Skip to main content

EAA ConformanceProfile filter

mdoc controls

250 controls in the EAA Conformance module under the mdoc profile.

IDShort titleLevelApplies toEvidenceAuto-tested
EAA-4.2.1.2-01EAA type component must indicate the type of the EAAshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.1.2-02An EAA must incorporate the EAA typeshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.1.2-03EAA type incorporation, value, and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.1.3-01EAA must include context components when components have URL namesshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.1.3-02EAA context must reference a URL-to-alias map documentshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.1.3-03EAA context incorporation, value, and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.1.4-01EAA schema must allow verification of contents and structureshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
  • Type metadata
Not auto-tested yet
EAA-4.2.1.4-02EAA may incorporate references for retrieving the EAA schemamay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
  • Type metadata
Not auto-tested yet
EAA-4.2.1.4-03Each schema reference must include a type identifier and URIshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
  • Type metadata
Not auto-tested yet
EAA-4.2.1.4-04Schema-reference sequence incorporation and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
  • Type metadata
Not auto-tested yet
EAA-4.2.10-01Attributes evidence must contain the proof material the issuer relied onshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.10-02An EAA may incorporate the attributes evidencemay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.10-03Attributes evidence must be a sequence of one or more evidence itemsshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.10-04Each evidence item must carry a type URI, verifier id, data, and optional idshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.10-05Attributes evidence incorporation and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.11.1-01EAA status service must contain enough detail to query the EAA's validityshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
  • Status list
Not auto-tested yet
EAA-4.2.11.1-02An EAA may incorporate the EAA status servicemay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
  • Status list
Not auto-tested yet
EAA-4.2.11.1-03shortLived and status service are mutually exclusiveshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
  • Status list
Auto-tested
EAA-4.2.11.1-04Status service must include a URI and may include a typeshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
  • Status list
Not auto-tested yet
EAA-4.2.11.1-05Status service incorporation, value, and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
  • Status list
Not auto-tested yet
EAA-4.2.12-01EAA renewal service must contain enough detail to request renewalshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.12-02An EAA may incorporate the EAA renewal service datamay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.12-03Renewal service data must include a URI and may include a type identifiershall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.12-04Renewal service incorporation and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.13-01An EAA may contain the EAA short-lived componentmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.13-02Short-lived presence excuses revocation-status checksshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.2-01EAA category must explicitly identify the category of the EAAshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.2-02An EAA may include the EAA categorymay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.3-01EAA identifier must unambiguously identify the EAA itselfshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.3-02An EAA may incorporate the EAA identifiermay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.3-03EAA identifier incorporation, value, and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.4.1-01EAA issuer identifier must unambiguously identify the issuing TSPshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
  • Issuer cert
Not auto-tested yet
EAA-4.2.4.1-02An EAA may incorporate the EAA issuer identifiermay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.4.1-03Issuer identifier incorporation, value, and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.4.1-04EAA may include an identifier of the issuer's EU Member Statemay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.4.1-05Member State identifier must be the ISO 3166-1 alpha-2 country codeshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.4.1-06Legal-person issuer EAA may include a registration identifiermay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.4.1-07Legal-person registration identifier may follow ETSI EN 319 412-1 clause 5.1.4may
