ETSI EN 319 411-2

Electronic Signatures and Infrastructures (ESI);
Policy and security requirements for Trust Service Providers issuing certificates;
Part 2: Requirements for trust service providers issuing EU qualified certificates