Scope
On the request of The Human Environment and Transport Inspectorate (‘Inspectie Leefomgeving en Transport’, ‘ILT’), the annual surveillance audit on all areas and processes was performed by BSI Group The Netherlands B.V. (John M. Keynesplein 9, 1066 EP Amsterdam, The Netherlands).
The full audit covered all applicable requirements from the audit criteria listed below (see “Audit Information”) and are defined in the Human Environment and Transport Inspectorate’s Statement of Applicability, dated 26 November 2024 and the Overview of Applicability, dated 28 August 2024.
The scope of the assessment comprised the following Trust Service Provider component services, performed completely by subcontractors under the responsibility of ILT:
-,,Registration Service
-,,Certificate Generation Service
-,,Dissemination Service
-,,Revocation Management Service
-,,Revocation Status Service
-,,Subject Device Provision Service
These TSP component services are being provided for the following qualified trust services as defined in EU Regulation 910/2014 (eIDAS):
-,,Issuance of qualified certificates for electronic signatures (qualified trust service), in accordance with the policy: QCP-n-qscd
The certificates are issued through its issuing certification authorities, as specified below:
Root CA: Staat der Nederlanden Root CA - G3 (not in scope)
Staat der Nederlanden Organisatie Persoon CA - G3 (not in scope)
MinIenW PKIoverheid Organisatie Persoon CA - G3
-,,O = Ministerie van Infrastructuur en Waterstaat
-,,Serialnumber: 728a43bfca6d3147465eaa1a6fb6b2533ebc009f
-,,Valid from April 16, 2019 to November 12, 2028
-,,SHA-256 fingerprint: 5fbf6ed4f0f87ada65fae7aaab4ad9e1b5a586939aedfb39a4926be7f65c650c
+,,PKIOverheid Personal Citizen Non-Repudiation (OID 2.16.528.1.1003.1.2.3.2), in accordance with policy QCP-n-qscd
These Certification Authority processes and services are documented in the following documents:
-,,Issuing policy On-board computer cards and System cards, Certification Practice Statement (CPS) Trust Service Provider IenW, version 4.12 G3 EN, dated 22 May 2024
-,,PKI Disclosure Statement, version 4.12, dated 22 May 2024
Our annual certification audit was performed in November 2024. The result of this audit is that we conclude, based on the objective evidence collected during these audits, between 15 November 2023 and 14 November 2024, the areas assessed were generally found to be effective, based on the applicable requirements defined in Human Environment and Transport Inspectorate’s Statement of Applicability, dated 26 November 2024 and the Overview of Applicability, dated 28 August 2024.
Audit information:
Audit criteria:
-,,ETSI EN 319 401 v2.3.1 (2021-05) General Policy Requirements for Trust Service Providers;
-,,ETSI EN 319 411-1 v1.4.1 (2023-10) Electronic Signatures and Infrastructures (ESI) - Policy and security requirements for Trust Service Providers issuing certificates - Part 1: General requirements, for the policy: NCP+;
-,,ETSI EN 319 411-2 v2.5.1 (2023-10) Electronic Signatures and Infrastructures (ESI) - Policy and security requirements for Trust Service Providers issuing certificates;- Part 2: Requirements for trust service providers issuing EU qualified certificates, for the policy: QCP-n-qscd;
-,,Regulation (EU) N 910/2014 of the European Parliament and of the Council on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC, Chapter III – Trust Services;
-,,CA/Browser Forum - Network and Certificate System Security Requirements v2.0 (June 5, 2024);
-,,PKIoverheid - Program of Requirements v5.0, G3 Legacy Organization Person certificates (previously 3a), G3 Legacy Organization Services Domain (previously 3b) and G3 2019 Autonomous Devices Domain (previously 3d).
Audit Period of Time:
Between 15 November 2023 and 14 November 2024
Audit performed:
November 2024
Information and Contact:
BSI Group the Netherlands B.V., John M. Keynesplein 9, 1066 EP Amsterdam, NL
Scope
On the request of The Human Environment and Transport Inspectorate (‘Inspectie Leefomgeving en Transport’, ‘ILT’), the annual surveillance audit on all areas and processes was performed by BSI Group The Netherlands B.V. (John M. Keynesplein 9, 1066 EP Amsterdam, The Netherlands).