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.4.1-08Legal-person issuer EAA may include the legal-person namemay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.4.1-09National VAT id takes precedence over other national identifiersshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.4.1-10Natural-person issuer EAA may include the natural-person namemay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.5-01EAA may indicate that it was issued on behalf of another entitymay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.5-02On-behalf-of indication incorporation, value, and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.5-03EAA may incorporate an identifier of the on-behalf-of entitymay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.5-04EAA may include the name of the on-behalf-of entitymay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.5-05Legal-person on-behalf-of entity may include a registration identifiermay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.5-06On-behalf-of legal-entity registration id may follow EAA-4.2.4.1-07 formatmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.6.2-01An EAA may include the EAA subject identifier, a pseudonym, or neithermay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.6.2-02EAA subject identifier incorporation, value, and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.6.3-01EAA subject pseudonym presence must be clearly indicatedshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.6.3-02EAA subject pseudonym incorporation mechanism is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.6.4-01EAA may bind each attribute to an attribute-subject identifier or pseudonymmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.6.4-02Attribute-subject identifier incorporation, value, and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.6.5-01An EAA may incorporate pseudonyms for attribute subjectsmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.6.5-02Attribute-subject pseudonym incorporation mechanism is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.6.5-03Attribute-to-pseudonym binding mechanism is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.6.5-04Attribute-subject pseudonym presence must be clearly indicatedshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.6.6-01One attribute subject identifier must be the EAA subject identifiershall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.6.6-02Subject pseudonym must appear when no subject identifier is presentshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.7.1-01EAA issuance data must unambiguously identify the issuance instantshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.7.1-02An EAA may incorporate the EAA issuance datamay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.7.1-03EAA issuance data incorporation and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.7.2-01Time instants must be UTC, second-precision, no fractions, no offsetshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.8.2-01A validity period must be expressed by two UTC instant timesshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.8.2-02Each validity-period instant must follow EAA-4.2.7.2 time content rulesshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.8.2-03Validity-period information incorporation and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.8.3-01An EAA must incorporate its technical validity periodshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.8.4-01An EAA may incorporate an administrative validity periodmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.9.2-01EAA audience must identify the relying parties the EAA is intended forshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.9.2-02An EAA may incorporate the EAA audiencemay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.9.2-03Audience presence restricts the EAA to the listed relying partiesshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.9.2-04Audience must be a sequence of party ids, group ids, or bothshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.9.2-05Audience identifier values are profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.9.2-06Audience incorporation and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.9.3-01An EAA may incorporate a one-time-use signalmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.9.3-02One-time-use signal restricts EAA to a single use, no retentionshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.9.3-03Absence of the one-time-use signal lifts the single-use constraintshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.2.9.3-04One-time-use signal incorporation, value, and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.3-01Each attribute must have a unique attribute identifiershall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.3-02Each attribute must have a value with attribute-specific semanticsshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.3-03Each attribute must refer to one attribute subjectshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.3-04Each attribute may have a component indicating the identifier formatmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.3-05Each attribute may have a component identifying its typemay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.3-06Each attribute may have a friendly-identifier componentmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.3-07Each attribute may have a component for individual external referencingmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.3-08Attribute incorporation and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.4.2.2-01An EAA may incorporate the disclosure schema identifiermay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.4.2.2-02Disclosure schema identifier must univocally identify the SD mechanismshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.4.2.2-03Disclosure schema identifier incorporation and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.4.2.3-01An EAA may have one or more disclosuresmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.4.2.3-02Each disclosure must contain the attribute and binding datashall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.4.2.3-03Disclosure incorporation and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.4.2.4-01Each disclosure reference must be unambiguously bound to one disclosureshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.4.2.4-02Disclosure-to-reference binding must be ascertainable by an algorithmshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.4.2.4-03EAA may include validity information for a set of disclosure referencesmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.4.2.4-04All disclosure references must be signed by the EAA issuershall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.4.2.4-05Disclosures and disclosure references must be present together or absent togethershall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.4.2.4-06Disclosure-reference computation, incorporation, and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.4.2.5-01Disclosure algorithm identifier must name the binding-verification algorithmshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.4.2.5-02An EAA may incorporate the disclosure algorithm identifiermay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.4.2.5-03Disclosure algorithm identifier must include the algorithm id and may include parametersshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.4.2.5-04Disclosure algorithm identifier incorporation and placement is profile-specificshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.5-01An EAA should incorporate proof of public-key possession by the EAA subjectshould
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.5-02Key-binding component value may be a key, certificate, or reference to eithermay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.5-03Pointer-valued key binding must include a digest of the referenced objectshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.5-04Key-binding component should be a public key for security and privacyshould
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.6.1-01An EAA must incorporate a digital signature from the issuershall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
  • Issuer cert
Not auto-tested yet
EAA-4.6.1-02Digital signature must be AdES-B-B where the syntax permitsshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.6.1-03Selective disclosures must be placed in the unsigned-attributes containershall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.6.1-04AdES-B-B disclosures must use the AdES unsigned-attributes containershall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Not auto-tested yet
EAA-4.6.1-05EAA signature may include the signing certificatemay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
  • Issuer cert
Not auto-tested yet
EAA-4.6.1-06EAA signature may include certification-path certificates except the trust anchormay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
  • Issuer cert
Not auto-tested yet
EAA-4.6.1-07Signing certificate must meet the EAA profile in ETSI TS 119 412-6shall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
  • Issuer cert
Not auto-tested yet
EAA-6.1-01Data structures shall be those of ISO/IEC 18013-5shall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.1-02mDL shall carry org.iso.18013.5.1 namespace data elementsshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.1-03Non-mDL shall carry org.iso.23220.1 namespace data elementsshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.1-04New data elements shall sit in org.etsi.01947201.010101 namespaceshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.1-05mDL presence column of Table 5 of ISO/IEC 18013-5 appliesshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.1-06Non-mDL type document shall specify mandatory data elementsshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.1-07EAA shall be an instance of IssuerSigned per ISO/IEC 18013-5shall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.1-08New tstr elements shall encode in Unicode unless stated otherwiseshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.10.1-01MSO may carry status membermay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.10.1-02status member implements clause 4.2.11 semanticsshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.10.1-03status may contain status_list per IETF Token Status Listmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
  • Status list
