New Thales ID Cards in Estonia 2025

Starting in November 2025, Thales will replace IDEMIA as the producer of Estonia’s ID-cards. The trust services for the new Thales ID-cards will be provided by Zetes Estonia. Thales test cards are available to e-service providers for testing ID-card authentication and digital signing solutions. More information about the Thales ID-cards is available here.

To support Thales test ID-cards in an application that uses ID-card authentication with Web eID, you must add the Zetes Estonia intermediate CA certificate to the list of trusted intermediate certificate authorities.

In the Web eID ASP.NET example application, CA certificates are loaded from .cer files located in the profile-specific subdirectory of the Certificates resource directory. If your application loads certificates differently, make sure to include the certificate accordingly.

All trusted certificates, including the new one, must be provided as arguments to AuthTokenValidatorBuilder().withTrustedCertificateAuthorities().

Production certificate

The production intermediate certificate ESTEID2025.crt is available here: https://crt.eidpki.ee/ESTEID2025.crt.

Test certificate

The test intermediate certificate TestESTEID2025.crt is available here: http://crt-test.eidpki.ee/testESTEID2025.crt.

Here is the example application pull request that adds TestESTEID2025.crt to trusted certificates in the dev profile: https://github.com/web-eid/web-eid-asp-dotnet-example/pull/31.
Note that TestESTEID2025.crt was renamed to TestESTEID2025.cer in the pull request.