SGDB N°035/2016: New BCB Digital Certificate for the Payment System

---

[Logo: BANCO CENTRAL DE BOLIVIA]

BANCO CENTRAL DE BOLIVIA ESTADO PLURINACIONAL DE BOLIVIA

EXTERNAL CIRCULAR

La Paz, August 10, 2016 SGDB No. 035/2016

FROM: GENERAL MANAGEMENT FINANCIAL ENTITIES MANAGEMENT TO: FINANCIAL ENTITIES PARTICIPATING IN THE INTEGRATED PAYMENT SETTLEMENT SYSTEM (LIP) SUBJECT: NEW BCB DIGITAL CERTIFICATE FOR THE PAYMENT SYSTEM

Ladies and Gentlemen:

The Central Bank of Bolivia (BCB) notifies all participants in the Integrated Payment Settlement System (LIP) of the issuance of a new digital certificate that will enter into force on Wednesday, August 17, 2016, which is available at the following address:

➢ LIP System Portal: http://portallip.bcb.gob.bo

In accordance with the procedures established in the Operational and IT Guide of the Integrated Payment Settlement System GOSLIP (v.1.0) and the characteristics described in the attached document, entities that use Web Services for their operations in the LIP System must schedule the exchange of digital certificates in the presence of a Public Notary.

The scheduling of appointments will be attended by the Help Desk, starting from this date; for this purpose, please contact the phones 2407262, 2147077, 2661623, 2661645 or the institutional email ayudalip@bcb.gob.bo

Sincerely,

[Signature] RONALD O. PINTO RIBERA FINANCIAL ENTITIES MANAGER a.i. BANCO CENTRAL DE BOLIVIA

[Signature] CARLOS A. COLODRO LÓPEZ GENERAL MANAGER a.i. BANCO CENTRAL DE BOLIVIA

CCL/RPR/APM/PCS

Ayacucho Street corner Mercado · Telephone: (591-2) 2409090 · Fax: (591-2) 2661590 www.bcb.gob.bo · bancocentraldebolivia@bcb.gob.bo · La Paz Bolivia

---

[Logo: BANCO CENTRAL DE BOLIVIA]

BANCO CENTRAL DE BOLIVIA ESTADO PLURINACIONAL DE BOLIVIA

Characteristics that Digital Certificates must meet to Operate in the LIP System

Digital Certificates must meet the characteristics described below:

1. Technical Characteristics: a. Public Key: The Public Key algorithm at the time of its generation must be RSA and its Length must be 2048 bits. b. Validity.- The validity of the Digital Certificates must be 2 years. c. Signature Algorithm.- At the time of its generation, the signature algorithm (signatureAlgorithm) SHA256withRSA must be used.

2. Data Format for the Subject a. Certificates Used for Web Services i. Certificates for Transactions. 1. Subject: In the Digital Certificate, within the Subject Attributes, the fields that must be filled in an Obligatory manner are Common Name (CN), Organization (O) and Country (C), according to the following format.

        a. **Common Name (CN) Field.** The “Common Name” Field aims to identify the owner of the Certificate; it must contain the name(s) of the legal representative(s) of the entity and the purpose of the certificate. For the LIP System, it must comply with the following format CN= “Name(s) of the Legal Representative(s)” – LIP Transactions
   
        b. **Organization (O) Field.** The “Organization” Field aims to identify the Organization to which the certificate holder belongs; it must include the Name of the Entity.
   
        c. **Country (C) Field.** The “Country” Field aims to identify the Country corresponding to the Certificate and must contain the value “BO”.
   
    ii. **Certificates for Revocation.**
        1. **Subject:** In the Digital Certificate, within the Subject Attributes, the fields that must be filled in an Obligatory manner are Common Name (CN), Organization (O) and Country (C), according to the following format.
   

---

[Logo: BANCO CENTRAL DE BOLIVIA]

BANCO CENTRAL DE BOLIVIA ESTADO PLURINACIONAL DE BOLIVIA

a. **Common Name (CN) Field.** The “Common Name” Field aims to identify the owner of the Certificate; it must include the name(s) of the legal representative(s) of the entity and the purpose of the certificate. For the LIP System, it must comply with the following format CN= “Name(s) of the Legal Representative(s)” – LIP Revocation
b. **Organization (O) Field.** The “Organization” Field aims to identify the Organization to which the certificate holder belongs; it must include the Name of the Entity.
c. **Country (C) Field.** The “Country” Field aims to identify the Country corresponding to the Certificate and must contain the value “BO”.

b. **Certificates Used for the WEB Application**
    1. **Certificates for Transactions.**
        1. **Subject:** In the Digital Certificate, within the Subject Attributes, the fields that must be filled in an Obligatory manner are: Common Name (CN), Organization (O) and Country (C), according to the following format.
        a. **Common Name (CN) Field.** The “Common Name” Field aims to identify the owner of the Certificate; it must contain the name(s) of the legal representative(s) of the entity and the purpose of the certificate. For the LIP System, it must comply with the following format CN= “Name(s) of the Legal Representative(s)” – LIP Transactions
        b. **Organization (O) Field.** The “Organization” Field aims to identify the Organization to which the certificate holder belongs; it must include the Name of the Entity.
        c. **Country (C) Field.** The “Country” Field aims to identify the Country corresponding to the Certificate and must contain the value “BO”.

3. Example of Certificate Generation with Technical Characteristics using java Keytool

keytool -genkey -alias¹ test -keyalg rsa -keysize 2048 -sigalg sha256withrsa -validity 730 -keystore test.jks²

¹ The alias is defined by the participant at the time of generating the Digital Certificate. In the example, the alias name test is used; however, this must be chosen by the participant. ² The name of the file that will serve as the container is chosen by the participant. It is important to assign the “.jks” extension for its identification.

---

[Logo: BANCO CENTRAL DE BOLIVIA]

BANCO CENTRAL DE BOLIVIA ESTADO PLURINACIONAL DE BOLIVIA

4. Example of Values Generated in the Subject Field and Technical Characteristics

[Image: Screenshot of a certificate properties window]

This document is part of the Operational and IT Guide of the LIP System.