Service Technical Information
Timestamping Service is a HTTP service that responds to HTTP POST method
The PKI chain certificates can be found in SK repository.
| Parameter | Value |
|---|---|
| Repository | Timestamping Authority Practice Statement v9.0 PDF |
| Timestamping policy OID | 0.4.0.2023.1.1 |
| Supported hash algorithms | SHA256, SHA384, SHA512 |
| Signing key parameter | SK TSA CA 2023R: 4096bit RSA SK TSA CA 2023E: elliptic curve P-256 |
| Signing algorithm available | SK TSA CA 2023E: SHA256withECDSA SK TSA CA 2023R: SHA512withRSA |
| Supported extensions in requests | Not specified |
| Responses to the correct requests include the following | - Status information - Operation Okay - Signing hash algorithm - Timestamping policy OID - Timestamp time - Timestamping Service Certificate (not incl. certificate chain) - Extensions in use - nonce value - Precision (0x01 seconds) - tsa (timestamping service certificate DN) |
| Responses to the incorrect requests include the following | - Status information Rejected - Error description |
| Response to the request from a client that has no access to the timestamping service | HTTP status code 403 - Forbidden |
| Response to the non-timestamping query | HTTP status code 400 - Bad request |
*All endpoints are also available via HTTPS
Figure: Production environment setup
| Service URL | Signing key algorithm | TSU certificate |
|---|---|---|
| http://tsa.sk.ee | ECC 256 | SK TIMESTAMPING UNIT 2026E |
| http://tsa.sk.ee/ecc | ECC 256 | SK TIMESTAMPING UNIT 2026E |
| http://tsa.sk.ee/rsa | RSA 4096 | SK TIMESTAMPING UNIT 2026R |
Figure: Demo environment setup
| Service URL | Signing key algorithm | signing certificate* |
|---|---|---|
| http://tsa.demo.sk.ee/tsa | ECC 256 | DEMO SK TIMESTAMPING UNIT 2025E |
| http://tsa.demo.sk.ee/tsaecc | ECC 256 | DEMO SK TIMESTAMPING UNIT 2025E |
| http://tsa.demo.sk.ee/tsarsa | RSA 4096 | DEMO SK TIMESTAMPING UNIT 2025R |
| http://tsa.demo.sk.ee/tsapqc | ML-DSA-65 | TEST of SK TIMESTAMPING UNIT PQC 2026 |
*PQC (Post Quantum Cryptography) demo intermediate and root certificates can be downloaded from the repository accordingly:
TEST of SK TSA CA PQC 2026
TEST of SK ROOT PQC G1