eSIM for private networks

Dear Harald, I watched your excellent presentation on eSIMs and I have two questions just to make sure I understand the situation correctly. 1. Both the eSIM profile and the SM-DP+ server's certificate has to be signed by the GSMA in order to be able to provide eSIM services to commercial handsets? 2. If the above is the case, that means we effectively lost control of the SIM infra, as we always have to rely on 3rd party SM-DP+ and eSIM profile providers who can provide the necessary signing for both the eSIM profiles and the SM-DP+ server certs signed by GSMA? Based on what you implied during the OsmoDevCall call about getting certified, I am under the impression that Sysmocom will not be able to provide nor eSIM profiles nor SM-DP+ services that can be used for commercial handsets? If this is the case, can you kindly redirect me to a vendor/provider who you have good experience with in this regard? Much appreciate your help! Regards, Csaba