The List of qualified trust service providers and qualified trust services in machine-readable format of the Republic of North Macedonia (the List) contains information on qualified trust service providers supervised by the Republic of North Macedonia, as well as information on the qualified trust services they provide, in accordance with the provisions laid down in the Law on Electronic Documents, Electronic Identification and Trust Services (“Official Gazette of the Republic of North Macedonia” No. 101/19, 275/19; 3/25; 135/25), which is fully aligned with Regulation (EU) No 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC.
The List is a key instrument for building trust among participants in the electronic market, enabling users to determine the qualified status and the status history of trust service providers and the services they provide.
The current implementation of TL-MK is referenced to the EU AdES LOTL.
Policy/rules for the assessment of the listed services
The List contains at least the information specified in Articles 2 and 5 of the Rulebook on the form and manner of publication of the list of qualified trust service providers and the list of qualified trust services (“Official Gazette of the Republic of North Macedonia” No. 47/20).
The List includes both current and historical information on the status of the listed services.
The List also provides information on the supervision scheme and the registration procedures under which trust service providers and the trust services they provide are listed.
Qualified trust service providers established in the Republic of North Macedonia are supervised in accordance with the Law on Electronic Documents, Electronic Identification and Trust Services (“Official Gazette of the Republic of North Macedonia” No. 101/19, 275/19; 3/25; 135/25), thereby ensuring compliance with the applicable legal requirements aligned with Regulation (EU) No 910/2014 (eIDAS).
Interpretation of the List
The general user guidelines for applications, services or products relying on the List are as follows:
The “qualified” status of a trust service is determined by the combination of the “Service type identifier” (Sti) value in a service entry and the status indicated in the “Service current status” field, effective from the date specified in the “Current status starting date and time”. Historical information regarding the status is also provided where applicable.
For qualified trust service providers issuing qualified certificates for electronic signatures, electronic seals and/or website authentication:
The value “CA/QC” for the “Service type identifier” (Sti), possibly further qualified as “RootCA-QC” through the “Service Information Extensions” (Sie), indicates that certificates issued by the Certification Authority (CA), identified through the “Service digital identifiers” (Sdi), are considered qualified certificates provided that they include at least one of the following:
-an ETSI-defined QC compliance statement (id-etsi-qcs-QcCompliance);
-an ETSI-defined certificate policy with OID 0.4.0.1456.1.1 (QCP+);
-an ETSI-defined certificate policy with OID 0.4.0.1456.1.2 (QCP);
provided that the service has a valid status (e.g. “under supervision”, “supervised”, “accredited” or “granted”) assigned by the competent authority.
Where “Qualifications Extension” information is present, it provides additional details regarding:
-the nature of the qualified certificate (QCStatement, QCForESig, QCForESeal, QCForWSA);
-indication that the certificate is not qualified (NotQualified);
-SSCD/QSCD support;
-issuance to a legal person (QCForLegalPerson).
These qualifiers serve to complement the information contained in the certificates.
If the required ETSI statements or certificate policies are not present and no relevant qualification information exists, the certificate shall not be considered qualified.
“Service digital identifiers” (Sdi) are used as trust data for the validation of electronic signatures or seals, whereby the public key and the subject name are considered essential trust data.
As a general rule, a service identified through the “Sti”, the service name and the service digital identifier shall have the status indicated in the “Service current status” field, effective from the corresponding date.
Specific interpretation rules for additional service information are available through the URIs referenced in the “Scheme rules” field.
Scheme rules URI
The Scheme rules URI applicable to the List of qualified trust service providers and qualified trust services in machine-readable format of the Republic of North Macedonia is:
http://trusteid.mdt.gov.mk/en/mkschemerules where “MK” represents the ISO 3166-1 alpha-2 country code of the Republic of North Macedonia, as specified in the “Scheme territory” field.