> Products > Qualified certificates > Qualified certificate for PSD2

Qualified certificates for PSD2

In connection with the implementation of Directive 2015/2366 of the European Parliament and of the Council of 25 November 2015 on payment services in the internal market - PSD2, the new Payment System Act No. 370/2017 Coll. and technical standard ETSI TS 119 495, I.CA offers in its portfolio new types of qualified certificates intended for:

new payment service providers that will appear on the financial market (TPP);
existing institutions (banks) that maintain client accounts.

Qualified website authentication certificate (QWAC) for PSD2

Qualified website authentication certificates for PSD2 are Extended Validation certificates (SSL EV). These qualified certificates are designed to authenticate websites and secure transmitted data via the SSL / TSL encryption protocol, which operates on the principle of asymmetric cryptography.

It is intended for legal entities.
In order to obtain this certificate, a contractual relationship with I.CA is required.
Issuance and verification of certificate can take about 2-3 days.
Renewal of this certificate is not allowed - it is necessary to issue a new one.
Request for certificate must contain bit id-kp-serverAuth and id-kp-clientAuth.

The certificate may be issued to an organizational unit of the state or to a legal entity that meets at least one of the following requirements:

according to the entries in the commercial register or the records of the registration agency, has existed for at least three years,
submit a confirmation from the financial institution under the supervision of the National Bank that it has a current account with it (active, unblocked),
its data can be verified in the publicly available up-to-date register of QTIS (information on tax subjects) or QIIS (generally recognized independent register).

Qualified certificate for electronic seal for PSD2

QS PSD2 indicate the data initiator – third side (TPP = Trans – Pacific Partnership), which created the data used for the account manager (bank) to realize given transactions. After connection as agreed with protocol SSL/TSL by QWAC PSD2 certificate, qualified seal on the data serves like qualified evidence device.

It is intended for legal entities.
In order to obtain this certificate, a contractual relationship with I.CA is not required.
It is issued only to the I.CA Registration Authority upon submission of:
- created electronic application (unless the applicant has chosen to save it on the I.CA server),
- a valid identity card or passport and other identity document,
- the prove the existence of the company not older than 6 months (extract from the Commercial Register, trade license, CSU confirmation of registration and identification number ...),
- a document authorizing the company to act (power of attorney, executive appointment, or both),
- a document proving the existence of the PSD2 attributes specified in the application.

Qualified certificates for electronic seals with PSD2 attributes are issued in accordance with the Certification Policy for Issuing Qualified Certificates for electronic seals PSD2.