Trust service documents of Bulgarian providers: CP, CPS and PDS

Trust service documents are the public papers in which a qualified trust service provider (QTSP) states how it issues certificates and what it is liable for. If you arrived here from a trusted list entry, this page tells you what those documents are, where each Bulgarian QTSP with an active signature service publishes them, and how to validate a Bulgarian signature. Checked on 28 October 2026.

esign.bg is an independent guide, not a provider. We do not host any provider's documents; every link below goes to the provider's own website.

What the documents are

eIDAS requires a QTSP, before entering into a contract, to inform anyone who wants to use a qualified service of the precise terms and conditions, including any limitations, in a clear and publicly accessible way (Article 24(2)(d) of Regulation (EU) No 910/2014). In practice each provider publishes:

• Certification Practice Statement (CPS). How the provider operates: identity checks, issuing, suspending and revoking certificates, key protection, archiving, and what happens if it ceases activity.
• Certificate Policy (CP). The rules for one kind of certificate, for example a qualified certificate for signatures, for seals or for websites. Every certificate carries the identifier of the policy it was issued under.
• PKI Disclosure Statement (PDS). A short summary for holders and relying parties: limits of use, obligations, liability. If you read one document, read this one.
• General terms, contract and tariff. The commercial side.

Each document has a version number and an effective date. What matters for a given certificate is the version in force when it was issued, so providers keep archives of older versions.

Where Bulgarian providers publish them

The five companies with a granted qualified certificate service for signatures in Bulgarian trusted list no. 64 (1 June 2026), in alphabetical order of brand:

Each provider's entry in the trusted list also contains an information address. For some providers it points to an older or English version of these pages; the links above are the current ones we opened. The trusted list itself is at crc.bg, and all EU lists are in the EU/EEA Trusted List Browser.

Some entries in the Bulgarian list belong to providers whose services have all been withdrawn. Under Bulgarian law a QTSP keeps the information on issued and received data for 10 years, including after it ceases activity (Article 21(3) of the Act on the Electronic Document and Electronic Trust Services). Our Bulgarian guide to the trusted list explains what happens to such a provider's archive.

How to validate a Bulgarian signature

eIDAS ties validity to the moment of signing: the certificate must have been qualified and valid at that time (Article 32(1)). A later withdrawal of the issuer's service does not by itself change that, which is why trusted lists keep each service's history with dates.

1. Open the file in our signature checker. It runs in your browser, uploads nothing, and shows the signer, the signing time, the certificate's validity and whether the issuer's service is active or withdrawn in Bulgarian list no. 64. The interface is in Bulgarian.
2. For a full validation, including revocation status at the signing time and signers from other countries, use the European Commission's DSS demonstration validator. The Commission states it is a demonstration for testing, so avoid uploading sensitive documents.
3. For a formal opinion, use a qualified validation service. In the Bulgarian list, B-Trust, eDocs, Evrotrust and InfoNotary have one.

For a general introduction to qualified signatures in Bulgaria for foreigners, see our English guide. The Bulgarian version of this page, with the request forms and powers of attorney, is here.