Authoritative service-status information
EU/EEA Member States publish national trusted lists. The European Commission publishes the List of Trusted Lists and provides the eIDAS Dashboard and browser. Together they allow people and systems to discover trust-service providers, individual services, service types and status information.
The UK publishes a separate UK Trusted List under the UK framework. The two environments should not be merged into an undocumented trust store.
Ask about the service, status and time
A trusted-list entry is more precise than a company directory entry. The relevant question is usually whether a particular service, identified in the authoritative list, held the relevant status at the time required by the validation policy.
Provider
The organisation responsible for one or more trust services.
Service
The specific certificate, timestamp, validation or other service described by the list.
Status
The status assigned under the list scheme, with associated dates and information.
History
Past status can matter when validating a signature or certificate from an earlier time.
Browser use and machine use are different
The Dashboard is useful for investigation and human review. Production validation needs a controlled technical process for discovering list locations, authenticating list signatures, checking schema and sequence information, handling updates, retaining historical data and responding safely to retrieval or validation failures.
- Use authoritative distribution points rather than copied provider lists
- Validate the list and its chain of trust before trusting its contents
- Retain the status history needed by the validation policy
- Monitor freshness, download and parsing failures
- Record which list data and policy were used for each decision
- Keep EU/EEA, UK and private trust frameworks explicitly separated