The PKI page

This page contains links to various sites and documents which are related to Public Key Infrastructure (PKI) stuff, especially links to all Certification Authorities (CAs) I'm aware of. Some links may be missing, other links may be out of date so please check back from time to time since I'm regularly updating this page which by definition is far from being complete. Please let me know about missing links.

Thanks a lot to everyone, esp. the folks at DFN-PCA, who helped creating and maintaining this page while I was with the team.

This page was last updated on June 21st, 2007 - new links are marked as

Jump directly to the following sections:

• Extensive list of Certification Authorities
  • PGP Certification Authorities
  • CAs accredited by the German Digital Signature Act ("Signaturgesetz")
  • CAs accredited by the Italian Digital Signature Act
  • CAs licensed by the Utah Digital Signature Act
  • CAs licensed by Washington State's Electronic Authentication Act
  • CAs licensed by Oregon's Electronic Signature Act
  • CAs licensed by the North Carolina Electronic Commerce Act
  • CAs licensed by California's Digital Signature Regulations
  • CAs licensed by Nebraska's Digital Signatures Act
  • PKI Service Providers approved by the Texas Digital Signature Rule
  • Information related to the European Directive for Electronic Signatures
  • CAs licensed under the Gvmt of India IT Act 2000
  • CAs licensed under the Polish Digital Signature Law
  • TTPs registered under the Dutch Wet Elektronische Handtekeningen

• Other sites with useful information
  • Cryptography
  • Digital Signatures
  • PGP / OpenPGP / GPG
  • General World Wide Web Security
  • Secure Socket Layer (SSL) / Transport Layer Security (TLS)
  • MIME Security
  • DNSSEC resources
  • Secure Electronic Transactions (SET)
  • Implementations / (open source) Toolkits / Products / Vendors
  • Literature / Articles / Publications / RFCs
    • PKIX
    • S/MIME
    • TLS
  • Miscellaneous PKI and Security stuff

Extensive list of Certification Authorities:

• Study on E-Sig Directive
• PKI page
• DFN - PCA (The PCA for the German Research Network)
• The UNINETT PCA in Norway and its policy.
• IPRA: Internet PCA Registration Authority (MIT)
• CREN (US Corporation for Research and Educational Networking) CA
• VeriSign, Inc. and its Certificate Practice Statement (CPS), ECA and IECA Certificates for U.S. Government contractors
• SET Demo Certificate Selection from VeriSign, Inc.
• TradeAuthority
• Thawte Certification Division
• Initiative for Computer Authentication Technology (ICAT) (Alternative site)
• Free certificates by Entrust Technologies
• Spyrus Certification Authorities (Australia)
• Net.Registry (IBM)
• BiNARY SuRGEONS: Certification Services
• SoftForum CA
• Government of Canada Public Key Infrastructure
• AD AEQUITATEM (Univ. of Zaragoza, Spain)
• SISCER (Spain)
• Internet Publishing Services (IPS) (note: Spanish language!)
• SIA CA (note: Italian language!)
• CertCo
• IKS Certification Authority
• CompuSource
• CARYNET Security
• KeyPOST (Australia Post)
• BankGate
• Entropia Internet CA
• KAIST network CA (note: Korean language!)
• PVT CA (note: Czech language!)
• South African Certification Agency
• Telecom Italia Net CA (note: Italian language!)
• World Wide Wedlin CA
• Swisskey (discontinued)
• Australian Government Public Key Authority
• NLsign (note: Dutch language!)
• SSB - SpA CA (note: Italian language!)
• Agencia de Certificación Electrónica
• Laboratorio de Criptología (note: Spanish language!)
• Interneto Projektai (note: Lithuanian language!)
• University of Torino (note: Italian language!)
• The USERTRUST Network
• GlobalSign
• Netrust
• Baycorp ID Services Ltd
• Certplus
• Controller of Certification Authorities (Gov. of Singapore)
• CrossCert (Korean Electronic Certification Authority)
• Equifax Secure
• Security Domain Pty Limited
• Certificates Australia Pty Limited
• a-sign (note: German language!)
• FP5 Certification Service (Fifth Framework Programme of the European Community)
• IG tOP: Trägerschaft öffentliche PKI Schweiz (note: German language!)
• QuoVadis Limited: Bermuda Digital CA
• Certipor: Sociedade Portuguesa de Certificados Digitais, S.A.
• Acertia (note: Spanish language!)
• ICP-Brasil (note: Portuguese language!)
• Identrus
• E-Commerce PKI CA
• Certeca (Offshore CA)
• Digital Signature Trust Company
• BCA: US DoD Bridge Certification Authority Technology Demonstration
• EuropePKI
• DTCA: D.Trust Certifikacna Autorita (note: Slovakian language!)
• Centrum Certyfikacji Signet (note: Polish language!)
• PKI der FhG (note: German language!)
• Sonera CA (note: Finnish language!)
• Certificado Digital S.A. (note: Spanish language!)
• Post.Trust
• steria (note: Swedish language!)
• CryptGuard.com
• ComSign
• Union Trust Network (Ukraine)
• LuxTrust S.A. (note: French language!)
• Certicamara S.A. (note: Spanish language!)
• Carillon.CA
• StartCom Free SSL Certification Authority
• Finansiell ID-Teknik BID AB
• CertiPath: "the world's first commercial PKI bridge"
• AeroTrust Digital Certification Service
• XMPP Intermediate CA

