--- title: "ETSI EN 319 411-2 V2.6.1 Qualified Certificate Policy Guide" canonical_url: "https://www.sorena.io/artifacts/global/etsi-en-319-411-2" source_url: "https://www.sorena.io/artifacts/global/etsi-en-319-411-2" author: "Sorena AI" description: "Guide to ETSI EN 319 411-2 V2.6.1 for EU qualified certificate policy profiles, QSCD-related routes, QTSP scope, trusted-list context, and lifecycle topics." published_at: "2026-03-04" updated_at: "2026-03-04" keywords: - "ETSI EN 319 411-2" - "qualified certificates" - "QCP profiles" - "QSCD" - "eIDAS trust services" - "ETSI EN 319 411-2 V2.6.1" - "EU qualified certificates" - "eIDAS" - "Trusted Lists" --- **[SORENA](https://www.sorena.io/)** - AI-Powered GRC Platform [Home](https://www.sorena.io/) | [Solutions](https://www.sorena.io/solutions) | [Artifacts](https://www.sorena.io/artifacts) | [About Us](https://www.sorena.io/about-us) | [Contact](https://www.sorena.io/contact) | [Portal](https://app.sorena.io) --- # ETSI EN 319 411-2 V2.6.1 Qualified Certificate Policy Guide Guide to ETSI EN 319 411-2 V2.6.1 for EU qualified certificate policy profiles, QSCD-related routes, QTSP scope, trusted-list context, and lifecycle topics. ![ETSI EN 319 411 2 artifact preview](https://cdn.sorena.io/cdn-cgi/image/width=1200,quality=88,format=auto/images/3rd-parties/etsi.jpg) *ETSI EN 319 411 2* *Free Resource* ## ETSI EN 319 411 2 Qualified Certificate Policy Guide This hub helps understand ETSI EN 319 411-2 for trust service providers that issue EU qualified certificates, covering the rules for issuing, managing and revoking those certificates. Practical guidance to validate against your own requirements; the linked pages separate EN 319 411-2 requirements from EN 319 411-1 lifecycle material and eIDAS qualified context. [ETSI EN 319 411-2 requirements](/artifacts/global/etsi-en-319-411-2/requirements.md) ## Where to start in the EN 319 411-2 guide - **ETSI EN 319 411-2 requirements**: Review the qualified certificate policy rules before mapping CPS text, certificate policy identifiers, lifecycle controls, and publication duties. - **ETSI EN 319 411-2 qualified certificate scope**: Check whether your question is about issuing a qualified certificate, validating identity, managing revocation, or using a QSCD. - **ETSI EN 319 411-2 profile selector workflow**: Choose between QCP-n, QCP-l, QCP-n-qscd, QCP-l-qscd, QEVCP-w, QNCP-w, and QNCP-w-gen using certificate subject, QSCD, and website-certificate context. Based on ETSI EN 319 411-2 | V2.6.1 (2025-06) | No signup required ### Quick scan *Artifact* - **ETSI EN 319 411-2 requirements**: Start with CP, CPS, certificate usage, publication, identity validation, issuance, acceptance, revocation, and status-service topics. - **Qualified certificate scope**: Use when the question is whether EN 319 411-2, supporting EN 319 411-1 requirements, or eIDAS qualified trust-service context is driving the work. - **Qualified profile selector workflow**: Use when a certificate policy profile, QSCD indication, or qualified website authentication certificate profile must be selected and documented. This guide helps navigate ETSI EN 319 411-2 qualified certificate policy topics, then verify each claim against the cited official sources in the linked pages. | Value | Metric | | --- | --- | | 14 | Topics | | 8 | FAQs | | 2 | Comparisons | | V2.6.1 | Edition | **Key highlights:** QCP profiles | QSCD routes | Trusted-list context ## Primary sources - [Electronic Signatures and Trust Infrastructures (ESI); Policy and security requirements for Trust Service Providers issuing certificates; Part 2: Requirements for trust service providers issuing EU qualified certificates](https://www.etsi.org/standards-search?ref=sorena.io) - ETSI EN 319 411-2 V2.6.1 (2025-06) - Consolidated from ETSI EN 319 411-2 V2.6.1 (2025-06) - This document is ETSI EN 319 411-2 V2.6.1 (2025-06), a EUROPEAN STANDARD on Electronic Signatures and Trust Infrastructures (ESI). It specifies policy and security requirements for Trust Service Providers issuing certificates, Part 2: Requirements for trust service providers issuing EU qualified certificates. Reference REN/ESI ## Topic Guides - [eIDAS QTSP supervision workflow for ETSI EN 319 411-2](/artifacts/global/etsi-en-319-411-2/eidas-qtsp-supervision-workflow.md): Operational workflow for qualified trust service providers using ETSI EN 319 411-2 to manage