Auto-tested
EAA-6.2.10.1-04When status is present, the type member shall be presentshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.10.1-06When status is present, the purpose member shall be presentshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.10.1-08When status is present, the index member shall be presentshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.10.1-10When status is present, the uri member shall be presentshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.10.2-01Runtime status resolver for mdoc EAAshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
  • Status list
Auto-tested
EAA-6.2.11-01ISO/IEC-mdoc EAA shall not carry a renewal-service componentshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.12-01ISO/IEC-mdoc EAA may incorporate the shortLived data elementmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.12-02shortLived implements clause 4.2.13 semanticsshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.12-03shortLived data element shall have CBOR bool typeshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.12-04shortLived true bypasses revocation status checkshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.12-05shortLived false or absent requires revocation status checkshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.2.1-01Non-qualified, non-public-body EU mdoc shall not include categoryshall
  • Ordinary
  • EAA payload
Auto-tested
EAA-6.2.2.1-02category data element implements clause 4.2.2 semanticsshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.2.1-03category data element shall be of tstr typeshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.3-01ISO/IEC-mdoc EAA shall incorporate the document_number elementshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.3-02document_number implements clause 4.2.3 semanticsshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.3-03mDL document_number shall match Table 5 of ISO/IEC 18013-5shall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.3-04Non-mDL document_number shall match clause 6.3 of ISO/IEC 23220-2shall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.4.1-01mDL shall include issuing_authority componentshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.4.1-02issuing_authority implements clause 4.2.4 semanticsshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.4.1-03Non-mDL shall include the unicode issuing-authority elementshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.4.1-04issuing_authority_unicode implements clause 4.2.4 semanticsshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.4.1-05ISO/IEC-mdoc EAA may incorporate issuing_countrymay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.4.1-06mDL issuing_country shall match Table 5 of ISO/IEC 18013-5shall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.4.1-07Non-mDL issuing_country shall match clause 6.3 of ISO/IEC 23220-2shall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.4.1-08Optional issuing_country value shall match EAA-4.2.4.1-05shall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.4.1-09ISO/IEC-mdoc EAA may include iss_reg_id where applicablemay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.4.1-10iss_reg_id data element shall be of tstr typeshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.4.1-11iss_reg_id value shall be a registration identifiershall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.4.1-12iss_reg_id value may follow ETSI EN 319 412-1 LEG-5.1.4 rulesmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.4.1-13iss_reg_id mutex with embedded qualified certificateshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.5.1-01mDL identifying its subject shall include the standard tripletshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.5.1-02mDL shall include either the standard triplet or also_known_asshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.5.1-03also_known_as data element shall be of tstr typeshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.5.1-04Non-mDL identifying its subject shall include the standard tripletshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.5.1-05Non-mDL shall include either the standard triplet or also_known_asshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.5.2-01ISO/IEC-mdoc EAA may carry also_known_as as subject pseudonymmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.5.3-01ISO/IEC-mdoc EAA may include attribute subjectsmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.5.3-02Attribute subjects may be identified or pseudonymisedmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.5.3-03Attribute subject identifiers shall associate to their attributesshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.5.4-01ISO/IEC-mdoc EAA may include attribute subject pseudonymsmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.5.4-02Attribute subject pseudonyms shall associate to their attributesshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.6-01ISO/IEC-mdoc EAA shall incorporate issue_dateshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.6-02issue_date implements clause 4.2.7 semanticsshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.6-03mDL