PGP Certification Authorities:

• DFN - PCA (The PCA for the German Research Network)
• c't - Krypto-Kampagne (note: German language!)
• IKS Certification Authority
• AD Certification Service (note: German language!)
• Powszechne Centrum Certyfikacji
• CAcert

CAs accredited by the German Digital Signature Law ("Signaturgesetz")

• The Root CA: Bundesnetzagentur (Regulierungsbehörde) (note: German language!)
  • AuthentiDate
  • Bundesnotarkammer (note: German language!)
  • DATEV eG (note: German language!)
  • Deutsche Post Com GmbH (ex Signtrust)
  • D-Trust
  • Hanseatische Rechtsanwaltskammer Hamburg (see here also - note: German language!)
  • Hanseatische Steuerberaterkammer Bremen (see here also - note: German language!)
  • Patentanwaltskammer (see here also - note: German language!)
  • Rechtsanwaltskammer Bamberg (see here also - note: German language!)
  • Rechtsanwaltskammer Berlin (see here also - note: German language!)
  • Rechtsanwaltskammer Düsseldorf (see here also - note: German language!)
  • Rechtsanwaltskammer Frankfurt a.M. (see here also - note: German language!)
  • Rechtsanwaltskammer Koblenz (see here also - note: German language!)
  • Rechtsanwaltskammer Köln (see here also - note: German language!)
  • Rechtsanwaltskammer München (see here also - note: German language!)
  • Rechtsanwaltskammer Nürnberg (see here also - note: German language!)
  • Steuerberaterkammer Berlin (see here also - note: German language!)
  • Steuerberaterkammer Brandenburg (see here also - note: German language!)
  • Steuerberaterkammer Hessen (see here also - note: German language!)
  • Steuerberaterkammer München (see here also - note: German language!)
  • Steuerberaterkammer Niedersachsen (see here also - note: German language!)
  • Steuerberaterkammer Nordbaden (see here also - note: German language!)
  • Steuerberaterkammer Nürnberg (see here also - note: German language!)
  • Steuerberaterkammer Saarland (see here also - note: German language!)
  • Steuerberaterkammer des Freistaates Sachsen (see here also - note: German language!)
  • Steuerberaterkammer Stuttgart (see here also - note: German language!)
  • TeleSec (Deutsche Telekom) (note: German language!)
  • Wirtschaftsprüferkammer (see here also - note: German language!)