supervisory-body changes, incidents, termination evidence, trusted-list checks, and assessment records. - [EN 319 411-2 vs EN 319 411-1 Qualified Certs](/artifacts/global/etsi-en-319-411-2/en-319-411-2-vs-en-319-411-1.md): Compare ETSI EN 319 411-2 qualified certificate requirements with EN 319 411-1 general certificate-service requirements, including QCP profiles, QSCD evidence, CP/CPS reuse, and audit boundaries. - [ETSI EN 319 411-2 compliance checklist](/artifacts/global/etsi-en-319-411-2/compliance.md): Compliance checklist for ETSI EN 319 411-2 qualified certificate services, covering policy selection, CP/CPS evidence, identity validation, QSCD status, trusted-list reliance, and certificate status services. - [ETSI EN 319 411-2 FAQ for EU Qualified Certificates](/artifacts/global/etsi-en-319-411-2/faq.md): Answers to common ETSI EN 319 411-2 questions about EU qualified certificate policies, QSCD use, identity validation, trusted lists, and revocation status services. - [ETSI EN 319 411-2 Identity Proofing](/artifacts/global/etsi-en-319-411-2/identity-proofing.md): How EN 319 411-2 applies identity validation for EU qualified certificates, including QCP natural-person, legal-person, website, and evidence-record checks. - [ETSI EN 319 411-2 QSCD Route](/artifacts/global/etsi-en-319-411-2/qscd-route.md): When QCP-n-qscd or QCP-l-qscd is the right EN 319 411-2 route, what QSCD evidence is needed, and which certificate-profile claims must stay aligned. - [ETSI EN 319 411-2 QTSP supervision evidence workflow](/artifacts/global/etsi-en-319-411-2/qtsp-supervision-evidence-workflow.md): Build an assessment-ready QTSP supervision evidence pack for ETSI EN 319 411-2 qualified certificate services, covering policy identifiers, trusted-list checks, incident records, QSCD evidence, and termination controls. - [ETSI EN 319 411-2 qualified certificate operations: issuance, suspension, and revocation](/artifacts/global/etsi-en-319-411-2/qualified-certificate-operations.md): Operational guide for ETSI EN 319 411-2 qualified certificate services: policy identifiers, identity validation, issuance, QSCD handling, revocation status, and relying-party notices. - [ETSI EN 319 411-2 Qualified Certificate Scope](/artifacts/global/etsi-en-319-411-2/qualified-certificate-scope.md): Use ETSI EN 319 411-2 to scope EU qualified certificate services by certificate policy, subject type, QSCD use, website authentication profile, and eIDAS context. - [ETSI EN 319 411-2 requirements map](/artifacts/global/etsi-en-319-411-2/requirements.md): Map ETSI EN 319 411-2 requirements for EU qualified certificate services across QCP profiles, CP/CPS documentation, QSCD use, certificate profiles, revocation, and eIDAS Annex A references. - [ETSI EN 319 411-2 trusted-list evidence](/artifacts/global/etsi-en-319-411-2/trusted-list-evidence.md): Build EN 319 411-2 trusted-list evidence for EU qualified certificate reliance: relying-party notice text, QTSP service identifiers, validation records, and change triggers. - [ETSI EN 319 411-2 trusted-list validation workflow](/artifacts/global/etsi-en-319-411-2/trusted-list-validation-workflow.md): Validate an EN 319 411-2 EU qualified-certificate claim by mapping the certificate service to the QTSP trusted-list entry, policy profile, relying-party notice, and status evidence. - [ETSI EN 319 411-2 vs eIDAS Qualified Trust Services](/artifacts/global/etsi-en-319-411-2/en-319-411-2-vs-eidas-qualified-trust-services.md): Compare ETSI EN 319 411-2 certificate policy requirements with the eIDAS qualified-status, supervision, audit, and trusted-list framework. - [ETSI EN 319 411-2: Certificate Revocation FAQ](/artifacts/global/etsi-en-319-411-2/faq/revocation.md): Answer the ETSI EN 319 411-2 revocation question for qualified certificate services: CPS procedures, 24-hour publication, CRL or OCSP status, and evidence to retain. - [ETSI EN 319 411-2: end-to-end qualified certificate lifecycle management workflow](/artifacts/global/etsi-en-319-411-2/qualified-certificate-lifecycle-workflow.md): Lifecycle workflow for ETSI EN 319 411-2 qualified certificate services, from policy selection and identity validation through issuance, renewal, re-key, modification, revocation, status services, and records. - [ETSI EN 319 411-2: Legal vs Natural Person Certs](/artifacts/global/etsi-en-319-411-2/faq/legal-and-natural-persons.md): ETSI EN 319 411-2 separates