“Long-term and CRL Controlled Secure Electronic Signature Policies (Profile P3)” is defined by Information and Communication Technologies Authority (ICTA) in Electronic Signature Usage Profiles which is a guide of signature profiles for Turkey. In this profile, long term compatibility is provided with ES-X LONG and ES-A signature formats. In addition, this profile requires the use of CRL for end-user certification revocation control. These requirements are provided by the CAdES-X LONG signature format in accordance with the P3 profile.

The ES-X LONG signature is based on the ES-T signature. In addition to the ES-T signature, it includes the root and sub-root certificates of the certificate authority and the CRL and OCSP responses for signature validation. This enables the signature to be validated for a long period of time.

When signature validation is performed, this data is added to the signature file. It does not need to connect to any external system for signature validation and to obtain validation data; all data required for verification is accessed from the contents of the signature file.

The following table specifies the signature properties that must be included in the signature file for P3 CAdES-X LONG signature format:

M: Must - It is mandatory to provide the specified substance. If the substance is not provided, the e-signature evaluation will result in a negative.

O: Optional – If the substance is not provided, the e-signature assessment will not result in a negative.

- : This means that the feature is not in the signature format.

It is recommended not to use optional attributes unless needed.