This page presents the certificates of the CSCA public key infrastructure that are issued by the German Country Signing Certificate Authority. The certificates and lists are encoded in DER format and made available for download as ZIP archives. You can find the corresponding links further below on this page.

If you need further information on these certificates, please contact the German CSCA directly.

The distinguished name of the German CSCA is 'C=DE, O=bund, OU=bsi, CN=csca-germany'.

Certificate rollover

The next rollover of the CSCA certificate is planned for 2024.

Current certificate

The current main public key is available as a self-signed certificate, and as a link certificate, verifiable by the previous public key.

SubjectKeyIdentifier (SHA-1):
A4 0A 5F C3 80 AE 3E 59 AF 1B 32 D6 13 6A EF EE C8 CA 35 E8

The CSCA-Certificate (Certificate 11/21, self-signed) has the SHA-256 fingerprint:
66:B0:9A:81:6F:F5:C7:6D:3D:6E:F1:0F:03:5D:ED:4A:8A:C4:B9:61:B7:59:55:F1:D5:92:6D:C3:C6:3E:CB:5B

The CSCA-Link-Certificate (Certificate 11/21) has the SHA-256 fingerprint:
1A:5E:43:CD:12:A5:77:25:4E:41:AB:E9:C2:65:97:04:D4:3D:D5:DA:41:73:6A:5A:C4:8C:98:05:5C:F7:7C:69

Preceeding CSCA certificates

CSCA master list

The German CSCA's current master list can be downloaded here in ZIP format.

Deviation list

Germany's deviation list can be downloaded here.

Certificate revocation list (CRL)

The certificate revocation list (CRL) of the German CSCA can be downloaded here. The CRL distribution point for automated queries is http://bsi.bund.de/csca_crl.
If you have any issues in attempting to obtain the CRL, please contact the German CSCA.

Signing certificate for bar codes on arrival attestation documents

The list below presents the signing certificates that are currently valid for the bar codes on arrival attestation documents.

The certificate for verifying the signature of bar codes on arrival attestation documents for refugees (valid as of 4th September 2023) has the following SHA-256 fingerprint:
14 26 81 61 B2 4C F1 C0 74 5E 15 FA 6F 2E D1 00 DE 7C 82 CE 7E 02 29 44 74 56 26 EF C4 8E 24 EA

The certificate for verifying the signatures of bar codes on arrival attestation documents for refugees (valid as of 06th September 2022) has the following SHA-256 fingerprint:
E2 32 1E 0B 26 3B E2 5C 6B 53 67 EC D7 E5 6B 99 0C 68 27 6F 29 31 0C E3 BD DD 8E B7 00 54 6E DB

The certificate for verifying the signatures of bar codes on arrival attestation documents for refugees (valid as of 11th November 2021) has the following SHA-256 fingerprint:
41 3B F0 E8 78 EC FF 5C 60 F8 DD B9 4A B2 E1 26 E0 16 A6 C8 9E 00 14 DA C3 C0 3B 87 64 FA D9 93

Here, you can find the preceding signing certificates for the bar codes on arrival attestation documents.

Visa Signer Certificate

The barcode signer certificate (valid since 18th April 2024) for verification of digital seals for visa sticker has the following SHA-256 fingerprint:
41 05 1D 02 3D 01 2D AD AE D6 C0 7C 77 CD 55 49 AE 9B CA 67 CD A0 78 81 A1 8A 85 AD C1 A2 13 DA

The barcode signer certificate (valid since 3rd April 2023) for verification of digital seals for visa sticker has the following SHA-256 fingerprint:
08 97 96 A8 28 C0 35 D0 24 C6 DF 96 78 A6 73 10 9F 53 52 38 37 51 F2 D5 68 C0 8C 83 A8 4E D1 14

The barcode signer certificate (valid since 6th April 2022) for verification of digital seals for visa sticker has the following SHA-256 fingerprint:
11 07 CC 39 78 25 9D 57 65 B8 0D 1B EB 43 49 C6 EE 6A E4 34 58 C1 04 09 F4 50 76 4A 48 40 9C 83

Barcode Signer Certificate for the address sticker for national ID documents and place of residence sticker for German passport

The barcode signer certificate (valid since 18th April 2024) for verification of digital seals for address stickers of national ID Cards and place of residence stickers for German passport has the following SHA-256 fingerprint:
2F 2A 55 B0 E3 EF 8E 4C 46 E4 14 D5 1E 76 5F EF 31 5D 32 34 75 DE 4F 19 CD 0C 88 F8 E2 D8 07 62

The barcode signer certificate (valid since 3rd April 2023) for verification of digital seals for address stickers of national ID Cards and place of residence stickers for German passport has the following SHA-256 fingerprint:
36 20 77 01 ED 36 E9 44 60 2B 3B 9C F6 76 D5 AB DA 23 C1 1E 9E FC 89 98 BD 19 AE 4D 0E BC 8C 94

The barcode signer certificate (valid since 6th April 2022) for verification of digital seals for address stickers of national ID Cards and place of residence stickers for German passport has the following SHA-256 fingerprint:
CD 28 ED 13 CE E4 70 DD 31 21 55 56 E1 46 40 73 B8 D0 56 AB 10 71 B6 90 7E 36 2D 2B C3 2C 78 70