nullroute | docs | qes | tsacerts

A list of timestamping authorities (TSAs) seen "in the wild" as used for QES document signing in Lithuania.

This page serves little practical purpose, as the actual list of TSAs changes fairly often and the EU TSL should be used as the authoritative reference). But the EU TSL only designates the specific TSU certificates as trusted, while for manual deployment (e.g. through Group Policy) it is usually better to deploy root or intermediate CAs.

Download all: TSA.zip

BalTstamp

[ccbf] SSC Root CA A
 |--SSC Class 2 CA II [62df]
 |   \--BalTstamp QTSA TSU1 2011-06-13 [49fa]
 \--SSC Qualified Class 3 CA [08c9]
     \--BalTstamp QTSA TSU2 2012-05-15 [51f4]

GLOBALTRUST 2015 [cbb0]
 \--GLOBALTRUST 2015 ADVANCED SEAL 1 [8e91]
     |--BalTstamp QTSA TSU1 2020-11-11 [2f19]
     |--BalTstamp QTSA TSU1 2024-08-15 [5668]
     |--BalTstamp QTSA TSU2 2020-10-29 [dd57]
     \--BalTstamp QTSA TSU2 2024-08-13 [2c07]

BaltStamp Root CA 2025 [66f6]
 |--BalTstamp QTSA TSU1 2025-09-21 [56ac]
 \--BalTstamp QTSA TSU2 2025-09-21 [8c95]

BaltStamp Root CA 2026 [875e]
 \--BaltStamp Issuing CA 2026 [bcef]
     \--BalTstamp QTSA TSU1 2026-03-02 [ca32]

CenCert

Narodowe Centrum Certyfikacji [29b3]
 |--CenCert QTSP TSA [29b3-8f2e]
 \--CenCert QTSP TSA ECC [29b3-27ee]

Dokobit

[12f2] EE Certification Centre Root CA
 \--[ae5e] KLASS3-SK 2016
     |--Dokobit Qualified Validation Service [558c]
     \--Dokobit Qualified Validation Service [2390]

MitSoft

MitSoft QTSA TSU-1 Root 2024 [64ab]
 \--MitSoft QTSA TSU-1 2024 [8a63]

MitSoft QTSA TSU-2 Root 2024 [a6e8]
 \--MitSoft QTSA TSU-2 2024 [0db3]

Signicat

Buypass Class 3 Root CA G2 HT [b81c]
 \--Buypass Class 3 CA G2 HT Business [b81c-b091]
     \--Signicat QTSA CC 2024 v1 [b091-a4ed]

SK ID Solutions (EID-SK)

SK ID Solutions ROOT G1E [8674]
 \--SK TSA CA 2023E [5a18]
     |--SK TIMESTAMPING UNIT 2024E [f4e6]
     \--SK TIMESTAMPING UNIT 2025E [79a9]