1–5) — IT security evaluation criteria and, respectively, the EUCC European certification scheme (Commission Implementing Regulation (EU) 2024/482, as amended by Commission Implementing Regulation (EU) 2024/3144), and FIPS PUB 140-3 (2019) – official document, csrc.nist.gov — for the cryptographic modules protecting the private keys of the services;
- “Agreed Cryptographic Mechanisms – official document, certification.enisa.europa.eu”, version 2 (6 May 2025) — European Cybersecurity Certification Group, published by ENISA — for the algorithms and key lengths used;
- ETSI TS 119 612 V2.4.1 (2025-08) – official document, etsi.org — Trusted Lists, in accordance with Commission Implementing Decision (EU) 2025/2164 (applicable from 29 April 2026), as referred to in the implementing acts for validation and preservation.
2. Reference standards for each qualified trust service
1. Issuance of qualified certificates for electronic signatures
CA/QC
Reference standards (version laid down by the implementing act)
- ETSI EN 319 411-2 V2.6.1 – official document, etsi.org
- ETSI EN 319 411-1 V1.5.1 (2025-04) – official document, etsi.org
- ETSI EN 319 412-1 V1.6.1 – official document, etsi.org
- ETSI EN 319 412-2 V2.4.1 – official document, etsi.org
- ETSI EN 319 412-5 V2.5.1 – official document, etsi.org
- ETSI TS 119 461 V2.1.1 (2025-02) – official document, etsi.org, Annex C, clause C.3 — identity verification
- CEN/TS 419 261:2015
Implementing act / remarks
- Regulation (EU) 2025/1943, Annex I
- Regulation (EU) 2025/1566 — identity verification (applicable from 19 August 2027)
2. Issuance of qualified certificates for electronic seals
CA/QC
Reference standards (version laid down by the implementing act)
- ETSI EN 319 411-2 V2.6.1 – official document, etsi.org
- ETSI EN 319 411-1 V1.5.1 (2025-04) – official document, etsi.org
- ETSI EN 319 412-1 V1.6.1 – official document, etsi.org
- ETSI EN 319 412-2 V2.4.1 – official document, etsi.org
- ETSI EN 319 412-3 V1.3.1 – official document, etsi.org
- ETSI EN 319 412-5 V2.5.1 – official document, etsi.org
- ETSI TS 119 461 V2.1.1 (2025-02) – official document, etsi.org, Annex C, clause C.3
- CEN/TS 419 261:2015
Implementing act / remarks
- Regulation (EU) 2025/1943, Annex II
- Regulation (EU) 2025/1566 (applicable from 19 August 2027)
3. Issuance of qualified electronic time stamps
TSA/QTST
Reference standards (version laid down by the implementing act)
- ETSI EN 319 421 V1.3.1 (2025-07) – official document, etsi.org
- ETSI EN 319 422 V1.1.1 (2016-03) – official document, etsi.org
Implementing act / remarks
- Regulation (EU) 2025/1929 — binding of date and time to data and accuracy of time sources
4. Qualified validation service for qualified electronic signatures
QESValidation/Q
Reference standards (version laid down by the implementing act)
- ETSI TS 119 441 V1.2.1 (2023-10) – official document, etsi.org
- ETSI TS 119 172-4 V1.1.1 (2021-05) – official document, etsi.org
- ETSI EN 319 102-1 V1.4.1 (2024-06) – official document, etsi.org
- ETSI TS 119 102-2 V1.4.1 (2023-06) – official document, etsi.org
- ETSI TS 119 101 V1.1.1 (2016-03) – official document, etsi.org
- ETSI TS 119 442 – official document, etsi.org — validation service protocol (complementary)
Implementing act / remarks
- Regulation (EU) 2025/1942
- Regulation (EU) 2025/1945 — validation of qualified signatures and seals
5. Qualified validation service for qualified electronic seals
QESValidation/Q
Reference standards (version laid down by the implementing act)
The same standards as for service No 4
Implementing act / remarks
6. Qualified preservation service for qualified electronic signatures
PSES/Q
Reference standards (version laid down by the implementing act)
