Public Register

“System for Electronic Payments Bulgaria/SEP Bulgaria“ JSC as an accredited provider of certification services supports a public electronic register, in which it publishes Base and Operational certificates from its hierarchy, issued Certificates for QES, lists of revoked certificates for QES and other information necessary to use eSign certification services.

Certificates issued

eSign certificates for Qualified Electronic Signature (QES) are issued with three years validity period. Within this period of validity, they may be suspended or terminated by the authors and holders due to changes in input data or by the authorities in case of material circumstances. It is crucial when obtaining electronically signed document or email to check if the corresponding eSign Signature Certificate is a valid QES.

Information about the current status and duration of issued eSign certificate for QES by SEP Bulgaria can be found in the section Validation certificates.

Certificate revocation

When eSign certificate for QES has been suspended or terminated during the period of validity from the person who entered it, or by the request of authorities, such Certificate shall be included automatically in the CRL of the certificate revocation list.

If eSign certificate is included in the CRL list for verification of its validity, it will have the status "invalid" and the entire electronic signature guaranteed by it will not have the power of a handwritten signature.

So regularly update your computer's list of revoked certificates published below in section CRL and store.

Certificates of SEP Bulgaria

To be able to use your eSign Certificate for QES or if you receiving electronic documents signed with electronic signature guaranteed by eSign certificate for QES, you must install on your computer a valid Basic and Operational sertificates of SEP Bulgaria.

All eSign certificates for QES issued by SEP Bulgaria after 21.12.2011 are guaranteed by the new certification hierarchy, and certificates from SEP Bulgaria before that date have been validated by the old certification hierarchy.

To ensure trouble-free useage of certification services eSign recommend that you download and install on your computer all official certificates SEP Bulgaria published on this page.

Certification hierarchy for issued QES - eIDAS from 01.07.2017

eSign Sep Root CA	download
Serial Number	4B BB 1A 09 7D BD 25 52
Valid from	08.10.2017
Valid to	08.10.2037
Thumbprint- sha1	8d 7c 6a 39 5b bd b8 dc 8b ec db 93 cd cb 6c 45 f0 83 89 02

eSign Sep QES CA	download
Serial Number	46 5d 25 53 d1 97 54 90
Valid from	09.10.2017
Valid to	08.10.2037
Thumbprint- sha1	41 2d 15 1a d0 43 30 40 82 47 e0 21 ea a4 9e f2 c7 1c 55 2d

eSign Sep OCSP	download
Serial Number	6A 4E 2E 2F 8E 47 41 E6
Valid from	25.11.2022
Valid to	25.11.2027
Thumbprint- sha1	10 7c 64 56 b8 a7 71 3d b6 45 8d 1e b7 1c 5c 86 09 89 15 1b

eSign Sep TSA	download
Serial Number	4E 36 69 30 35 B0 D5 0F
Valid from	25.11.2022
Valit to	25.11.2027
Thumbprint- sha1	8F 7F 0E C1 D0 AB 22 99 CE 21 29 8B DD 82 E8 11 F7 9A D4 08

Certification hierarchy for issued QES from 01.07.2013 to 30.06.2017

Basic Certificate of SEP Bulgaria (SEP_Root_CA) is a service certificate issued to verify the signatures on the Operational certificates of SEP Bulgaria, lists of issued and revoked Operational certificates and other applications for work purposes.

SEP_Root_CA	download
Serial Number	1a cb 24 72 9a d8 6f a8
Valid from	28.11.2011
Valid to	28.11.2031
Thumbprint- sha1	56 28 d7 3c 8b 59 fd 72 54 85 cd 9b b5 46 43 6e 8c f7 1e 8b

Operational Certificate of SEP Bulgaria (eSign QES CA) is a service certificate signed by Basic Certificate (SEP_Root_CA), issued to sign all issued eSign certificates for QES, as well as lists of issued and revoked eSign certificates for QES.

eSign QES CA	download
Serial Number	6a d3 4f a0 d1 4f fc 56
Valid from	27.03.2013
Valid to	27.03.2023
Thumbprint- sha1	80 2b 3e ec 71 01 02 38 a3 0e 14 c9 f6 53 07 e4 e1 5d cf 0e

To be able to use the service Authentication time to check the time of laying the eSign digital signature, is necessary to install TimeStamp Certificate on your computer.

TimeStamp Certificate	download
Serial Number	1e 6d e8 f0 da 61 4e 80
Valid from	07.12.2011
Valid to	07.12.2021
Thumbprint- sha1	0b e2 d6 1a 70 a4 e3 ac a4 e4 4b eb ab 86 35 95 5f ac 0b 63

Service in validation status of eSign certificate for QES of electronic document is available in real time using OCSP protocol. Electronic applications sent to the server of SEP Bulgaria signed by OCSP Certificate.

OCSP Certificate	download
Serial Number	0e e8 38 72 84 23 24 d8
Valid from	28.03.2013
Valid to	27.03.2023
Thumbprint- sha1	ef 1a cb 41 56 d6 35 43 e7 c5 1a 9c 11 a9 88 3b 4b 8e 07 8d

If you are the owner or recipient of the certificate of a qualified electronic signature issued by SEP Bulgaria before 01.07.2013 it is necessary to install on your computer Basic and Operating Certificates of SEP Bulgaria below at that date.

