TSA Server - Configuration

Timestamping Digital Certificate
Certificate Subject: O=Test, CN=Do not use in production; Valid From 6/20/2026 to 6/20/2031
Serial Number: 00D4C5CAF3F6A7E86E69629ABCC2DB3BD6; Thumbprint: DEA4DA80698AA024FD1C2235F1D9101DD29A86C5
Certificate Service Provider: Microsoft Enhanced Cryptographic Provider v1.0
Is a hardware device: False; The key can be exported: False; Certificate Location: The certificate is a PFX file

The Time Stamp Responses must be digitally signed by a timestamping certificate.

Settings
The default value is 1.3.6.1.4.1.1.2.1.2. The policy field indicates the Time Stamp Server policy.
Time Stamp Request must include the current Time Stamp Server Policy ID
Reject requests that do not include the configured Policy ID.
Set Ordering to True
Allows timestamps to be ordered regardless of accuracy.
Time Stamp Request must include a Nonce extension
Detects replay attacks. Requests without a nonce will be rejected.
Include whole chain on the Time Stamp Response
The Time Stamp Response size will increase if the certificate chain is included.
Include ESSCertIDv2 attribute
Include ESSCertID or ESSCertIDv2 according to RFC 5816.
Include qcStatements attribute
Include qcStatements according to ETSI EN 319 422 and eIDAS/Regulation (EU) No 910/2014.
Do not encode Authenticode responses as BASE64
The Authenticode responses are usually encoded in BASE64.
Set Accuracy
Define timestamp accuracy values.
Seconds
Milliseconds
Microseconds
Authentication
Require authentication
Only authenticated users can obtain timestamp responses.
Time Stamp Responses Log
Log all responses
Serial number, time and certificate will be logged.