- ETSI TS 119 511 V1.1.1 (2019-06) – official document, etsi.org
- ETSI TS 119 172-4 V1.1.1 (2021-05) – official document, etsi.org
- ETSI EN 319 102-1 V1.4.1 (2024-06) – official document, etsi.org
- ETSI TS 119 101 V1.1.1 (2016-03) – official document, etsi.org
- ETSI TS 119 512 – official document, etsi.org — preservation service protocol (complementary)
Implementing act / remarks
7. Qualified preservation service for qualified electronic seals
PSES/Q
Reference standards (version laid down by the implementing act)
The same standards as for service No 6
Implementing act / remarks
8. Qualified management of remote qualified electronic signature creation devices
RemoteQSigCDManagement/Q
Reference standards (version laid down by the implementing act)
- ETSI TS 119 431-1 V1.3.1 (2024-12) – official document, etsi.org, for conformity with the EU Server Signing Application Service v2 (EUSPv2) policy, Annex A
- The QSCD used — certified in accordance with Article 30 of Regulation (EU) No 910/2014 (section 4 below)
Implementing act / remarks
- Regulation (EU) 2025/1567 (applicable from 19 August 2027)
9. Qualified management of remote qualified electronic seal creation devices
RemoteQSealCDManagement/Q
Reference standards (version laid down by the implementing act)
The same standards as for service No 8
Implementing act / remarks
- Regulation (EU) 2025/1567 (applicable from 19 August 2027)
10. Qualified electronic archiving service
ElectronicArchiving/Q
Reference standards (version laid down by the implementing act)
- CEN/TS 18170:2025
- ETSI EN 319 421 V1.3.1 (2025-07) – official document, etsi.org — normative reference
Implementing act / remarks
11. Qualified service for the recording of electronic data in qualified electronic ledgers
Ledgers/Q
Reference standards (version laid down by the implementing act)
- ETSI EN 319 401 V3.1.1 (2024-06) – official document, etsi.org, with the adaptations in the Annex to Regulation (EU) 2025/2531, point 3(a)
- Signature/seal formats of the records: ETSI EN 319 122-1 V1.3.1 (2023-06) – official document, etsi.org; ETSI EN 319 132-1 V1.3.1 (2024-07) – official document, etsi.org; ETSI TS 119 182-1 V1.2.1 (2024-07) – official document, etsi.org
- IETF RFC 7515 – official document, rfc-editor.org (JWS)
- ISO/TS 23635:2022 – official document, iso.org — only in the case of distributed ledgers
Implementing act / remarks
12. Qualified electronic registered delivery service by e-mail (REM)
EDS/REM/Q
Reference standards (version laid down by the implementing act)
- ETSI EN 319 401 V3.1.1 (2024-06) – official document, etsi.org, with the adaptations in Annex I
- ETSI EN 319 411-1 V1.5.1 (2025-04) – official document, etsi.org — normative reference (identification of the sender and of the addressee)
- ETSI EN 319 522-1 V1.2.1 (2024-01) – official document, etsi.org and ETSI EN 319 522-2 V1.2.1 (2024-01) – official document, etsi.org — architecture and semantic content of the evidence
- Interoperability (Annex II): ETSI EN 319 522-1, -2, -3 V1.2.1 (2024-01); ETSI EN 319 522-4-1 V1.2.1 (2019-01) – official document, etsi.org; ETSI EN 319 522-4-2 V1.1.1 (2018-09) – official document, etsi.org; ETSI EN 319 522-4-3 V1.1.1 (2018-09) – official document, etsi.orgOfficial documents: ETSI EN 319 522-1 V1.2.1 (2024-01) – official document, etsi.org · ETSI EN 319 522-2 V1.2.1 (2024-01) – official document, etsi.org · ETSI EN 319 522-3 V1.2.1 (2024-01) – official document, etsi.org
- ETSI EN 319 531 – official document, etsi.org and ETSI EN 319 532-1…-4 — REM profile (complementary)Official documents: ETSI EN 319 532-1 – official document, etsi.org · ETSI EN 319 532-2 – official document, etsi.org · ETSI EN 319 532-3 – official document, etsi.org · ETSI EN 319 532-4 – official document, etsi.org
