QENEX internal TSA

RFC 3161 · non-qualified · cross-witness only

This endpoint issues RFC 3161 timestamp tokens signed by a QENEX-controlled ECDSA P-256 key with a TimestampSigning EKU. It is not eIDAS-qualified and not on the EU LOTL. Tokens carry QENEX’s self-signed certificate and have no statutory presumption in any court.

Purpose

A diverse cross-witness for QENEX’s daily evidence chain. Every anchored bundle is stamped by three independent witnesses:

OpenTimestamps — anchored to the public Bitcoin timechain.
This TSA — QENEX-operated, ECDSA-signed.
eIDAS-qualified TSP — statutory self-proving in UK + EU (operator-procured).

Using it

Endpoint: POST https://tsa.qenex.ai/

Content-Type: application/timestamp-query

Signing certificate: tsa.qenex.ai/cert.pem

openssl ts -query -cert -sha256 -data file -out file.tsq

curl -X POST -H 'Content-Type: application/timestamp-query' \ --data-binary @file.tsq https://tsa.qenex.ai/ -o file.tsr

openssl ts -verify -in file.tsr -queryfile file.tsq \ -CAfile cert.pem -untrusted cert.pem