LDAP

SK public directory service is available via the LDAP and contains two different catalogues:

• esteid.ldap.sk.ee that contains valid certificates issued for Estonian personal identification documents in ID-1 format (issued by intermediate CA ESTEID2018) and for Mobile-ID (issued by intermediate CA ESTEID2015)
• k3.ldap.sk.ee that contains information about all the issued and valid organisation certificates

When a certificate is suspended or revoked, it is removed from the directory. Expired certificates are removed from the directory during the first day after the expiry date.

The directory service queries must be submitted using the LDAPS protocol. Only data exchange with TLS encryption supported. Maximum of 50 certificate entries will be returned as a response.

The service access is unrestricted (anonymous bind, simple authentication). The availability of the catalog is at least 99% per year.

For detailed description of the service and the directory layout, refer to SK Github LDAP project.