- ETSI EN 319 521 – official document, etsi.org — ERDS policy and security requirements (complementary)
Implementing act / remarks
- Regulation (EU) 2025/1944, Annexes I and II
13. Qualified electronic registered delivery service
EDS/Q
Reference standards (version laid down by the implementing act)
- ETSI EN 319 401 V3.1.1 (2024-06) – official document, etsi.org, with the adaptations in Annex I
- ETSI EN 319 411-1 V1.5.1 (2025-04) – official document, etsi.org — normative reference (identification of the sender and of the addressee)
- ETSI EN 319 522-1 V1.2.1 (2024-01) – official document, etsi.org and ETSI EN 319 522-2 V1.2.1 (2024-01) – official document, etsi.org — architecture and semantic content of the evidence
- Interoperability (Annex II): ETSI EN 319 522-1, -2, -3 V1.2.1 (2024-01); ETSI EN 319 522-4-1 V1.2.1 (2019-01) – official document, etsi.org; ETSI EN 319 522-4-2 V1.1.1 (2018-09) – official document, etsi.org; ETSI EN 319 522-4-3 V1.1.1 (2018-09) – official document, etsi.orgOfficial documents: ETSI EN 319 522-1 V1.2.1 (2024-01) – official document, etsi.org · ETSI EN 319 522-2 V1.2.1 (2024-01) – official document, etsi.org · ETSI EN 319 522-3 V1.2.1 (2024-01) – official document, etsi.org
- ETSI EN 319 521 – official document, etsi.org — ERDS policy and security requirements (complementary)
Implementing act / remarks
- Regulation (EU) 2025/1944, Annexes I and II
14. Qualified electronic attestation of attributes
EAA/Q
Reference standards (version laid down by the implementing act)
- ETSI TS 119 471 V1.1.1 (2025-05) – official document, etsi.org, with adaptations; normative reference ETSI EN 319 401 V3.2.1 (2026-01) – official document, etsi.org — Annex I
- Format of the attestations: ETSI TS 119 472-1 V1.2.1 (2026-02) – official document, etsi.org, clauses 2–6 — SD-JWT VC or ISO/IEC 18013-5 – official document, iso.org (mdoc), with the related revocation techniques, in accordance with Annex II to Commission Implementing Regulation (EU) 2024/2979, as replaced by Commission Implementing Regulation (EU) 2026/1731 — Annex II
- ETSI TS 119 472-3 V1.1.1 (2026-03) – official document, etsi.org — issuance to European Digital Identity Wallets (Commission Implementing Regulation (EU) 2024/2982, as amended by Commission Implementing Regulation (EU) 2026/1731)
- ETSI TS 119 412-6 V1.1.1 (2025-09) – official document, etsi.org, clause 7 — profile of the issuer’s seal certificate (via ETSI TS 119 472-1 – official document, etsi.org, QEAA-4.6.2-04)
- ETSI TS 119 461 V2.1.1 – official document, etsi.org — identity verification (Commission Implementing Regulation (EU) 2025/1566, applicable from 19 August 2027)
Implementing act / remarks
- Regulation (EU) 2025/1569, Annexes I and II, as amended by Regulation (EU) 2026/1735, which applies from 11 August 2026; Regulation (EU) 2024/2979 and Regulation (EU) 2024/2982, as amended by Regulation (EU) 2026/1731
3. Formats of electronic signatures and seals
Commission Implementing Regulation (EU) 2026/248 (Article 27(5) and Article 37(5) of Regulation (EU) No 910/2014), which repeals Commission Implementing Decision (EU) 2015/1506:
- ETSI EN 319 132-1 V1.3.1 (2024-07) – official document, etsi.org — XAdES Baseline Profile;
- ETSI EN 319 122-1 V1.3.1 (2023-06) – official document, etsi.org — CAdES Baseline Profile;
- ETSI EN 319 142-1 V1.2.1 (2024-01) – official document, etsi.org — PAdES Baseline Profile;
- ETSI TS 119 182-1 V1.2.1 (2024-07) – official document, etsi.org — JAdES Baseline Profile;
- ETSI EN 319 162-1 V1.1.1 (2016-04) – official document, etsi.org and ETSI EN 319 162-2 V1.1.1 (2016-04) – official document, etsi.org — ASiC containers.