Old certification hierarchy (for QES issued before 01.07.2013)

SEP_Root_CA	download
Serial Number	1a cb 24 72 9a d8 6f a8
Valid from	28.11.2011
Valid to	28.11.2031
Thumbprint- sha1	56 28 d7 3c 8b 59 fd 72 54 85 cd 9b b5 46 43 6e 8c f7 1e 8b

Operational Certificate of SEP Bulgaria (SEP_QES_CA) is a service certificate signed by Basic Certificate (SEP_Root_CA), issued to sign all issued eSign certificates for QES, as well as lists of issued and revoked eSign certificates for QES.

SEP_QES_CA	download
Serial Number	6e bf 7a 15 00 a9 3d 41
Valid from	28.11.2011
Valid to	28.11.2021
Thumbprint- sha1	80 28 0e ff 64 46 33 14 72 94 e1 4b 05 14 7e 45 78 19 bb 2f

To be able to use the service Authentication time ,r to check the time of laying the eSign digital signature, is necessary to install TimeStamp Certificate on your computer.

TimeStamp Certificate	download
Serial Number	1e 6d e8 f0 da 61 4e 80
Valid from	07.12.2011
Valid to	07.12.2021
Thumbprint- sha1	0b e2 d6 1a 70 a4 e3 ac a4 e4 4b eb ab 86 35 95 5f ac 0b 63

OCSP Certificate	download
Serial Number	58 65 d8 5e b2 af ab 98
Valid from	07.12.2011
Valid to	28.11.2021
Thumbprint- sha1	b7 8f 88 4e d7 da 1b 54 72 3c a2 47 41 15 7d 4e f1 0b 8a 7a

If you are the owner or recipient of the certificate of a qualified electronic signature issued by SEP Bulgaria before 21.12.2011 it is necessary to install on your computer Basic and Operating Certificates of SEP Bulgaria below at that date.

Old certification hierarchy (before 21.12.2011)

SEP_Root_CA	download
Serial Number	1a a6 dc e3 fe 02 ec 64
Valid from	24.03.2009
Valid to	24.03.2029
Thumbprint- sha1	1e f8 30 cc e1 5c e2 7e 0a d0 58 33 95 ce 31 10 8e c8 d6 6a

MobiSafe_CA	download
Serial Number	57 f7 92 07 78 1f 95 c3
Valid from	24.03.2009
Valid to	24.03.2019
Thumbprint- sha1	57 bc 35 b0 7e 51 38 3a 77 77 07 70 bb 5f de 67 ad 3f d1 11

TimeStamp Certificate	download
Serial Number	52 25 19 cc 21 93 a4 6f
Valid from	24.03.2009
Valid to	24.03.2019
Thumbprint- sha1	05 d2 23 91 99 e7 a0 ef 7f f7 d0 e4 1b d2 c5 f0 3e 58 19 50

OCSP Certificate	download
Serial Number	52 27 00 ba c9 af 21 95
Valid from	24.03.2009
Valid to	24.03.2019
Thumbprint- sha1	60 12 22 de 1d c7 9f 2e 62 1c be f9 0c 47 81 c1 dd 30 77 5a

CRL and store

To ensure the validity of electronic signatures guaranteed by eSign certificates for QES, issued by SEP Bulgaria, we recommend to update your computer's lists the certificates revocation posted below when you accept documents signed with eSign electronic signature.

These lists are electronic documents that contain information about the serial numbers, date and reason for termination of the terminated temporarily suspended certificates from SEP Bulgaria.

List of revoked certificates signed with the certification hierarchy for issued QES - eIDAS from 01.07.2017- "eSign SEP Root CA" CRL. This list will be updated upon termination of a certificate validated by the relevant authority, at least once a year.

List of revoked certificates signed with the Operational certificate - eSign SEP QES CA - eIDAS and issued from 01.07.2017 "eSign SEP QES CA" CRL. This list will be updated upon termination or suspension of certificate for QES, but nevertheless, at least every three hours.

List of revoked certificates signed with the certification hierarchy for issued QES from 01.07.2013 to 30.06.2017 - "SEP Root CA" CRL. This list will be updated upon termination of a certificate validated by the relevant authority, at least once a year.

List of revoked certificates signed with theBasic certificate from old certification hierarchy - "SEP Root CA" CRL. This list will be updated upon termination of a certificate validated by the body, but at least once a year.

List of revoked certificates signed with the Operational certificate - eSign QES CA and issued from 01.07.2013 to 30.06.2017"eSign QES CA" CRL. This list will be updated upon termination or suspension of certificate for QES, but nevertheless, at least every three hours.

List of revoked certificates signed with the Operational certificate from new hierarchy - "SEP QES CA" CRL. This list will be updated upon termination or suspension of certificate for QES, but nevertheless, at least every three hours.

List of revoked certificates signed with Operational certificate from old hierarchy - "MobiSafe CA" CRL. This list will be updated upon termination or suspension of certificate for QES, but nevertheless, at least every three hours.

Archive of the issued certificate revocation lists can be found here.

We are close to you

Where to buy