• More Information on the German Digital Signature Act (note: German language!)
• T7 - ISIS (Industrial Signature Interoperability Specification, note: obsolete - this is now ISIS-MTT)
  • ISIS-MTT Testbed
• Rahmenwerk für die einheitliche Spezifizierung der Einsatzbedingungen für Signaturanwendungskomponenten (note: German language!)

CAs accredited by the Italian Digital Signature Law

• Elenco pubblico dei certificatori attivi (note: Italian language!)
  • Societa Interbancaria per l'Automazione - Cedborsa S.p.A. (SIA S.p.A.) (note: Italian language!)
  • SOCIETA' per i SERVIZI BANCARI - SSB S.p.A. (note: Italian language!)
  • BNL Multiservizi S.p.A. (note: Italian language!)
  • Infocamere SC.p.A. (note: Italian language!)
  • Finital - Finanziaria Italiana S.p.A. (note: Italian language!)
  • Saritel S.p.A. (note: Italian language!)
  • Postecom S.p.A. (note: Italian language!)
  • Societa per Azioni Servizi Centralizzati - Seceti S.p.A. (note: Italian language!)
  • Centro Tecnico per la RUPA (note: Italian language!)
  • In.Te.S.A. S.p.A. (note: Italian language!)
  • ENEL.IT S.p.A. (note: Italian language!)
  • Trust Italia S.p.A. (note: Italian language!)
  • Cedacrinord S.p.A. (note: Italian language!)
  • ACTALIS S.p.A. (note: Italian language!)

CAs licensed by the Utah Digital Signature Act

• Digital Signature Trust Company
• Universal Secured Enryption Repository Company
• VeriSign, Inc.

CAs licensed by Washington State's Electronic Authentication Act

• ID Certify, Inc.
• VeriSign, Inc.
• Digital Signature Trust Company

CAs licensed by Oregon's Electronic Signature Act

• VeriSign, Inc.
• Digital Signature Trust Company

CAs licensed by the North Carolina Electronic Commerce Act

• VeriSign, Inc.
• Digital Signature Trust Company

CAs licensed by California's Digital Signature Regulations

• VeriSign, Inc.
• Digital Signature Trust Company
• ID Certify, Inc.
• Entrust Technologies, Inc.

CAs licensed by Nebraska's Digital Signatures Act

• VeriSign, Inc.
• Digital Signature Trust Company
• ID Certify, Inc.

PKI Service Providers approved by the Texas Digital Signature Rule

• VeriSign, Inc.
• Entrust

Information and documents related to the European Directive for Electronic Signatures

• The European Commission: Information Society Website
• EESSI: The European Electronic Signature Standardization Initiative
• ETSI: European Telecommunications Standards Institute
• CEN/ISSS E-Sign: European Committee for Standardization (another site)
• European Commission: Information Society Directorate-General
• The Electronic Signatures Regulations 2002 (UK)
• Supervisory Authority for Electronic Signatures (Austria): List of certification-service-providers in Austria
• Status of notification of legal acts implementing the electronic signatures directive
• FESA: Forum of European Supervisory Authorities for Electronic Signatures
• Study report: The legal and market aspects of electronic signatures (PDF version, accompanying website, accompanying website)
• VITAS: Voluntary Trust-service Approval Schemes common interest group
• Prestataire de service de certification (Luxembourg)
• Position paper on the e-signatures review by the American chamber of commerce
• Swiss Accreditation Service (SAS): List of bodies which are entitled to issue and administer qualified electronic certificates
  • Swisscom Digital Certificate Service
  • QuoVadis Trustlink Schweiz AG
• eSignatures Standardisation survey

CAs licensed under the Gvmt of India IT Act 2000

• Controller of CAs
• IDRBT CA
• TCS Certifying Authority (CA) Services
• National Informatics Center CA
• SafeScrypt

CAs licensed under the Polish Digital Signature Law

• Unizeto CERTUM CA
• Sigillum Polskie Centrum Certyfikacji Elektronicznej (note: Polish language!)
• Centrum Certyfikacji Signet (note: Polish language!)
• KIR S.A. (note: Polish language!)

