Trust Directory
Independent public mirror of national PKI trust anchors, not an authority. Certificates are published by each national PKI (e.g., BCCR for Costa Rica); this site mirrors and structures them.

Lithuania

Published by Ryšių reguliavimo tarnyba (RRT) — Communications Regulatory Authority of the Republic of Lithuania, Lithuania's eIDAS supervisory body and national Trusted List scheme operator

Certificates
11
Roots
0
Intermediates
11
did:pki
11
Updated
Model
Accredited CAs (ETSI Trusted List)
Governing law
Reglamento eIDAS (UE) 910/2014 · Lietuvos Respublikos elektroninės atpažinties ir elektroninių operacijų patikimumo užtikrinimo paslaugų įstatymas
Key algorithms
RSA-4096, RSA-2048, EC P-384
Signature standards
CAdESPAdESXAdESASiC
CapabilitiesQualified e-signature & e-seal (eIDAS)Qualified timestampingQualified website authentication (QWAC / PSD2)

Lithuania's qualified-signature trust is a federation of accredited QTSPs (Asmens dokumentų išrašymo centras prie LR VRM / ADIC, VĮ Registrų centras / RCSC, and Migracijos departamentas prie LR VRM / MD, among others) supervised by Ryšių reguliavimo tarnyba (RRT), the Communications Regulatory Authority of the Republic of Lithuania acting as Lithuania's eIDAS supervisory body, and published in the Lithuanian national eIDAS Trusted List (LT-TSL.xml, ETSI TS 119 612). As an EU / eIDAS participant, Lithuania is referenced from the EU LOTL. The 11 currently-granted CA certificates were promoted wholesale after verifying the Trusted List's XAdES signature through the EU LOTL chain of trust: the LOTL signature was checked against the pinned European Commission signing anchor, and the Lithuanian TSL's signature (signer: C=LT, O=Communications Regulatory Authority of the Republic of Lithuania, CN=Tomas Lavrinavičius; cert SHA-256 cfaa26cd8a4837d90a89216d7f7e15cdf00cbbcd9edb0711705cfe0420859978) against the identity the LOTL declares for Lithuania, so the list's single seal vouches for every certificate it contains (eIDAS Art. 22). Only services with a currently-granted status and a CA / qualified-certificate service type were selected; withdrawn, deprecated, and non-CA services (OCSP, qualified-certificate issuance profiles) were dropped. Verification evidence is in VERIFICATION.md. Key algorithms across the set are mixed: RSA-2048, RSA-4096, and EC P-384. All 11 entries are QTSP issuing CAs (ADIC CA-A / CA-B / CA ECC, RCSC IssuingCA / IssuingCA-2, and MD CA); the self-signed ADIC Root CA, ADIC Root CA ECC, RCSC RootCA, and MD Root CA that issue them are not carried by the list and must be sourced separately if root-anchored path building is required. Several older issuing-CA generations in the set have passed their notAfter and are retained as archived-but-granted entries; they surface under the Expired status filter.

Expired certificates are hidden by default; they remain useful only for validating older signatures.

  • ADIC CA ECC

    Intermediate CAValid (2486 days left)
    Issuer
    ADIC Root CA ECC
    Valid
    to
    Serial
    3348bc3293…000009
    SHA-256
    9716c6dda3…8bf770b6bf

    Issuer "ADIC Root CA ECC" is not present in this mirror, so the chain cannot be fully resolved here.

  • ADIC CA-A

    Intermediate CAExpired (599 days ago)
    Issuer
    ADIC Root CA
    Valid
    to
    Serial
    2ee772083d…000008
    SHA-256
    113e3fe44d…0247c507d6

    Issuer "ADIC Root CA" is not present in this mirror, so the chain cannot be fully resolved here.

  • ADIC CA-A

    Intermediate CAValid (194 days left)
    Issuer
    ADIC Root CA
    Valid
    to
    Serial
    2ee772083d…00000a
    SHA-256
    b3b9c85912…81069e4c9f

    Issuer "ADIC Root CA" is not present in this mirror, so the chain cannot be fully resolved here.

  • ADIC CA-A

    Intermediate CAExpired (1683 days ago)
    Issuer
    ADIC Root CA
    Valid
    to
    Serial
    2ee772083d…000002
    SHA-256
    2bb9f0a723…2a9f1bb537

    Issuer "ADIC Root CA" is not present in this mirror, so the chain cannot be fully resolved here.

  • ADIC CA-B

    Intermediate CAExpired (599 days ago)
    Issuer
    ADIC Root CA
    Valid
    to
    Serial
    2ee772083d…000009
    SHA-256
    465b11afe0…aadc3157f2

    Issuer "ADIC Root CA" is not present in this mirror, so the chain cannot be fully resolved here.

  • ADIC CA-B

    Intermediate CAValid (194 days left)
    Issuer
    ADIC Root CA
    Valid
    to
    Serial
    2ee772083d…00000b
    SHA-256
    6c0769c7ae…f2d944a77a

    Issuer "ADIC Root CA" is not present in this mirror, so the chain cannot be fully resolved here.

  • ADIC CA-B

    Intermediate CAExpired (1683 days ago)
    Issuer
    ADIC Root CA
    Valid
    to
    Serial
    2ee772083d…000003
    SHA-256
    2c632ea286…09c2df9fc8

    Issuer "ADIC Root CA" is not present in this mirror, so the chain cannot be fully resolved here.

  • MD CA

    Intermediate CAValid (3306 days left)
    Issuer
    MD Root CA
    Valid
    to
    Serial
    1077a478d7…000005
    SHA-256
    2d220466c1…9fc24e2070

    Issuer "MD Root CA" is not present in this mirror, so the chain cannot be fully resolved here.

  • RCSC IssuingCA

    Intermediate CAExpired (75 days ago)
    Issuer
    RCSC RootCA
    Valid
    to
    Serial
    5773f88261…000002
    SHA-256
    1670585bb2…150bbc80e6

    Issuer "RCSC RootCA" is not present in this mirror, so the chain cannot be fully resolved here.

  • RCSC IssuingCA-2

    Intermediate CAValid (2828 days left)
    Issuer
    RCSC RootCA
    Valid
    to
    Serial
    2554746f8a…000008
    SHA-256
    bf62c1e467…dc2087f6df

    Issuer "RCSC RootCA" is not present in this mirror, so the chain cannot be fully resolved here.

  • RCSC IssuingCA-2

    Intermediate CAValid (1381 days left)
    Issuer
    RCSC RootCA
    Valid
    to
    Serial
    2554746f8a…000006
    SHA-256
    9b40e3ff76…dbc1e928cd

    Issuer "RCSC RootCA" is not present in this mirror, so the chain cannot be fully resolved here.