Suggested region and language based on your location
Your current region and language
Business scope: Not applicable for this profile. Please find full digital pdf ETSI certificates published under section “Business Governance & Certifications".
Products, services or works: Not applicable for this profile. Please find full digital pdf ETSI certificates published under section “Business Governance & Certifications".
Address:
Maidstone House, Unit B, 2nd floorVerification date: 45475
| Certificate/Licence number | Standard/Scheme number or name | Start Date (YYYY-MM-DD) | Expiry Date (YYYY-MM-DD) |
|---|---|---|---|
| ETS 083 | ETSI EN 319 411-2 | 2023-07-27 | 2025-07-26 |
On the request of GMO Globalsign Ltd. (hereafter referred to as: Globalsign), the certification audit on all areas and processes was performed by BSI Assurance UK Limited (Kitemark Court, Davy Avenue, Knowlhill, Milton Keynes MK5 8PP, United Kingdom, with its location at John M. Keynesplein 9, 1066 EP Amsterdam, The Netherlands).
The audit covered all applicable requirements from the audit criteria listed below (see “Audit Information”) and are defined in Globalsign’s Statement of Applicability, dated 19 April 2024 and the Overview of Applicability 2023.
The scope of the assessment comprised the following Trust Service Provider component services:
-,,Registration Service;
-,,Certificate Generation Service;
-,,Dissemination Service;
-,,Revocation Management Service;
-,,Revocation Status Service;
-,,Subject Device Provision Service;
These TSP component services are being provided for the following qualified trust service(s) as defined in the UK eIDAS Regulations:
-,,Issuance of qualified certificates for electronic signatures (qualified trust service), in accordance with the policies: QCP-n, QCP-n-qscd
-,,Issuance of qualified certificates for electronic seals (qualified trust service), in accordance with the policy: QCP-l, QCP-l-qscd
-,,Issuance of qualified certificates for website authentication (qualified trust service), in accordance with policies QEVCP-w
In providing the (qualified) trust services, the TSP shares resources as coordinated by its parent company GMO GlobalSign Holdings K.K. in Japan. This includes providing and maintaining trust service component services, with the relevant operations, procedures, IT-infrastructure and applications.
The PKI component activities take place at different locations and are all performed by GMO Globalsign group companies, under supervision of the TSP's Policy Authority and Governance & Compliance:
-,,Belgium, Leuven (Policy Authority, Governance & Compliance)
-,,UK, London (Office, software development, IT operations)
-,,UK, London (Datacenter for Certificate Generation Service and Registration/Revocation Management Service production systems)
-,,UK, Maidstone (Registered Office: Registration/Revocation Management Service operations, support processes)
-,,Singapore (Office: Key management and Cryptographic controls)
-,,Singapore (Datacenter for Certificate Generation Service, Certificate Status Service production systems)
-,,Japan, Tokyo (Office: software development, IT operations, Governance & Compliance)
-,,Japan, Tokyo (Datacenter for Registration/Revocation Management Service production systems)
-,,India, New Delhi (Office: Registration/Revocation Management Service operations, support processes)
-,,Philippines, Makati City (Office: Registration/Revocation Management Service operations, support processes)
The certificates are issued through the issuing certification authorities, as specified below:
-,,GlobalSign Atlas E45 UK Qualified Remote Signing CA 2020
Revoked on 20 March 2024.
Sha256 Fingerprint:
B89EBBFC57AE60653C676B8EB399DC9415BBB738CB0370651A86BFF075C83A39
+,,Qualified certificates for electronic seals, QCP-l
-,,GlobalSign Atlas R45 UK Qualified Remote Signing CA 2020
Revoked on 20 March 2024.
Sha256 Fingerprint:
0958E7A84F392A4F3B7DC5E30FDC8DF733E69B44C68C16FC0DA1741C08419DA0
+,,Qualified certificates for electronic seals, QCP-l
-,,GlobalSign GCC E45 UK Qualified Signing CA 2020
Revoked on 20 March 2024.
Sha256 Fingerprint:
28CB8EE23E7BDBBF40B2959A57BB589991C2635CD3B71AAB0E84F993C559D29F
+,,Qualified certificates for electronic signatures, QCP-n
+,,Qualified certificates for electronic seals, QCP-l
-,,GlobalSign GCC R45 UK Qualified Signing CA 2020
Revoked on 20 March 2024.
Sha256 Fingerprint:
F5E9E2705AB0C93E80652D2DEB573AB01D6700597BDA122BC08BA97FDC713368
+,,Qualified certificates for electronic signatures, QCP-n
+,,Qualified certificates for electronic seals, QCP-l
-,,GlobalSign GCC E45 UK Qualified QSCD Signing CA 2020
Revoked on 20 March 2024.
Sha256 Fingerprint:
712C42F3C0FA3BDFA11B22AC9811C8EB912C4B464B43C705825DEEDC1195AD33
,,Qualified certificates for electronic signatures, QCP-n-qscd
,,Qualified certificates for electronic seals, QCP-l-qscd
-,,GlobalSign GCC R45 UK Qualified QSCD Signing CA 2020
Revoked on 20 March 2024.
