BS PD CEN/TS 419221-4:2016 specifies a protection profile for cryptographic modules used bycertification service providers (as specified in Directive 1999/93) for signing operations, without keybackup. Target applications include root certification authorities (certification authorities which issuecertificates to other CAs and is at the top of a CA hierarchy) and other certification service providerswhere there is a high risk of direct physical attacks against the module.