“System for Electronic Payments Bulgaria/SEP Bulgaria“ JSC as an accredited provider of certification services supports a public electronic register, in which it publishes Base and Operational certificates from its hierarchy, issued Certificates for QES, lists of revoked certificates for QES and other information necessary to use eSign certification services.

Certificates issued

eSign certificates for Qualified Electronic Signature (QES) are issued with three years validity period. Within this period of validity, they may be suspended or terminated by the authors and holders due to changes in input data or by the authorities in case of material circumstances. It is crucial when obtaining electronically signed document or email to check if the corresponding eSign Signature Certificate is a valid QES.

Information about the current status and duration of issued eSign certificate for QES by SEP Bulgaria can be found in the section Validation certificates.

Certificate revocation

When eSign certificate for QES has been suspended or terminated during the period of validity from the person who entered it, or by the request of authorities, such Certificate shall be included automatically in the CRL of the certificate revocation list.

If eSign certificate is included in the CRL list for verification of its validity, it will have the status "invalid" and the entire electronic signature guaranteed by it will not have the power of a handwritten signature.

So regularly update your computer's list of revoked certificates published below in section CRL and store.

Certificates of SEP Bulgaria

To be able to use your eSign Certificate for QES or if you receiving electronic documents signed with electronic signature guaranteed by eSign certificate for QES, you must install on your computer a valid Basic and Operational sertificates of SEP Bulgaria.

All eSign certificates for QES issued by SEP Bulgaria after 21.12.2011 are guaranteed by the new certification hierarchy, and certificates from SEP Bulgaria before that date have been validated by the old certification hierarchy.

To ensure trouble-free useage of certification services eSign recommend that you download and install on your computer all official certificates SEP Bulgaria published on this page.

Certification hierarchy for issued QES - eIDAS from 01.07.2017

eSign Sep Root CA

download
Serial Number
4B BB 1A 09 7D BD 25 52
Valid from
08.10.2017г.
Valid to
08.10.2037г.
Thumbprint- sha1
8d 7c 6a 39 5b bd b8 dc 8b ec db 93 cd cb 6c 45 f0 83 89 02

eSign Sep QES CA

download
Serial Number
46 5d 25 53 d1 97 54 90
Valid from
09.10.2017г.
Valid to
08.10.2037г.
Thumbprint- sha1
41 2d 15 1a d0 43 30 40 82 47 e0 21 ea a4 9e f2 c7 1c 55 2d

eSign Sep OCSP

download
Serial Number
1e 56 70 dd 49 78 87 83
Valid from
16.10.2017
Valid to
16.10.2022 г.
Thumbprint- sha1
b6 fe 3d a5 89 ca f8 b5 d1 58 b0 b0 6e 59 2e d3 a4 0b a2 98

Certification hierarchy for issued QES from 01.07.2013 to 30.06.2017

Basic Certificate of SEP Bulgaria (SEP_Root_CA) is a service certificate issued to verify the signatures on the Operational certificates of SEP Bulgaria, lists of issued and revoked Operational certificates and other applications for work purposes.

SEP_Root_CA

download
Serial Number
1a cb 24 72 9a d8 6f a8
Valid from
28.11.2011
Valid to
28.11.2031
Thumbprint- sha1
56 28 d7 3c 8b 59 fd 72 54 85 cd 9b b5 46 43 6e 8c f7 1e 8b
 
Operational Certificate of SEP Bulgaria (eSign QES CA) is a service certificate signed by Basic Certificate (SEP_Root_CA), issued to sign all issued eSign certificates for QES, as well as lists of issued and revoked eSign certificates for QES.
 

eSign QES CA

download
Serial Number
6a d3 4f a0 d1 4f fc 56
Valid from
27.03.2013
Valid to
27.03.2023
Thumbprint- sha1
80 2b 3e ec 71 01 02 38 a3 0e 14 c9 f6 53 07 e4 e1 5d cf 0e
 
To be able to use the service Authentication time to check the time of laying the eSign digital signature, is necessary to install TimeStamp Certificate on your computer.
 

TimeStamp Certificate

download
Serial Number
1e 6d e8 f0 da 61 4e 80
Valid from
07.12.2011
Valid to
07.12.2021
Thumbprint- sha1
0b e2 d6 1a 70 a4 e3 ac a4 e4 4b eb ab 86 35 95 5f ac 0b 63
 
Service in validation status of eSign certificate for QES of electronic document is available in real time using OCSP protocol. Electronic applications sent to the server of SEP Bulgaria signed by OCSP Certificate.
 

OCSP Certificate

download
Serial Number
0e e8 38 72 84 23 24 d8
Valid from
28.03.2013
Valid to
27.03.2023
Thumbprint- sha1
ef 1a cb 41 56 d6 35 43 e7 c5 1a 9c 11 a9 88 3b 4b 8e 07 8d
 
If you are the owner or recipient of the certificate of a qualified electronic signature issued by SEP Bulgaria before 01.07.2013 it is necessary to install on your computer Basic and Operating Certificates of SEP Bulgaria below at that date.

Old certification hierarchy (for QES issued before 01.07.2013)

Basic Certificate of SEP Bulgaria (SEP_Root_CA) is a service certificate issued to verify the signatures on the Operational certificates of SEP Bulgaria, lists of issued and revoked Operational certificates and other applications for work purposes.