issue_date shall match Table 5 of ISO/IEC 18013-5shall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.6-04Non-mDL issue_date shall match clause 6.3 of ISO/IEC 23220-2shall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.7.1-01validityInfo.validFrom marks technical validity startshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.7.1-02validityInfo.validUntil marks technical validity endshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.7.1-03validFrom and validUntil shall indicate UTC timeshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.7.1-04validFrom and validUntil shall have seconds precisionshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.7.1-05validFrom and validUntil shall not contain fractions of secondsshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.7.2-01mDL expiry_date marks administrative validity endshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.7.2-02Non-mDL expiry_date marks administrative validity endshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.7.2-03issue_date may mark administrative validity startmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.8.1-01ISO/IEC-mdoc EAA shall not carry an audience componentshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.8.2-01ISO/IEC-mdoc EAA may incorporate the oneTime data elementmay
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.8.2-02oneTime implements clause 4.2.9.3 semanticsshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.8.2-03oneTime data element shall have CBOR bool typeshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.8.2-04oneTime true means single-use, no retentionshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.8.2-05oneTime false or absent removes the constraintshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.2.9-01ISO/IEC-mdoc EAA shall not carry attributes-evidence componentshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.3-01Attested attributes shall be carried in IssuerSignedItem componentsshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.3-02Non-EAA-subject attributes shall use SubAttr in elementValueshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.3-03SubAttr shall have either subId or subAka membershall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.3-04subId shall be a CBOR map identifying the attribute subjectshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.3-05subAka shall be a CBOR String pseudonymshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.4.1.2-01ISO/IEC-mdoc EAA shall include version in MobileSecurityObjectshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.4.1.3-01Disclosable attributes shall ride in IssuerSignedItem componentsshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.4.1.4-01valueDigests implements clause 4.4.2.3 semanticsshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.4.1.4-02Disclosable mdoc shall include valueDigests in MSOshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.4.1.5-01Disclosable mdoc shall include digestAlgorithm in MSOshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.5-01deviceKey shall sit within deviceKeyInfo of MSOshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.5-02deviceKey shall be the EAA subject's public keyshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
Auto-tested
EAA-6.6.1-01ISO/IEC-mdoc EAA shall be signed by a CB-AdES digital signatureshall
  • Ordinary
  • QEAA
  • PuB-EAA
  • EAA payload
  • Issuer cert
Auto-tested
PuB-EAA-4.2.11.3-01A non-short-lived PuB-EAA must include the EAA status serviceshall
  • PuB-EAA
  • EAA payload
  • Status list
Not auto-tested yet
PuB-EAA-4.2.2.3-01A PuB-EAA must explicitly signal its PuB-EAA conditionshall
  • PuB-EAA
  • EAA payload
Not auto-tested yet
PuB-EAA-4.2.2.3-02PuB-EAA URI category value must be urn:etsi:esi:eaa:eu:pubshall
  • PuB-EAA
  • EAA payload
Not auto-tested yet
PuB-EAA-4.2.4.3-01A PuB-EAA must incorporate the EAA issuer identifiershall
  • PuB-EAA
  • EAA payload
  • Issuer cert
Not auto-tested yet
PuB-EAA-4.2.4.3-02A PuB-EAA must include the issuer's EU Member State identifiershall
  • PuB-EAA
  • EAA payload
Not auto-tested yet
PuB-EAA-4.2.4.3-03PuB-EAA Member State identifier must follow the EAA-4.2.4.1-05 formatshall
  • PuB-EAA
  • EAA payload
Not auto-tested yet
PuB-EAA-4.2.4.3-04A PuB-EAA must include the issuing public body's registration identifiershall
  • PuB-EAA
  • EAA payload
Not auto-tested yet
PuB-EAA-4.2.4.3-05PuB-EAA registration id must follow ETSI EN 319 412-1 clause 5.1.4shall
  • PuB-EAA
  • EAA payload
Not auto-tested yet
PuB-EAA-4.2.4.3-06A PuB-EAA must include the name of the issuing public bodyshall
  • PuB-EAA
  • EAA payload
Not auto-tested yet
PuB-EAA-4.2.4.3-07A PuB-EAA must include the download URL of the supporting certificateshall
  • PuB-EAA
  • EAA payload
  • Issuer cert
Not auto-tested yet
PuB-EAA-4.2.6.8-01A PuB-EAA must include either the EAA subject identifier or its pseudonymshall
  • PuB-EAA
  • EAA payload
Not auto-tested yet
PuB-EAA-4.2.6.8-02All attributes in a PuB-EAA must refer to a single entity, the EAA subjectshall
  • PuB-EAA
  • EAA payload
Not auto-tested yet
