ISO 25500-110:2026

International
Standard
ISO 25500-110
First edition
Supply chain interoperability and
2026-11
integration —
Part 110:
Verification of certificates in the
supply chain
Interopérabilité et intégration dans la chaîne
d'approvisionnement —
Partie 110: Vérification des certificats dans la chaîne
d'approvisionnement
Reference number
© ISO 2026
All rights reserved.
This ISO publication is protected by copyright and is owned by ISO and/or its licensors.
The content of this ISO publication is provided under licence, not sold. Use is subject to the applicable licence terms issued by ISO,
an ISO member body, or an authorized third-party distributor.
Except as required for implementation or expressly permitted by a separate licence, no part of this ISO publication may be
reproduced, distributed, modified, used, or made available in any form or by any means – electronic or mechanical, including
photocopying, scanning, recording, or posting on internal or external digital platforms.
Any use beyond the scope of the granted rights is prohibited and may result in legal action.
ISO copyright office
CP 401 • CH-1214 Vernier, Geneva
Phone: +41 22 749 01 11
Email: copyright@iso.org
Website: www.iso.org
Published in Switzerland
ii
Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Certificates in the supply chain: verification, resolution, and search processes . 2
4.1 General .2
4.2 Verify certificate: request and reply for certificate identifier verification .2
4.2.1 Request to verify a certificate identifier .2
4.2.2 Reply to request to verify a certificate identifier .2
4.3 Resolve certificate: request and reply for dataset certificate identifier represents .2
4.3.1 Request to resolve certificate to the dataset it represents .2
4.3.2 Reply to request to resolve certificate to the dataset it represents .3
4.4 Search certificate: request and reply for certificate identifier.3
4.4.1 Request for certificate identifier given certificate recipient name .3
4.4.2 Reply to request for certificate identifier given certificate recipient name.3
5 Conformance . 4
Annex A (informative) Document identification . 5
Bibliography . 6

iii
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards
bodies (ISO member bodies). The work of preparing International Standards is normally carried out through
ISO technical committees. Each member body interested in a subject for which a technical committee
has been established has the right to be represented on that committee. International organizations,
governmental and non-governmental, in liaison with ISO, also take part in the work. ISO collaborates closely
with the International Electrotechnical Commission (IEC) on all matters of electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are described
in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the different types
of ISO documents should be noted. This document was drafted in accordance with the editorial rules of the
ISO/IEC Directives, Part 2 (see www.iso.org/directives).
ISO draws attention to the possibility that the implementation of this document may involve the use of (a)
patent(s). ISO takes no position concerning the evidence, validity or applicability of any claimed patent
rights in respect thereof. As of the date of publication of this document, ISO had not received notice of (a)
patent(s) which may be required to implement this document. However, implementers are cautioned that
this may not represent the latest information, which may be obtained from the patent database available at
www.iso.org/patents. ISO shall not be held responsible for identifying any or all such patent rights.
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and expressions
related to conformity assessment, as well as information about ISO’s adherence to the World Trade
Organization (WTO) principles in the Technical Barriers to Trade (TBT), see www.iso.org/iso/foreword.html.
This document was prepared by Technical Committee ISO/TC 184, Automation systems and integration,
Subcommittee SC 5, Interoperability, integration, and architectures for enterprise systems and automation
applications.
A list of all parts in the ISO 25500 series can be found on the ISO website.
Any feedback or questions on this document should be directed to the user’s national standards body. A
complete listing of these bodies can be found at www.iso.org/members.html.

iv
Introduction
A certificate is a representation of a record of an assertion or an observation of the occurrence of an event
by a third party. Common certificates include certificate for key life events such as birth, marriage or death
as well as certificates representing title to an asset such as land, a vehicle or shares in a company or to debt
as in a mortgage or loan note. Beyond those issued by government, certificates are commonly issued by an
organization to assert the completion of an event which they govern. A good example of this is education
certificates.
Certificates are some of the oldest written records with examples of certificates (written record) of birth
and land ownership over 4 000 years old. Registers of births and land appeared as early as the governments
themselves were formed to pass and enforce laws on its citizens and property ownership, if for no other
reason than the collection of taxes.
It is important to know if it is the register or the certificate which is authoritative. While the earliest registers
were compilations of authoritative certificates, today it is most common for the register to be authoritative
and for a certificate to be an extract of an entry in an authoritative register. With the conversion of registers
to digital form, the ability to quickly and easily access a register to verify a certificate is enhanced.
Certificates are essential to the functioning of the supply chain, from processes of plan, source, make,
deliver, return and disposal, to performance, people, and practices. There are certificates for potential
trading partners (i.e. safety and health inspected, minority-owned business, no forced or child labour, fair
trade, environmental responsibility, licenses), products (i.e. quality, safety, content, function), services (i.e.
completion of service), and people (i.e. trainings, licenses, education). The certificates must be verifiable with
the authoritative source (the entity issuing the certificate) and, given the need for interoperable, integrated,
efficient, and sustainable supply chains, through automated processing.
Certificates identify both a recipient and a certificate authority which is the certificate issuer. In order to
prevent possible fraudulent certificates or confusion on what the certification represents, the certificate is
verified with the certificate authority. ISO 8000-115 describes a quality identifier as definitive, resolvable,
and consisting of a prefix element (to represent the issuer of the identifier) a
...