Sha256 Fingerprint:
91F881C556A920B92C4C48221FAAC19615437CF4ACB7D079C0B426BF3483B3AE
,,Qualified certificates for electronic signatures, QCP-n-qscd
,,Qualified certificates for electronic seals, QCP-l-qscd
-,,GlobalSign GCC E5 UK EV QWAC CA 2021
Revoked on 20 March 2024.
Sha256 Fingerprint:
0966A88729C938F9DCD65BB3C63B608618EAE5183ED1FED752B323089687A20E
+,,Qualified certificates for website authentication, QEVCP-w
-,,GlobalSign GCC R3 UK EV QWAC CA 2020
Revoked on 20 March 2024.
Sha256 Fingerprint:
A33017D9DF494C09D58709107403AEE461B9461E81BA395C28C36693C27D1986
+,,Qualified certificates for website authentication, QEVCP-w
The TSP component services are documented in the following Certification Practice Statements:
-,,GlobalSign Certificate Policy, version 7.3, 29 March 2024
-,,GlobalSign Certification Practice Statement, version 10.3, 29 March 2024
-,,GlobalSign PKI Disclosure Statement, version 2.0, 14 April 2023
Our certification audit was performed in February and April 2024. The result of the audit is that we conclude, based on the objective evidence collected during the certification audit from 1 July 2023 through 31 March 2024, the areas assessed during the audit for the issuance of:
-,,Issuance of qualified certificates for electronic signatures (qualified trust service), in accordance with the policies: QCP-n, QCP-n-qscd
-,,Issuance of qualified certificates for electronic seals (qualified trust service), in accordance with the policy: QCP-l, QCP-l-qscd
-,,Issuance of qualified certificates for website authentication (qualified trust service), in accordance with policies QEVCP-w;
were generally found to be effective, based on the applicable requirements defined in Globalsign’s Statement of Applicability, dated 19 April 2024 and the Overview of Applicability 2023.
Audit information:
Audit criteria
-,,"UK eIDAS Regulations":
-,,ETSI EN 319 401 v2.3.1 (2021-05) General Policy Requirements for Trust Service Providers;
-,,The Electronic Identification and Trust Services for Electronic Transactions (Amendment etc.) (EU Exit) Regulations 2019
-,,UK trust services legislation, The Electronic Identification and Trust Services for Electronic Transactions Regulation 2016 (2016 No.696))
-,,Information Commissioner's Office (ICO) - Becoming a qualified trust service provider, section: "Additional ICO requirements and guidance" (ref: https://ico.org.uk/for-organisations/guide-to-eidas/becoming-a-qualified-trust-service-provider/#additional)
-,,ETSI EN 319 411-2 v2.4.1 (2021-11) Electronic Signatures and Infrastructures (ESI) - Policy and security requirements for Trust Service Providers issuing certificates;- Part 2: Requirements for trust service providers issuing EU qualified certificates, for the policies: QCP-n, QCP-n-qscd, QCP-l, QCP-l-qscd, QEVCP-w
-,,Supplemental to ETSI EN 319411-2:
-,,ETSI EN 319 401 v2.3.1 (2021-05) General Policy Requirements for Trust Service Providers;
-,,ETSI EN 319 411-1 v1.3.1 (2021-05) Electronic Signatures and Infrastructures (ESI) - Policy and security requirements for Trust Service Providers issuing certificates - Part 1: General requirements, for the policies: LCP, NCP, NCP+, PTC, EVCP;
Audit Period of Time:
1 July 2023 through 31 March 2024
Audit performed:
February and April 2024
| Certificate/Licence number | Standard/Scheme number or name | Start Date (YYYY-MM-DD) | Expiry Date (YYYY-MM-DD) |
|---|---|---|---|
| ETS 084 | ETSI EN 319 421 | 2023-07-27 | 2025-07-26 |
On the request of GMO Globalsign Ltd. (hereafter referred to as: Globalsign), the certification audit on all areas and processes was performed by BSI Assurance UK Limited (Kitemark Court, Davy Avenue, Knowlhill, Milton Keynes MK5 8PP, United Kingdom, with its location at John M. Keynesplein 9, 1066 EP Amsterdam, The Netherlands).
The audit covered all applicable requirements from the audit criteria listed below (see “Audit Information”) and are defined in Globalsign’s Statement of Applicability, dated 19 April 2024 and the Overview of Applicability 2023.
The scope of the assessment comprised the following Trust Service Provider component services:
-,,Time-stamping provision: This service component generates time-stamps.
-,,Time-stamping management: This service component monitors and controls the operation of the time-stamping services to ensure that the service provided is as specified by the TSA.
These TSP component services are being provided for following qualified trust service as defined in the UK eIDAS Regulations:
-,,Issuance of qualified electronic time stamps (qualified trust service)
In providing the (qualified) trust services, the TSP shares resources as coordinated by its parent company GMO GlobalSign Holdings K.K. in Japan. This includes providing and maintaining trust service component services, with the relevant operations, procedures, IT-infrastructure and applications.