SEP_Root_CA

download
Serial Number
1a cb 24 72 9a d8 6f a8
Valid from
28.11.2011
Valid to
28.11.2031
Thumbprint- sha1
56 28 d7 3c 8b 59 fd 72 54 85 cd 9b b5 46 43 6e 8c f7 1e 8b
 
Operational Certificate of SEP Bulgaria (SEP_QES_CA) is a service certificate signed by Basic Certificate (SEP_Root_CA), issued to sign all issued eSign certificates for QES, as well as lists of issued and revoked eSign certificates for QES.
 

SEP_QES_CA

download
Serial Number
6e bf 7a 15 00 a9 3d 41
Valid from
28.11.2011
Valid to
28.11.2021
Thumbprint- sha1
80 28 0e ff 64 46 33 14 72 94 e1 4b 05 14 7e 45 78 19 bb 2f
 
To be able to use the service Authentication time ,r to check the time of laying the eSign digital signature, is necessary to install TimeStamp Certificate on your computer.
 

TimeStamp Certificate

download
Serial Number
1e 6d e8 f0 da 61 4e 80
Valid from
07.12.2011
Valid to
07.12.2021
Thumbprint- sha1
0b e2 d6 1a 70 a4 e3 ac a4 e4 4b eb ab 86 35 95 5f ac 0b 63
 
Service in validation status of eSign certificate for QES of electronic document is available in real time using OCSP protocol. Electronic applications sent to the server of SEP Bulgaria signed by OCSP Certificate.
 

OCSP Certificate

download
Serial Number
58 65 d8 5e b2 af ab 98
Valid from
07.12.2011
Valid to
28.11.2021
Thumbprint- sha1
b7 8f 88 4e d7 da 1b 54 72 3c a2 47 41 15 7d 4e f1 0b 8a 7a
 
If you are the owner or recipient of the certificate of a qualified electronic signature issued by SEP Bulgaria before 21.12.2011 it is necessary to install on your computer Basic and Operating Certificates of SEP Bulgaria below at that date.

Old certification hierarchy (before 21.12.2011)

SEP_Root_CA

download
Serial Number
1a a6 dc e3 fe 02 ec 64
Valid from
24.03.2009
Valid to
24.03.2029
Thumbprint- sha1
1e f8 30 cc e1 5c e2 7e 0a d0 58 33 95 ce 31 10 8e c8 d6 6a

 

MobiSafe_CA

download
Serial Number
57 f7 92 07 78 1f 95 c3
Valid from
24.03.2009
Valid to
24.03.2019
Thumbprint- sha1
57 bc 35 b0 7e 51 38 3a 77 77 07 70 bb 5f de 67 ad 3f d1 11

 

TimeStamp Certificate

download
Serial Number
52 25 19 cc 21 93 a4 6f
Valid from
24.03.2009
Valid to
24.03.2019
Thumbprint- sha1
05 d2 23 91 99 e7 a0 ef 7f f7 d0 e4 1b d2 c5 f0 3e 58 19 50

 

OCSP Certificate

download
Serial Number
52 27 00 ba c9 af 21 95
Valid from
24.03.2009
Valid to
24.03.2019
Thumbprint- sha1
60 12 22 de 1d c7 9f 2e 62 1c be f9 0c 47 81 c1 dd 30 77 5a
 
 

CRL and store

To ensure the validity of electronic signatures guaranteed by eSign certificates for QES, issued by SEP Bulgaria, we recommend to update your computer's lists the certificates revocation posted below when you accept documents signed with eSign electronic signature.

These lists are electronic documents that contain information about the serial numbers, date and reason for termination of the terminated temporarily suspended certificates from SEP Bulgaria.

List of revoked certificates signed with the certification hierarchy for issued QES - eIDAS from 01.07.2017- "eSign SEP Root CA" CRL. This list will be updated upon termination of a certificate validated by the relevant authority, at least once a year.

List of revoked certificates signed with the Operational certificate - eSign SEP QES CA - eIDAS and issued from 01.07.2017 "eSign SEP QES CA" CRL. This list will be updated upon termination or suspension of certificate for QES, but nevertheless, at least every three hours.

List of revoked certificates signed with the certification hierarchy for issued QES from 01.07.2013 to 30.06.2017 - "SEP Root CA" CRL. This list will be updated upon termination of a certificate validated by the relevant authority, at least once a year.

List of revoked certificates signed with theBasic certificate from old certification hierarchy - "SEP Root CA" CRL. This list will be updated upon termination of a certificate validated by the body, but at least once a year.

List of revoked certificates signed with the Operational certificate - eSign QES CA and issued from 01.07.2013 to 30.06.2017"eSign QES CA" CRL. This list will be updated upon termination or suspension of certificate for QES, but nevertheless, at least every three hours.

List of revoked certificates signed with the Operational certificate from new hierarchy - "SEP QES CA" CRL. This list will be updated upon termination or suspension of certificate for QES, but nevertheless, at least every three hours.

List of revoked certificates signed with Operational certificate from old hierarchy - "MobiSafe CA" CRL. This list will be updated upon termination or suspension of certificate for QES, but nevertheless, at least every three hours.

Archive of the issued certificate revocation lists can be found here.

We are close to you
to top