qualified certificate policies for natural persons, legal persons, QSCD use, and website authentication subscribers. - [ETSI EN 319 411-2: QCP, QNCP, and QEVCP Profile Selection](/artifacts/global/etsi-en-319-411-2/qcp-qncp-and-qevcp-profile-selection.md): Choose the right ETSI EN 319 411-2 qualified certificate policy profile: QCP-n, QCP-l, QCP-n-qscd, QCP-l-qscd, QEVCP-w, QNCP-w, or QNCP-w-gen. - [ETSI EN 319 411-2: workflow for selecting QCP-n, QCP-l, or QCP-w certificate profile](/artifacts/global/etsi-en-319-411-2/qualified-profile-selector-workflow.md): Select the right ETSI EN 319 411-2 qualified certificate policy profile for signatures, seals, QSCD use, and website authentication. - [How should QTSPs select an ETSI EN 319 411-2 qualified certificate profile?](/artifacts/global/etsi-en-319-411-2/faq/qualified-profile-selection.md): A focused FAQ on choosing QCP-n, QCP-l, QCP-n-qscd, QCP-l-qscd, QEVCP-w, QNCP-w, or QNCP-w-gen under ETSI EN 319 411-2. - [How should relying parties use trusted lists under ETSI EN 319 411-2?](/artifacts/global/etsi-en-319-411-2/faq/trusted-lists.md): FAQ on EN 319 411-2 trusted-list reliance for EU qualified certificates: relying-party notices, QTSP service identifiers, validation evidence, and source references. - [QSCD Requirements in ETSI EN 319 411-2](/artifacts/global/etsi-en-319-411-2/faq/qscd.md): How ETSI EN 319 411-2 treats QSCD-backed qualified certificates, including QCP-n-qscd and QCP-l-qscd policies, key-use controls, QSCD verification, and certificate profile evidence. - [QTSP Supervision and ETSI EN 319 411-2](/artifacts/global/etsi-en-319-411-2/faq/qtsp-supervision.md): How ETSI EN 319 411-2 supports QTSP supervision evidence for qualified certificate services, trusted-list reliance, liability responsibility, incident records, and audit preparation. - [Qualified certificates under ETSI EN 319 411-2](/artifacts/global/etsi-en-319-411-2/faq/qualified-certificates.md): FAQ answer for QTSPs on how ETSI EN 319 411-2 treats EU qualified certificates, policy identifiers, QSCD variants, website certificates, and lifecycle evidence. - [What are the qualified certificate policies in ETSI EN 319 411-2?](/artifacts/global/etsi-en-319-411-2/faq/qualified-certificate-policies.md): FAQ on ETSI EN 319 411-2 qualified certificate policies, including QCP-n, QCP-l, QSCD variants, QEVCP-w, QNCP-w, and policy identifiers. - [Which QWAC Profile Fits ETSI EN 319 411-2?](/artifacts/global/etsi-en-319-411-2/faq/website-authentication-certificates.md): Choose between QEVCP-w, QNCP-w, and QNCP-w-gen for qualified website authentication certificates under ETSI EN 319 411-2. ## Key milestones for ETSI EN 319 411 2 *Timeline* Use standard status entries only when a linked timeline page cites the ETSI document status table. *Next step* ## Turn ETSI EN 319 411 2 policy review into assessment work The ETSI EN 319 411 2 guide is the shared starting point for qualified certificate policy review. Route live assessment work into Assessment Autopilot; Research Copilot supports cited questions for profile selection, QSCD treatment, trusted-list context, or lifecycle evidence. - Start from the EN 319 411 2 topic page that matches the certificate policy, CPS, QSCD, QWAC, revocation, or trusted-list question. - Use Assessment Autopilot to assign owners for CPS updates, certificate policy mapping, publication evidence, identity validation, revocation, and status-service controls. - Use Research Copilot to answer profile, scope, and source interpretation questions with cited outputs. - Keep official standard citations separate from organization-specific policy choices and assessor requests. - [Open Assessment Autopilot](/solutions/assessment.md): Turn EN 319 411 2 policy topics into owned tasks, evidence requests, and review checkpoints. - [Open Research Copilot](/solutions/research-copilot.md): Research profile selection, QSCD treatment, trusted-list context, and lifecycle-source questions with cited outputs. - [Talk through implementation](/contact.md): Review your current process, evidence model, and next implementation steps. --- [Privacy Policy](https://www.sorena.io/privacy) | [Terms of Use](https://www.sorena.io/terms-of-use) | [DMCA](https://www.sorena.io/dmca) | [About Us](https://www.sorena.io/about-us) (c) 2026 Sorena AB (559573-7338). All rights reserved. Source: https://www.sorena.io/artifacts/global/etsi-en-319-411-2