The full audit covered all applicable requirements from the audit criteria listed below (see “Audit Information”) and are defined in the Human Environment and Transport Inspectorate’s Statement of Applicability, dated 26 November 2024 and the Overview of Applicability, dated 28 August 2024.
The scope of the assessment comprised the following Trust Service Provider component services, performed completely by subcontractors under the responsibility of ILT:
-,,Registration Service
-,,Certificate Generation Service
-,,Dissemination Service
-,,Revocation Management Service
-,,Revocation Status Service
-,,Subject Device Provision Service
These TSP component services are being provided for:
-,,Issuance of public key certificates (non-qualified trust service), in accordance with the policy NCP+
The certificates are issued through its issuing certification authorities, as specified below:
Root CA: Staat der Nederlanden Root CA - G3 (not in scope)
Staat der Nederlanden Organisatie Persoon CA - G3 (not in scope)
MinIenW PKIoverheid Organisatie Persoon CA - G3
-,,O = Ministerie van Infrastructuur en Waterstaat
-,,Serialnumber: 728a43bfca6d3147465eaa1a6fb6b2533ebc009f
-,,Valid from April 16, 2019 to November 12, 2028
-,,SHA-256 fingerprint: 5fbf6ed4f0f87ada65fae7aaab4ad9e1b5a586939aedfb39a4926be7f65c650c
+,,PKIOverheid Personal Citizen Authenticity (2.16.528.1.1003.1.2.5.1), in accordance with policy: NCP+
Staat der Nederlanden Organisatie Services CA - G3 (not in scope)
MinIenW PKIoverheid Organisatie Services CA - G3
-,,O = Ministerie van Infrastructuur en Waterstaat
-,,Serialnumber: 0x7ac7b828ef1fddc1e3fb7d36ba49efb82288f419
-,,Valid from April 16, 2019 to November 12, 2028
-,,SHA-256 fingerprint: 394ccbbc0b3595ca0ded40072faf98636ed021699ad2894564879165b5b5d4c9
+,,PKIOverheid Services Authenticity (2.16.528.1.1003.1.2.5.4), in accordance with policy: NCP+
Staat der Nederlanden Autonome Apparaten CA - G3 (not in scope)
MinIenW PKIoverheid Autonome Apparaten CA - G3
-,,O = Ministerie van Infrastructuur en Waterstaat
-,,Serialnumber: 5330e0ecb867478f9b9ec61199b09b7842266950
-,,Valid from April 16, 2019 to November 12, 2028
-,,SHA-256 fingerprint: 06436ac8d0c8e120a5b5fa8c2bcdcb2f1f80585e79c77b7e0f8d0f6168d9c45e
+,,PKIOverheid Autonomous Devices – Authenticity (2.16.528.1.1003.1.2.6.1), in accordance with policy: NCP+
These Certification Authority processes and services are documented in the following documents:
-,,Issuing policy On-board computer cards and System cards, Certification Practice Statement (CPS) Trust Service Provider IenW, version 4.12 G3 EN, dated 22 May 2024
-,,PKI Disclosure Statement, version 4.12, dated 22 May 2024
Our annual certification audit was performed in November 2024. The result of this audit is that we conclude, based on the objective evidence collected during these audits, between 15 November 2023 and 14 November 2024, the areas assessed were generally found to be effective, based on the applicable requirements defined in Human Environment and Transport Inspectorate’s Statement of Applicability, dated 26 November 2024 and the Overview of Applicability, dated 28 August 2024.
Audit information:
Audit criteria:
-,,ETSI EN 319 401 v2.3.1 (2021-05) General Policy Requirements for Trust Service Providers;
-,,ETSI EN 319 411-1 v1.4.1 (2023-10) Electronic Signatures and Infrastructures (ESI) - Policy and security requirements for Trust Service Providers issuing certificates - Part 1: General requirements, for the policy: NCP+;
-,,CA/Browser Forum - Network and Certificate System Security Requirements v2.0 (June 5, 2024);
-,,PKIoverheid - Program of Requirements v5.0, G3 Legacy Organization Person certificates (previously 3a), G3 Legacy Organization Services Domain (previously 3b) and G3 2019 Autonomous Devices Domain (previously 3d).
Audit Period of Time:
Between 15 November 2023 and 14 November 2024
Audit performed:
November 2024
Information and Contact:
BSI Group the Netherlands B.V., John M. Keynesplein 9, 1066 EP Amsterdam, NL