In order to use PKIoverheid properly, message recipients MUST meet the requirements for the receiving party described in the PKIoverheid Programma van Eisen (PKIoverheid Requirements), refer to Logius | Aansluiten als Trust Service Provider.
The following aspects are important:
-
Trust the root certificates which are still valid and not revoked from the website https://cert.pkioverheid.nl/; The following PKI root certificates are NOT allowed:
-
So called "TEST certificaten"
-
Roots which are marked with "Persoon"
-
-
Know and trust all valid domain and TSP certificates under the PKIo hierarchy, refer to https://cert.pkioverheid.nl/, with the exception of the folowing domains:
-
Organisatie Persoon
-
Burger
-
Autonome apparaten
-
Private Personen
-
-
Check the PKIoverheid CRL on https://crl.pkioverheid.nl regularly;
-
Participants MUST process and handle changes made on the pages https://cert.pkioverheid.nl/ and https://crl.pkioverheid.nl within 10 business days.