Siemens issues digital certificates ("Certificates", also known as "Digital IDs") to its employees and agents, to its known business partners and to Siemens web sites in accordance with its
"Public Key Infrastructure Disclosure Statement"
The following Siemens Public Key Infrastructure ("PKI") basic documents are available upon request, as necessary and appropriate, from the contact office referred to in the "Public Key Infrastructure Disclosure Statement":
Certification Practice Statement ("CPS") of:
Siemens Business Services Root CA ("SBS");
Siemens Issuing Certification Authority(ies) ("CA(s)")
Certificate Policy ("CP") for
internal Siemens Community ("CP 1"); and
external Known Business Partner Community ("CP 2")
Acronyms and Definitions for CPS and CP
Sample Certificate Usage and Electronic Transaction Agreement with Known Business Partner for Siemens Issuing CA-Issued Certificates (with responsibilities of each Party's end-user(s), who both hold a Siemens Certificate ("Subscriber(s)") and rely on a Siemens Certificate ("Relying Party(ies)")
Sample Relying Party Agreement (with responsibility of end-user(s) of Known Business Partner(s) who are Relying Party(ies) only - not Subscriber(s)).
Other applicable policies, including the policies of the first generation of Siemens Issuing CA's "CA001" and "CA001 (2002)"
Limited warranty and disclaimer / Limitation of liability
Except as explicitly provided in an applicable agreement with an Authorized Relying Party or Subscriber, Siemens Issuing CA(s) expressly disclaims all representations, warranties (express or implied) and liability -- except for willful misconduct and gross negligence -- concerning the functionality, issuance, use, validity, or accuracy of Siemens Certificates, including the identity of any person named by a Siemens Certificate or their authority to act on behalf of Siemens.
Siemens Certification Authority Certificates
Siemens has made the Siemens Issuing CA(s) Certificates available for downloading:
Siemens Business Services Trust Center Root-CA V1.1.1
Valid from June 17th, 2003 until June 17th, 2015Fingerprint of the certificate:(SHA-1) 206F 31ED 2722 6154 4710 CD19 4B34 6A48 207B 53EB
Siemens Issuing CA Class EE
Valid from July 10th, 2003 until July 10th, 2009Fingerprint of the certificate:(SHA-1) 093B DBDB 5E51 7C0F 76CF 6B30 E45D F104 998A D3C7
Siemens Issuing CA Class EE (re-certified 2006)
Valid from May 24th, 2006 until May 24th 2012Fingerprint des Zertifikates:Fingerprint of the certificate:(SHA-1) 3298 536D 7B46 CCE4 F5FB 9E6D 8153 F773 0539 1005
Siemens CA 001 (2002) (first generation of Siemens PKI)
Valid from July 24th, 2002 until July 24th, 2008Fingerprint of the certificate:(SHA-1) ACA1 0229 A584 CCAE 3776 C99B 4E8B BDB3 966F 477F
Siemens CA 001 (first generation of Siemens PKI)
Valid from November 3rd, 1998 until November 2nd, 2004Fingerprint of the certificate:(SHA-1) 286E 72DF ABE0 0FF5 E52D 46D8 3D1C 863F 20CA FECD
Additional all necessary certificates are available:
The descriptions of the relevant applications (web browser, e-mail client, etc.) explain how to import the Siemens CA(s) Certificate into the applications' environment.
Certificate Revocation Lists
Siemens has made the Certificate Revocation Lists(CRL(s)) below for Certificates issued by the Siemens Issuing CA(s) available for downloading.
Public Certificate Repository
Siemens operates a publicly accessible Certificate Repository. In the Certificate Repository the Certificates of the Siemens PKI are stored. The Certificate Repository is available on the Internet to enable the exchange of secure e-mails with Siemens.
Using Siemens certificates (including downloading from the Certificate Repository) is acceptance of "Siemens Public Key Infrastructure Disclosure Statement".
To retrieve Certificates from the Certificate Repository, it must be set up and configured as LDAP directory in the respective e-mail encryption program.
User Instruction for Siemens Business Partners
contains a detailed description how to do this in Outlook using the integrated encryption functions.
Access | Domain Name | IP-Address | Port | Query |
Siemens | cl.siemens.com | 194.138.20.61 | 389 | O=Trustcenter |
PGP certificates in the Certificate Repository:
The Certificate Repository also contains the Siemens PGP certificates. It can be used with all PGP clients supporting LDAP.
European Bridge CA
Siemens is a member of the European Bridge CA. The European Bridge CA operates a virtual Directory Service. Certificates of participants from different companies can be called up via this Directory Service. For this the LDAP-queries of the Bridge-CA are forwarded to the repositories of the connected organisations. Also the Siemens PKI Certificate Repository can be called up via this service.
The European Bridge CA offers a online search for certificates. Here also all Siemens certificates can be found if the correct mail-address is provided.
To use the Bridge-CA Repository it must be set up and configured as an LDAP directory the respective e-mail encryption program:
Access | Domain Name | IP-Address | Port |
Bridge-CA | directory.bridge-ca.org | 213.61.227.207 | 389 |