Conformity assessment for eIDAS | Bank-Verlag GmbH | BVqwac

Applications for certificates can only submitted by legal persons, who are authorized in at least one role as Payment Service Provider (PSP) according to Regulation (EU) Nr. 2015/2366 by a National Compentent Authority (NCA). Before issuance of the certificate, all attributes of the legal person, especially the control of the domains to be certified by the legal person, are verified.

The private key, which is used for authentication of the website, is generated and controlled by the Payment Service Provider itself. The corresponding public key, which is used in order to validate the authentication, is sent as part of a PKCS#10 Certificate Signing Request (CSR) to the Bank-Verlag to get certified.

The Bank-Verlag GmbH operates a CA for issuance and administration of qualified certificates for website authentication within the scope of the second Payment Service Directive (EU) No. 2015 / 2366. Thereby, RSA keys with a length of 4096 bit are used.

Status and revocation information for the qualified certificates can be retrieved from the OCSP responder of Bank-Verlag GmbH.

SRC confirms that the “BVqwac” trust service for issuing qualified certificates for website authentication within the scope of the second Payment Service Directive (EU) No. 2015 / 2366 is operated in accordance with the requirements of Regulation (EU) No. 910 / 2014 by Bank-Verlag GmbH.