TTPs registered under the Dutch Wet Elektronische Handtekeningen

• Unieke Zorgverlener Identificatie Register (note: Dutch language!)
• PinkRoccade CSP (note: Dutch language!)
• DigiNotar B.V. (note: Dutch language!)

Other sites with useful information:

Here are some more links to sites I find interesting.

Cryptography:

• International Cryptography Pages
• RSA Laboratories' "CryptoBytes" technical newsletter
• The "CRYPT NEWSLETTER" Homepage
• Crypto Law Survey (Bert-Jaap Koops)
• Cryptography Export Control Archives
• Steganography Info and Archive
• Cryptographers Homepages
• European Cryptography Resources
• Commercial Encryption Export Controls (BXA)
• The Worldwide Cryptography Debate
• European expert hearing on digital signatures and encryption (Copenhagen, April 23-24 1998)
• Counterpane Internet Security, Inc. (Bruce Schneier)
• Selecting Cryptographic Key Sizes (Arjen Lenstra, Eric R.Verheul)
• Computational number theory and data security
• Handbook of Applied Cryptography (Menezes, van Oorschot, Vanstone)
• Cryptography Publishing Project
• Cryptographic Software Export Controls in the EU (thesis by Simo-Pekka Parviainen)
• Stegdetect
• NIST's Key Management Standards
• ID-PKC: IDentity-based Public Key Cryptography (CESG)

Digital Signatures:

• Digital Signature Law Survey
• EFGA: Digital Signature Section
• Summary of international legislation
• Tutorial on Digital Signatures
• Digital Signature Links
• Internet Law & Policy Forum (ILPF): Digital Signature Working Group
• Digital Signature Guidelines
• ICC: General Usage for International Digitally Ensured Commerce
• European Commission Legal Advisory Board: Digital Signatures and Encryption
• W3: Digital Signature Initiative
• UNITED NATIONS (UNCITRAL): Draft Uniform Rules On Electronic Signatures
• Baker & McKenzie: E-Signatures and D-Signatures
• S.761: Electronic Signatures in Global and National Commerce Act (US federal)
• Bill 88: Electronic Commerce Act, 2000 (Canada)
• Projekt ArchiSig
• Fst Ricerca (note: Italian language!)
• Leitfaden Elektronische Signatur (note: German language!)
• Federal, State and International Electronic Signature Laws
• signaturrecht.de (note: German language!)

PGP / OpenPGP / GPG:

• The international PGP Home Page
• The domain pgp.net
• PGP Keyserver
• PGP Web of Trust Statistics
• RFC 1991: "PGP Message Exchange Formats"
• RFC 2015: "MIME Security with Pretty Good Privacy (PGP)"
• PGP Corporation
• PGP Attack FAQ
• PGP International
• Robert (Guerra)'s PGP Links
• RFC 2440: "OpenPGP Message Format"
• PGP DH vs. RSA FAQ
• GnuPG - the GNU Privacy Guard
• Key experiments: How PGP Deals With Manipulated Keys
• Experimental PGP key path finder
• PGPdump Interface
• The DSA Flaw in OpenPGP
• PGP Keyring Analysis
• GPGrelay
• Crypt::OpenPGP
• A security analysis of PGP
• CKS: CryptNET Key Server
• RFC 3156: "MIME Security with OpenPGP"
• Public Key Servers
• Tom McCune's page for PGP
• NAI Letter sent to PGP Customers on Feb, 26th (R.I.P. PGP)
• OpenPKSD
• SKS: the synchronizing keyserver
• OpenCDK
• PKS: OpenPGP Key Server
• onak: OpenPGP Key Server

General World Wide Web Security:

• The World Wide Web Security FAQ
• Java Security FAQ
• Terisa Systems
• IBM's Surf'N'Sign: Signing Documents on the Web
• Tha Java Security Hotlist
• WWW Security Pointers
• Java Security Resources
• Java Filter
• Java Security: Chronology of security-related bugs (Sun)

