PKIoverheid
In order to use PKIoverheid properly, message recipients MUST meet the requirements for the receiving party described in the PKIoverheid Programma van Eisen (PKIoverheid Requirements), refer to Logius | Aansluiten als Trust Service Provider.
The following aspects are important:
Trust the root certificates which are still valid and not revoked from the website https://cert.pkioverheid.nl/; The following PKI root certificates are NOT allowed:
So called "TEST certificaten"
Roots which are marked with "Persoon"
Know and trust all valid domain and TSP certificates under the PKIo hierarchy, refer to https://cert.pkioverheid.nl/, with the exception of the folowing domains:
Organisatie Persoon
Burger
Autonome apparaten
Private Personen
Check the PKIoverheid CRL on https://crl.pkioverheid.nl regularly;
Participants MUST process and handle changes made on the pages https://cert.pkioverheid.nl/ and https://crl.pkioverheid.nl within 10 business days.