Article (24) Issuance of the Qualified Electronic Signature/Seal Authentication Certificate
1. The Qualified Electronic Signature/Seal Authentication Certificates may be provided as a Qualified Trust Service only through a Qualified Trust Service Provider.
2.The Qualified Trust Service Providers may use a Qualified Electronic Signature/Seal Authentication Certificate issued by another Qualified Trust Service Provider accompanied by a valid Qualified Electronic Signature/Seal to authenticate the Person requesting a Qualified Electronic Signature/Seal Authentication Certificate.
3. Where the Qualified Trust Service Provider uses a procedure equivalent to the appearance in person to verify the identity and capacity of the Person to whom a Qualified Electronic Signature/Seal Authentication Certificate will issue, pursuant to Clause (4) of Article (34) of the Decree-Law, the TDRA may, in addition to the Compliance Assessment report, ascertain that such procedures is equivalent to the appearance in person, pursuant to the controls issued by the TDRA in this regard.
4. The Qualified Trust Service Provider that issues a Qualified Electronic Signature/Seal Authentication Certificate as a Qualified Trust Service shall create and update a database for the certificates.
5. The Qualified Trust Service Provider shall identify a set of adequate policies and practices to provide the Qualified Electronic Signature/Seal Authentication Certificate as a Qualified Trust Service under the policy of providing the Qualified Electronic Signature/Seal Authentication Certificate service as a Qualified Trust Service and the practice statement of such service.
6. The service policy and the practice statement shall be governed by the technical requirements and specifications of the content and structure of policies defined under the resolutions issued by the TDRA.
7. The Qualified Trust Service provider shall be responsible for providing the Qualified Trust Service according to the procedures set forth in the service practice statement and the service policy. Where the Trust Service or part thereof is provided by third parties, the Qualified Trust Service Provider shall identify the responsibility of such parties and ensure that they will comply with any controls required by the Qualified Trust Service Provider.