4. Qualified electronic signature and seal creation devices
- Commission Implementing Decision (EU) 2016/650 — ISO/IEC 15408-1:2009 – official document, iso.org, ISO/IEC 15408-2:2008 – official document, iso.org, ISO/IEC 15408-3:2008 – official document, iso.org, ISO/IEC 18045:2008 – official document, iso.org and the EN 419 211-1…-6 series — for the security assessment of qualified devices;
- EN 419 221-5:2018 — protection profile for cryptographic modules of trust service providers (HSM), used by the CertDigital devices (Thales Luna K7 — eIDAS-2400055-01; Utimaco CryptoServer CP5 — eIDAS-2300143-01.1 / -02);
- EN 419 241-1:2018 and EN 419 241-2:2019 — remote signing systems and the signature activation module (SAM), for services No 8–9 in section 2 (Ascertia ADSS SAM — CC certificate OCSI No 8/22);
- The conformity certificates of the devices used are presented separately, in accordance with Article 5(2)(o) of the procedure.
5. Conformity assessment
For conformity assessment, in accordance with Article 20(1) of Regulation (EU) No 910/2014, CENTRUL DE CALCUL S.A. undertakes to contract, at least once every 24 months, an accredited conformity assessment body, in order to confirm that the company, as a qualified trust service provider, and the qualified trust services it provides meet the requirements laid down in Regulation (EU) No 910/2014, in its implementing acts, in Law No 214/2024 and in the procedure approved by Order No 102/2026.
Conformity assessment bodies must be accredited, in accordance with Commission Implementing Regulation (EU) 2025/2162, against the EN ISO/IEC 17065:2012 – official document, iso.org standard as supplemented by the ETSI EN 319 403-1 V2.3.1 – official document, etsi.org standard, by a national accreditation body that complies with the EN ISO/IEC 17011:2017 – official document, iso.org standard. Bodies accredited against ETSI EN 319 403 V2.2.2 – official document, etsi.org or an earlier version may maintain their accreditation until 17 May 2027.
Conformity assessment will be carried out against the standards on the basis of which the operations of CENTRUL DE CALCUL S.A. are carried out, in accordance with the list of standards set out above.
6. Cybersecurity framework
- Directive (EU) 2022/2555 (NIS 2), Article 21, and Commission Implementing Regulation (EU) 2024/2690 — the technical and methodological cybersecurity risk-management measures applicable to trust service providers, referred to in Article 20(1) of Regulation (EU) No 910/2014.
- Government Emergency Ordinance No 155/2024 on establishing a framework for the cybersecurity of networks and information systems in the national civil cyberspace, approved with amendments and supplements by Law No 124/2025, as subsequently amended — CENTRUL DE CALCUL S.A. is entered in the Register of Entities as an essential entity, Digital infrastructure sector, under No E-210D02 (DNSC Decision No 50163/14.11.2025).
7. Complementary technical specifications
The specifications below are not reference standards within the meaning of the implementing acts, but they are used in implementing the services and are invoked in the policies and practice statements of CENTRUL DE CALCUL S.A.:
- IETF RFC 5280 (2008) – official document, rfc-editor.org — profile of X.509 v3 certificates and certificate revocation lists (CRL);
- IETF RFC 6960 (2013) – official document, rfc-editor.org — online certificate status protocol (OCSP);
- IETF RFC 3161 (2001) – official document, rfc-editor.org, updated by IETF RFC 5816 (2010) – official document, rfc-editor.org — time-stamp protocol (TSP), with transport over HTTPS (IETF RFC 9110 – official document, rfc-editor.org), in accordance with Commission Implementing Regulation (EU) 2025/1929;
- IETF RFC 3647 (2003) – official document, rfc-editor.org — framework for certificate policies and certification practice statements (structure of the documents);
- ISO/IEC 27001:2022 – official document, iso.org — information security management systems.