PuB-EAA-4.6.3-01PuB-EAA digital signature must be a qualified electronic signature or sealshall
  • PuB-EAA
  • EAA payload
  • Issuer cert
Not auto-tested yet
PuB-EAA-4.6.3-02PuB-EAA signature must include certificate URL and digest as signed attributesshall
  • PuB-EAA
  • EAA payload
  • Issuer cert
Not auto-tested yet
PuB-EAA-4.6.3-03PuB-EAA signature should embed the qualified certificateshould
  • PuB-EAA
  • EAA payload
  • Issuer cert
Not auto-tested yet
PuB-EAA-4.6.3-04PuB-EAA signing certificate must meet the PSB profile in ETSI TS 119 412-6shall
  • PuB-EAA
  • EAA payload
  • Issuer cert
Not auto-tested yet
PuB-EAA-6.2.10.3-01PuB-EAA without shortLived shall carry status in MSOshall
  • PuB-EAA
  • EAA payload
  • Status list
Auto-tested
PuB-EAA-6.2.2.3-01ISO/IEC-mdoc PuB-EAA shall include category data elementshall
  • PuB-EAA
  • EAA payload
Auto-tested
PuB-EAA-6.2.2.3-02PuB-EAA category value shall be the public-body URNshall
  • PuB-EAA
  • EAA payload
Auto-tested
PuB-EAA-6.2.4.3-01PuB-EAA shall carry registration identifier where applicableshall
  • PuB-EAA
  • EAA payload
Auto-tested
PuB-EAA-6.2.4.3-02PuB-EAA iss_reg_id shall match organizationIdentifier rulesshall
  • PuB-EAA
  • EAA payload
Auto-tested
PuB-EAA-6.2.5.6-01ISO/IEC-mdoc PuB-EAA attributes shall refer to the EAA subjectshall
  • PuB-EAA
  • EAA payload
Auto-tested
PuB-EAA-6.6.3-01PuB-EAA CB-AdES shall be a qualified electronic signature or sealshall
  • PuB-EAA
  • EAA payload
  • Issuer cert
Auto-tested
PuB-EAA-6.6.3-02PuB-EAA Protected Header shall contain x5u and x5tshall
  • PuB-EAA
  • EAA payload
  • Issuer cert
Auto-tested
PuB-EAA-6.6.3-03PuB-EAA x5t digest algorithm shall be SHA-256shall
  • PuB-EAA
  • EAA payload
  • Issuer cert
Auto-tested
PuB-EAA-6.6.3-04PuB-EAA Protected Header should contain x5chainshould
  • PuB-EAA
  • EAA payload
  • Issuer cert
Auto-tested
QEAA-4.2.11.2-01A non-short-lived QEAA must include the EAA status serviceshall
  • QEAA
  • EAA payload
  • Status list
Not auto-tested yet
QEAA-4.2.2.2-01A QEAA must signal its qualified condition via the EAA categoryshall
  • QEAA
  • EAA payload
Not auto-tested yet
QEAA-4.2.2.2-02QEAA URI category value must be urn:etsi:esi:eaa:eu:qualifiedshall
  • QEAA
  • EAA payload
Not auto-tested yet
QEAA-4.2.4.2-01A QEAA must incorporate the EAA issuer identifiershall
  • QEAA
  • EAA payload
  • Issuer cert
Not auto-tested yet
QEAA-4.2.4.2-02A QEAA must include the issuer's EU Member State identifiershall
  • QEAA
  • EAA payload
Not auto-tested yet
QEAA-4.2.4.2-03QEAA Member State identifier must follow the EAA-4.2.4.1-05 formatshall
  • QEAA
  • EAA payload
Not auto-tested yet
QEAA-4.2.4.2-04Legal-person QEAA issuer must include a registration identifiershall
  • QEAA
  • EAA payload
Not auto-tested yet
QEAA-4.2.4.2-05Legal-person QEAA registration id must follow ETSI EN 319 412-1 clause 5.1.4shall
  • QEAA
  • EAA payload
Not auto-tested yet
QEAA-4.2.4.2-06Legal-person QEAA must include the legal-person nameshall
  • QEAA
  • EAA payload
Not auto-tested yet
QEAA-4.2.4.2-07Natural-person QEAA must include the natural-person nameshall
  • QEAA
  • EAA payload
Not auto-tested yet
QEAA-4.2.4.2-08A QEAA must include the download URL of the supporting certificateshall
  • QEAA
  • EAA payload
  • Issuer cert
Not auto-tested yet
QEAA-4.2.6.7-02All attributes in a QEAA must refer to a single entity, the QEAA subjectshall
  • QEAA
  • EAA payload
Not auto-tested yet
QEAA-4.6.2-01QEAA digital signature must be a qualified electronic signature or sealshall
  • QEAA
  • EAA payload
  • Issuer cert
Not auto-tested yet
QEAA-4.6.2-02QEAA signature must include certificate URL and digest as signed attributesshall
  • QEAA
  • EAA payload
  • Issuer cert
Not auto-tested yet
QEAA-4.6.2-03QEAA signature should embed the qualified certificateshould
  • QEAA
  • EAA payload
  • Issuer cert
Not auto-tested yet
QEAA-4.6.2-04QEAA signing certificate must meet the QEAA profile in ETSI TS 119 412-6shall
  • QEAA
  • EAA payload
  • Issuer cert
Not auto-tested yet
QEAA-6.2.10.2-01QEAA without shortLived shall carry status in MSOshall
  • QEAA
  • EAA payload
  • Status list
Auto-tested
QEAA-6.2.2.2-01ISO/IEC-mdoc QEAA shall include category data elementshall
  • QEAA
  • EAA payload
Auto-tested
QEAA-6.2.2.2-02QEAA category value shall be the qualified URNshall
  • QEAA
  • EAA payload
Auto-tested
QEAA-6.2.4.2-01Legal-person QEAA shall carry registration identifiershall
  • QEAA
  • EAA payload
Auto-tested
QEAA-6.2.4.2-02QEAA iss_reg_id shall match organizationIdentifier rulesshall
  • QEAA
  • EAA payload
Auto-tested
QEAA-6.2.5.5-01ISO/IEC-mdoc QEAA attributes shall refer to the EAA subjectshall
  • QEAA
  • EAA payload
Auto-tested
QEAA-6.6.2-01QEAA CB-AdES shall be a qualified electronic signature or sealshall
  • QEAA
  • EAA payload
  • Issuer cert
Auto-tested
QEAA-6.6.2-02QEAA Protected Header shall contain x5u and x5tshall
  • QEAA
  • EAA payload
  • Issuer cert
Auto-tested
QEAA-6.6.2-03QEAA x5t digest algorithm shall be SHA-256shall
  • QEAA
  • EAA payload
  • Issuer cert
Auto-tested
QEAA-6.6.2-04QEAA Protected Header should contain x5chainshould
  • QEAA
  • EAA payload
  • Issuer cert
Auto-tested