Main Technical Changes Signature policy attribute made optional for Basic Electronic Signature (BES) BES = CMS + signing certificate attribute (i.e. hash+id of cert). Backward compatibility with older versions (101 733 and RFC 3126) provided by Explicit Policy-based Electronic Signature (EPES) EPES = BES+ signature-policy-identifier attribute On generation conformance to either BES or EPES is required Two new optional attributes for attribute cert refs id-aa-ets-attrCertificateRefs id-aa-ets-attrRefsRevocationRefs |