Standards by standardisation body
Each cited standard is listed once, with the places in the list where it applies.
European Telecommunications Standards Institute (ETSI) (45 standards)
- ETSI EN 319 102-1 V1.4.1 (2024-06) – official document, etsi.org Applies to: service 4, service 6
- ETSI EN 319 122-1 V1.3.1 (2023-06) – official document, etsi.org Applies to: service 11, section 3
- ETSI EN 319 132-1 V1.3.1 (2024-07) – official document, etsi.org Applies to: service 11, section 3
- ETSI EN 319 142-1 V1.2.1 (2024-01) – official document, etsi.org Applies to: section 3
- ETSI EN 319 162-1 V1.1.1 (2016-04) – official document, etsi.org Applies to: section 3
- ETSI EN 319 162-2 V1.1.1 (2016-04) – official document, etsi.org Applies to: section 3
- ETSI EN 319 401 V3.1.1 (2024-06) – official document, etsi.org Applies to: service 11, service 12, service 13, section 1
- ETSI EN 319 401 V3.2.1 (2026-01) – official document, etsi.org Applies to: service 14, section 1
- ETSI EN 319 403 V2.2.2 – official document, etsi.org Applies to: section 5
- ETSI EN 319 403-1 V2.3.1 – official document, etsi.org Applies to: section 5
- ETSI EN 319 411-1 V1.5.1 (2025-04) – official document, etsi.org Applies to: service 1, service 2, service 12, service 13
- ETSI EN 319 411-2 V2.6.1 – official document, etsi.org Applies to: service 1, service 2
- ETSI EN 319 412-1 V1.6.1 – official document, etsi.org Applies to: service 1, service 2
- ETSI EN 319 412-2 V2.4.1 – official document, etsi.org Applies to: service 1, service 2
- ETSI EN 319 412-3 V1.3.1 – official document, etsi.org Applies to: service 2
- ETSI EN 319 412-5 V2.5.1 – official document, etsi.org Applies to: service 1, service 2
- ETSI EN 319 421 V1.3.1 (2025-07) – official document, etsi.org Applies to: service 3, service 10
- ETSI EN 319 422 V1.1.1 (2016-03) – official document, etsi.org Applies to: service 3
- ETSI EN 319 521 – official document, etsi.org Applies to: service 12, service 13
- ETSI EN 319 522-1 V1.2.1 (2024-01) – official document, etsi.org Applies to: service 12, service 13
- ETSI EN 319 522-2 V1.2.1 (2024-01) – official document, etsi.org Applies to: service 12, service 13
- ETSI EN 319 522-3 V1.2.1 (2024-01) – official document, etsi.org Applies to: service 12, service 13
- ETSI EN 319 522-4-1 V1.2.1 (2019-01) – official document, etsi.org Applies to: service 12, service 13
- ETSI EN 319 522-4-2 V1.1.1 (2018-09) – official document, etsi.org Applies to: service 12, service 13
- ETSI EN 319 522-4-3 V1.1.1 (2018-09) – official document, etsi.org Applies to: service 12, service 13
- ETSI EN 319 531 – official document, etsi.org Applies to: service 12
- ETSI EN 319 532-1 – official document, etsi.org Applies to: service 12
- ETSI EN 319 532-2 – official document, etsi.org Applies to: service 12
- ETSI EN 319 532-3 – official document, etsi.org Applies to: service 12
- ETSI EN 319 532-4 – official document, etsi.org Applies to: service 12
- ETSI TS 119 101 V1.1.1 (2016-03) – official document, etsi.org Applies to: service 4, service 6
- ETSI TS 119 102-2 V1.4.1 (2023-06) – official document, etsi.org Applies to: service 4
- ETSI TS 119 172-4 V1.1.1 (2021-05) – official document, etsi.org Applies to: service 4, service 6
- ETSI TS 119 182-1 V1.2.1 (2024-07) – official document, etsi.org Applies to: service 11, section 3