Secure Socket Layer (SSL) / Transport Layer Security (TLS):

• PureTLS - free Java-only implementation of SSLv3 and TLSv1
• More SSL related applications from the OpenSSL web site
• pilotSSLeay: port of SSLeay-0.8.1 to the Pilot
• ssldump: SSLv3/TLS network protocol analyzer
• OpenSSL for Win32
• A design weakness of SSL/TLS (H. Krawczyk)
• GNU TLS library
• OpenSSL Examples
• OpenSSL based PKI
• SSLbar
• Which SSL: SSL Certificate Buyers Guide (Comodo Group)
• SSL Certificate Assistant
• SSL Guide

MIME Security:

• Information on S/MIME (IMC)
• S/MIME Freeware Library (SFL)
• S/MIME Mail Security (IETF)
• S/MIME and OpenPGP
• NIST S/MIME Activities
• S/MIME Interop Matrix
• PM-S/MIME: S/MIME Plugin for Pegasus Mail

DNSSEC resources:

• DNS Security (DNSSEC) in CAIRN
• NLnet Labs DNSSEC resources
• IETF: DNS Extensions (dnsext) System Security
• NIC-SE: Reports on DNSSEC
• Report from the Workshop on DNSSEC, Sweden
• DNSsec Internet Drafts
• DNSSEC Related Links
• DNSSEC Paper
• DNSSEC - Software Integration
• Report on IIS DNSSEC Workshop
• Thesis on DNSSEC (M. Gieben)
• DNSSEC.net
• DNSSEC at University of Murcia

Secure Electronic Transactions (SET):

• SET Specification by MasterCard and Visa

Implementations / (open source) Toolkits / Products / Vendors:

• SECUDE
• NCSA httpd - Using PGP/PEM encryption
• RSA Euro - Cryptography for the World
• SESAME: Cryptographic applications (secure site)
• Information about TIS/MOSS (TIS)
• SSR: Secure Socket Relay
• Frontier Technolgies: e-Lock (alternative site)
• cryptlib: freely available Encryption Toolkit (Peter Gutmann)
• Apache-SSL: Secure Webserver (Ben Laurie)
• SSLeay
• IT Solution GmbH Software for qualified signatures according to German and Austrian Signature Law (Note: German language!)
• PCP: Pure Crypto Project (R. Senderek)
• CoreStreet, Ltd.
• Pi3Web Certification Authority
• EldoS
• XiCrypt Technologies
• roCA: read-only CA
• Zertificon Solutions GmbH
• AgileCO eTRUST
• Direct2GOV
• UMU-PKIv6 (University of Murcia)
• WISeKey, SA
• CertiVeR: Certificate Validation and Revocation service
• Key Manager (Firefox Add-On)
• XML Digital Signature Tool (Firefox Add-On)
• xyzmo
• SimpleAuthority

Literature / Articles / Publications / RFCs:

