Rekono.TSP (Trust Service Provider) Operating Rules

Rekono d.o.o. has established and manages the public key infrastructure Rekono.TSP, which serves as a trust service provider for verifying digital certificates for qualified electronic signatures, qualified electronic seals, advanced electronic signatures, advanced electronic seals, electronic authentication, and issuing advanced electronic time stamps.

This document, Rekono.TSP Operating Rules, contains the terms of use and describes the rules and procedures implemented by Rekono d.o.o. for providing trust services. These include the registration of subscribers, issuance, renewal, and revocation of digital certificates, publication of the status of digital certificates, and issuance of advanced electronic time stamps. In addition, the Rekono.TSP Operating Rules describe the technical characteristics and operational procedures for managing the IT infrastructure used by Rekono d.o.o. to perform and manage trust services.

The Rekono.TSP Operating Rules document represents the public part of the internal operating rules of the trust service provider Rekono.TSP. The confidential part of the internal operating rules consists of the internal procedures for service management and information security of Rekono d.o.o. Unqualified certificates for use in closed systems are defined in the annex to the Rekono.TSP Operating Rules for the relevant certificate type. The annexes are available to customers who have concluded a contract with Rekono d.o.o. for the use of the relevant certificate type and to entities that demonstrate a legitimate interest.

For the provision of trust services, Rekono d.o.o. has established its own public key infrastructure, Rekono.TSP, which includes root certification authorities, several subordinate certification authorities, a list of revoked digital certificates, and electronic time stamp providers. Within Rekono.TSP, a chain of trust has been established for qualified certificates using RSA asymmetric keys, and two chains of trust for non-qualified trust services: one using RSA asymmetric keys and one using ECC asymmetric keys.