The TSA component activities take place at different locations and are all performed by GMO Globalsign group companies, under supervision of the TSP's Policy Authority and Governance & Compliance:
-,,Belgium, Leuven (Policy Authority, Governance & Compliance)
-,,UK, London (Office, software development, IT operations)
-,,UK, London (Datacenter for Time-stamping provision and Time-stamping management production systems)
-,,UK, Maidstone (Registered Office: support processes)
-,,Singapore (Office: Key management and Cryptographic controls)
Qualified Time-Stamps are issued by Time-Stamping Units (TSU) specified below:
Issuing CA: GlobalSign Atlas R45 UK Qualified Timestamping CA 2020
Revoked on 20 March 2024.
Sha256 Fingerprint:
4C03F2D6941F2DFCA27EDC599F385E6CD3FFD0CC842F2CCB95B77580A2D1FF93
-,,TSU: GlobalSign UK Qualified Time Stamping 2023 TSU-01.001-LCY
Sha256 Fingerprint:
E08091CC94151D791C3E99E1927E93FCD8F6E0EBBB4AC63725D4A92083FA8AC7
-,,TSU: GlobalSign UK Qualified Time Stamping 2023 TSU-02.001-LCY
Sha256 Fingerprint:
B3EC34E0D934FB10BA49FDE50AD7D05EFBC9DCDCA1AF535906013ACFAE2D42F9
-,,TSU: GlobalSign UK Qualified Time Stamping 2023 TSU-03.001-LCY
Sha256 Fingerprint:
75EE747BB8C3DC9A1285D21726C8CE525437F1EF28E9D282EF8895A618F56AC1
Other issuing CAs capable of issuing public key certificates for Time-Stamping Units (TSU) issuing Qualified Time-Stamps are:
-,,Issuing CA: GlobalSign Atlas ECCR5 UK Qualified Timestamping CA 2020
Revoked on 20 March 2024.
Sha256 Fingerprint:
40382F8827B75D25705A6B3DA32533C5F4218BD7FA697CB0B300E8F47047FBC9
The TSP component services are documented in the following Globalsign Timestamping Practice Statement:
-,,GlobalSign Timestamping Practice Statement, version 1.0, 10 February 2022
Our certification audit was performed in February and April 2024. The result of the audit is that we conclude, based on the objective evidence collected during the certification audit from 1 July 2023 through 31 March 2024, the areas assessed during the audit for the issuance of qualified electronic time stamps (qualified trust service), were generally found to be effective, based on the applicable requirements defined in Globalsign’s Statement of Applicability, dated 19 April 2024 and the Overview of Applicability 2023.
Audit information:
Audit criteria
-,,"UK eIDAS Regulations":
-,,ETSI EN 319 401 v2.3.1 (2021-05) General Policy Requirements for Trust Service Providers;
-,,The Electronic Identification and Trust Services for Electronic Transactions (Amendment etc.) (EU Exit) Regulations 2019
-,,UK trust services legislation, The Electronic Identification and Trust Services for Electronic Transactions Regulation 2016 (2016 No.696))
-,,Information Commissioner's Office (ICO) - Becoming a qualified trust service provider, section: "Additional ICO requirements and guidance" (ref: https://ico.org.uk/for-organisations/guide-to-eidas/becoming-a-qualified-trust-service-provider/#additional)
-,,ETSI EN 319 421 v1.2.1 (2023-05) Electronic Signatures and Infrastructures (ESI); Policy and Security Requirements for Trust Service Providers issuing Time-Stamps.
-,,Supplemental to ETSI EN 319421:
-,,ETSI EN 319 401 v2.3.1 (2021-05) General Policy Requirements for Trust Service Providers;
Audit Period of Time:
1 July 2023 through 31 March 2024
Audit performed:
February and April 2024
Years of operation
Years range: Not applicable for this profile. Please find full digital pdf ETSI certificates published below.
Type of ownership
Not applicable for this profile. Please find full digital pdf ETSI certificates published below.
Annual turnover
Not applicable for this profile. Please find full digital pdf ETSI certificates published below.
Total employees:
Not applicable for this profile. Please find full digital pdf ETSI certificates published under section “Business Governance & Certifications".
| Facilities on site(eg: office space, warehouse) | Size of facilities (m2) |
|---|---|
| Office area |
-
|
| Production area |
-
|
| Warehouse area |
-
|
| Other area |
-
|
| Key export country / region | Percentage of sales |
|---|---|
| Not applicable for this profile. Please find full digital pdf ETSI certificates published under section “Business Governance & Certifications". | N/A |
| Key sourcing country / region | Percentage of purchases |
|---|---|
| Not applicable for this profile. Please find full digital pdf ETSI certificates published under section “Business Governance & Certifications". | N/A |
Output capacity (N/A)
| Site Name | Site Address | Certificate/License number | Standard/Scheme number or name |
|---|