• X.509 specification (including latest drafts on X.509v4)
• PKI-related activities at NIST (also from the DFN-PCA FTP-Server)
• Ten Risks of PKI: What You're Not Being Told About Public Key Infrastructure (B. Schneier, C. Ellison)
  • ...and a response to 10 Risks of PKI (A. Perez)
  • ...and another response to 10 Risks of PKI (B. Laurie)
• The OpenSource PKI book
• The Public-Key Cryptography Standards (PKCS)
• Conventional PKI: An Artefact Ill-Fitted to the Needs of the Information Society (Roger Clark)
• Excerpts from "The Design and Verification of a Cryptographic Security Architecture" (PhD thesis, Peter Gutmann)
• PKI Publications from ETH, Zürich
• Public Key Cryptography based on Braid Groups
• The Ten Minute CEO Briefing on PKI... (note: site seems to be dead!)
• The Shocking Truth About Digital Signatures and Internet Commerce (J. Winn)
• PKI Policy Pitfalls (M. Bobbitt)
• List of CA's
• An introduction to PKI (and more PKI white papers)
• White Papers on PKI
• Digital Certificates (Roedy Green)
• Collection of PKI related RFCs and internet drafts
• Implementation Problems on PKI
• PKI Policy in the Business Environment (J. Sabo, Y. Dzambasow)
• Vergleichbarkeit von PKI-Policies mittels XML (note: German language!)
• Non-Repudiation in the Digital Environment (A. McCullagh, W. Caelli)
• The Liability Regime for Certification Authorities Towards Third Parties Outwith the EC Directive in England and Germany Compared (S. Hindelang)
• Solar Trust Model (M. Clifford)
• Networking in The Solar Trust Model: Determining Optimal Trust Paths in a Decentralized Trust Network (M. Clifford)
• A vulnerability assessment of roaming soft certificate PKI solutions (S. Wilson)
• PKI Certificate Revocation (Master thesis, A. Arnes)
• Misc PKI publications (Stephen Wilson, see also his "Babysteps")
• Comparison Of Secure Email Technologies X.509 / PKI, PGP, and IBE (Ed Gerck)
• PKI tutorials by Carillon.CA
• Die qualifizierte Signatur - Vorteile und Fallbeispiele :-) (note: German language!)

  RFCs and internet drafts:

• The IETF Security Area and related IETF working groups
• PKIX:
• S/MIME: S/MIME Mail Security
• TLS: Transport Layer Security

Miscellaneous PKI and Security stuff:

世界の60ヶ国の援助により、技術支援、考古学調査支援などが行われた。ヌビア遺跡内のアブ・シンベル神殿の移築が行われ、これがきっかけとなり、開発から歴史的価値のある遺跡、建築物、自然等を国際的な組織運営で守ろうという機運がうまれた世界が平和になるためには、まず戦争放棄することです。戦争は、宗教の問題など意見の食い違いで多くの命が失われてしまうとても悲惨なものです。戦争がある限り世界に平和はひとつもありません。　の向こうで女性が感じてるんだから、目の前の女性が感じないのは自分の技術と経験が足りないからと思い、更に躍起になる人がいます。

　

　週末の金曜日の夜から日曜日は、私の家で過ごすのが日課になっていました。実は、彼、44歳の妻子持ちなのですが、９歳も年上の奥さんにとうとう感づかれてしまい、ここ2〜3か月、プライベートでは会っていませんでした。 　最初のカメラテストはオナニーでマジイキ、さらに悪ノリぶっかけ面接、5連続ごっくんなど、すべてをエッチポテンシャル全開で受け止める！その夜、同棲の打ち合わせもあったし、最近はダーリンに料理も作っているので、仕事帰りにダーリンが家に来ました。無修正動画特集です

• 激選されたエロ動画はココ

  エロ動画が見放題、初心者でも安心して楽しめる、完全ダウンロードサイト

• 選びぬいたエロ動画はココ

  エロ動画が見れるサイト、アイドル系美少女モノが中心のエロ動画を配信している

• 大人気のアダルトビデオが見れる

  アダルトビデオ作品が、マスターテープを使用した完全オリジナル編集

• 無料人気エロサイトです

  エロサイトを完全ダウンロード初心者でも安心して楽しめる

• 完全独占エロ動画が見たい

  エロ動画はココだコスプレなどの人気コンテンツが充実しています

• 完全無料エロ画像の女の子

  エロ画像中心の動画を配信していることで人気コンテンツが充実しています

• 完全無料アダルト動画のサンプル

  アダルト動画が見れるサイトだよ多くの作品が、マスターテープを使用した完全オリジナル編集動画作品を多数配信！

□実は多様で奥深い歴史がある エロがみえるよ
□ひきしまるところは引き締まっているムッチリとしたカラダ敏感な反応慣れていない感どれも　エッチですもの
□ アダルトビデオが見れるよ　日本全国の登録に対応した完全無料コミュニティサイトです