GB/T 42495.2-2025Financial services - Global legal entity identifier (LEI) - Part 2: Application in digital certificates (English PDF)

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for standardization work Part 1: Structure and drafting rules for standardization documents" Drafting.

This document is Part 2 of GB/T 42495 Global Legal Entity Identifier for Financial Services.

Lower part.

--- Part 1: Coding instructions;

--- Part 2: Application in digital certificates.

This document is equivalent to ISO 17442-2:2020 "Financial services legal entity identifiers — Part 2: Use in digital certificates".

The following minimal editorial changes have been made to this document.

--- To coordinate with the existing standard, the name of the standard is changed to "Financial Services Global Legal Entity Identifier Part 2: Digital Certificate Application in

--- Added notes to facilitate understanding of terms (see 3.2);

--- Appendix A supplements examples of my country's application.

Introduction

Identification and risk assessment of legal entities are essential parts of financial transactions.

Conducting due diligence on clients and retaining their data for a long time is the basic guarantee for doing business.

As a recognized identity management tool, combining the two can bring many benefits and provide users with an innovative solution for standardized digital identity.

For example, it can display the LEI in the digital certificate in the browser address bar, or extract the relevant LEI data record in the application program interface.

Appendix B of this document summarizes the advantages of combining the two. GB/T 42495 "Global Legal Entity Identifier for Financial Services"

It consists of two parts.

--- Part 1: Coding Instructions. The purpose is to define the minimum elements of the LEI in order to identify the legal entity associated with a financial transaction.

entity.

--- Part 2: Application in digital certificates. The purpose is to specify a standardized method for embedding the LEI in digital certificates.

Financial Services Global Legal Entity Identifier Part 2: Application in digital certificates

1 Scope

The certificate standard refers to the International Telecommunication Union ITU X.509 standard and its equivalent standard ISO/IEC 9594-8.

This document specifies the structure for embedding the LEI in public key digital certificates compliant with ISO/IEC 9594-8.

2 Normative references

This document has no normative references.

3 Terms and Definitions

The following terms and definitions apply to this document.

LEI data recordLEIdatarecord A set of data attributes associated with an LEI.

Note. See GB/T 42495.1-2023, Chapter 6.

object identifier; OID an ordered sequence of primary integer values from the root of the international object identifier tree to a node that unambiguously identifies that node.

Note. 3.6.5 of GB/T 17969.1-2015 states that the international object identifier tree is a specific form of the RH name tree, whose root corresponds to GB/T 17969.1-2015, its nodes correspond to the registration authority responsible for allocating arcs from the parent node.

[Source. GB/T 17969.1-2015, 3.6.9, modified]

4 Structure of an X.509 Public Key Digital Certificate with LEI Embedded

When the LEI is embedded in a digital certificate, it should be implemented by embedding the LEI in the public key digital certificate using the OID.

While the role of an individual should be indicated in a digital certificate, the role can be optionally embedded in the digital certificate. OID 1.3.6.1.4.1.

Note. There are two types of roles for individuals in an organization. official roles and ordinary roles. An official role refers to an individual's role in an organization or legal entity within a specific jurisdiction.

The roles assumed in an entity can be publicly viewed in the organization or legal entity's formation, registration or other official documents; ordinary roles cannot be publicly viewed in official documents.

The role of an individual that is publicly available in the document but actually exists in the legal entity. The role content is customized and submitted by the certificate subscriber.

The maintenance organization of the role and the scope of the content to be filled in are shown in Chapter 6 of ISO 5009:2022.

Therefore, the LEI and the role of the individual have a clear place in public key digital certificates.

The LEI and the OID of the personal role are included in the digital certificate as specific extension fields.

The ASN.1 type description of the specified extension field is as follows.