- ETSI TS 119 412-6 V1.1.1 (2025-09) – official document, etsi.org Applies to: service 14
- ETSI TS 119 431-1 V1.3.1 (2024-12) – official document, etsi.org Applies to: service 8
- ETSI TS 119 441 V1.2.1 (2023-10) – official document, etsi.org Applies to: service 4
- ETSI TS 119 442 – official document, etsi.org Applies to: service 4
- ETSI TS 119 461 V2.1.1 (2025-02) – official document, etsi.org Applies to: service 1, service 2, service 14
- ETSI TS 119 471 V1.1.1 (2025-05) – official document, etsi.org Applies to: service 14, section 1
- ETSI TS 119 472-1 V1.2.1 (2026-02) – official document, etsi.org Applies to: service 14
- ETSI TS 119 472-3 V1.1.1 (2026-03) – official document, etsi.org Applies to: service 14
- ETSI TS 119 511 V1.1.1 (2019-06) – official document, etsi.org Applies to: service 6
- ETSI TS 119 512 – official document, etsi.org Applies to: service 6
- ETSI TS 119 612 V2.4.1 (2025-08) – official document, etsi.org Applies to: section 1
European Committee for Standardization (CEN) (10 standards)
- CEN/TS 419 261:2015 Applies to: service 1, service 2
- EN 419 211-1 Applies to: section 4
- EN 419 211-2 Applies to: section 4
- EN 419 211-3 Applies to: section 4
- EN 419 211-4 Applies to: section 4
- EN 419 211-5 Applies to: section 4
- EN 419 211-6 Applies to: section 4
- EN 419 221-5:2018 Applies to: section 4
- EN 419 241-1:2018 Applies to: section 4
- EN 419 241-2:2019 Applies to: section 4
International Organization for Standardization (ISO) and International Electrotechnical Commission (IEC) (10 standards)
- EN ISO/IEC 17011:2017 – official document, iso.org Applies to: section 5
- EN ISO/IEC 17065:2012 – official document, iso.org Applies to: section 5
- ISO/IEC 15408-1:2009 – official document, iso.org Applies to: section 4
- ISO/IEC 15408-2:2008 – official document, iso.org Applies to: section 4
- ISO/IEC 15408-3:2008 – official document, iso.org Applies to: section 4
- ISO/IEC 15408:2022 Applies to: section 1
- ISO/IEC 18013-5 – official document, iso.org Applies to: service 14
- ISO/IEC 18045:2008 – official document, iso.org Applies to: section 4
- ISO/IEC 27001:2022 – official document, iso.org Applies to: section 7
- ISO/TS 23635:2022 – official document, iso.org Applies to: service 11
Internet Engineering Task Force (IETF) (7 standards)
- IETF RFC 3161 (2001) – official document, rfc-editor.org Applies to: section 7
- IETF RFC 3647 (2003) – official document, rfc-editor.org Applies to: section 7
- IETF RFC 5280 (2008) – official document, rfc-editor.org Applies to: section 7
- IETF RFC 5816 (2010) – official document, rfc-editor.org Applies to: section 7
- IETF RFC 6960 (2013) – official document, rfc-editor.org Applies to: section 7
- IETF RFC 7515 – official document, rfc-editor.org Applies to: service 11
- IETF RFC 9110 – official document, rfc-editor.org Applies to: section 7
National Institute of Standards and Technology of the United States (NIST) (1 standard)
European Cybersecurity Certification Group (ECCG); published by the European Union Agency for Cybersecurity (ENISA) (1 standard)
About this list
The versions of the standards are those laid down by the implementing acts. When these change, the document is revised and this page is updated with it. The legal acts cited are presented on the page Legislation.
