Avalehe pilt
Estonia signing CA (CSCA)
11/23/2019

Estonian Signing CA (CSCA)

This website contains information on the Estonian CSCA operated by AS Sertifitseerimiskeskus on behalf of Estonian Police and Border Guard Board (PBGB).

The distinguished name of the CSCA is C=EE, O=Estonia, OU=Police and Border Guard Board, CN=CSCA ESTONIA.

CSCA Public Key Certificates

The CSCA uses one key pair which is used to issue Document Signer certificates.

Certificates for the CSCA public keys can be found below. The information required to verify the authenticity of the following certificates is also available in authentic printed form upon request.

Current Public Key Certificate

Valid from December 8th 2016 12:48:21 to March 15th 2030 12:48:21.

The current public key is available as self-signed certificate, and as link certificate, verifiable by the previous public key.

The public key has the relative distinguished name SN = ‎65 b9 87 67 84 8d 56 2d 58 49 3a 75 e2 45 17 af and a SHA-1 fingerprint of ee a0 7e 94 16 c3 1f 3f 80 5d 4a ea 2d ea 7c 2a 94 6d 92 c3.

The self-signed certificate of the public key has the SHA-1 fingerprint of ‎‎0b 54 3d 2e 02 1a 78 a8 95 5b 09 e0 33 82 f5 00 e7 51 37 4e.

The link certificate of the public key has the SHA-1 fingerprint of ‎‎f3 0a 07 6f f8 d9 a8 d9 ed 7b 55 98 71 fc 8a e2 08 e3 85 08.


Previous Public Key Certificate(s)

Certificate 4 (issued in 2015)
Valid from November 11th 11:01:08 to February 16th 11:01:08

The public key has the relative distinguished name SN= 77 89 4a 56 e5 43 6b 75 56 43 03 d4 53 34 3b 54 and a SHA-1 fingerprint of c3 0f 8f 7b 17 6f a6 e9 e5 9b 2d 91 1e 32 7b d0 72 f6 48 f0.

The self-signed certificate of the public key has the SHA-1 fingerprint of ‎94 e1 7a 06 d5 3c 42 37 83 b1 88 3e 66 a1 48 4d 15 a7 ee e6.

The link certificate of the public key has the SHA-1 fingerprint of ‎54 6f aa 61 bc 5e a6 3d 29 3c f4 05 e4 d9 38 f0 f0 d3 53 ef.

Certificate 3 (issued in 2012)

Valid from November 28th 2012 11:44:53 to March 5th 2021 11:44:53

The public key has the relative distinguished name SN= 01:E3:5B:C4:14:A8:B6:12:50:B5:DD:15:96:18:3C:30 and a SHA-1 fingerprint of 5e:78:9a:65:b3:e1:0c:20:76:ea:ff:ad:40:b1:66:94:e3:55:25:88.

The self-signed certificate of the public key has the SHA-1 fingerprint of 73:85:f7:89:41:69:1d:5f:23:02:c3:33:b1:c6:4b:4d:f0:a7:7d:05.

The link certificate of the public key has the SHA-1 fingerprint of 89:94:33:d0:0d:72:90:bc:23:0f:89:ab:05:e9:c4:72:23:47:58:3e.

Certificate 2 (issued in 2009)
Valid from November 18th 2009 13:49:53 to February 21st 2018 0:00:00

The public key has the relative distinguished name SN=01 and the SHA-1 fingerprint of
f2:d5:4b:92:c9:1e:ea:92:9d:f8:98:6e:15:8c:03:1b:56:d6:36:7a.

The self-signed certificate of the previous public key has the SHA-1 fingerprint of
72:6f:5c:f5:d6:ae:b2:ae:f8:dd:b4:3b:d8:85:7d:c6:97:10:eb:71.

The link certificate of the previous public key has the SHA-1 fingerprint of
60:52:db:a3:45:7c:7d:41:e7:09:f8:dc:c6:b3:9a:f8:dc:85:5f:e3.

Certificate 1 (issued in 2007)
Valid from February 6th 2007 16:14:24 to May 12th 2015 0:00:00

The public key has the relative distinguished name SN=01 and the SHA-1 fingerprint of
ec:c7:4b:ad:ec:35:2b:72:f4:0c:2a:bf:c4:f8:f2:32:ce:c2:6f:61.

The self-signed certificate of the first public key has the SHA-1 fingerprint of
2f:86:7b:e3:4a:1f:f3:b6:5a:89:16:8c:4c:b1:71:a2:c7:b7:5a:01.

CSCA Master List

Currently there is no Master List available.

ICAO PKD

Estonia has not joined the ICAO PKD at present.

Deviation List

eRP deviation list

Certificate Revocation Lists


If you encounter any problems while downloading the CRL, please contact the CSCA (see below).

Document Signer Certificates of the Passports

The primary distribution channel for the DS certificate is the e-passport itself.

Communication with the CSCA

The primary communication channel with the CSCA is email in S/MIME format. The address for the primary communication channel is indicated in the SubjectAlternativeName extension of the current public key certificate. The secondary communication channel is fax: +3726123009.

Contact details

Identity and Status Bureau
Development Department

pki@politsei.ee
Pärnu maantee 139
15060 Tallinn
ESTONIA

Incoming Information

The information the CSCA is prepared to receive includes, but is not limited to, CSCA link certificates, CRLs and Certification Requests. All received information will be acknowledged.

Outgoing Information

The information the CSCA sends out includes, but is not limited to, DS certificates and CRLs.

Unless a communication channel with a relying party is already established (e.g. the email address is known from the SubjectAlternativeName extension contained in a CSCA certificate) registration with the CSCA is required to receive such information. The registration should include at least an email address and a proof of origin.