Certificates

A Qualified Certificate for Advanced Electronic Signature is a certificate generated and stored at Natural Person PC by leveraging its cryptographic functions.

An Advanced Electronic Signature is an electronic signature which is additionally:

• uniquely linked to and capable of identifying the signatory
• created in a way that allows the signatory to retain control
• linked to the document in a way that any subsequent change of the data is detectable

ADACOM issues two (2) types of Advanced Electronic Signature Certificates:

Advanced Signature Certificate for Natural Person 

This type of advanced certificate is issued to Natural Persons. Based on eIDAS regulation it is necessary to validate the personal details of Natural person before the issuance of the certificate. This type of advanced certificate is issued to natural persons that want to sign electronically on their behalf as an individual, for this reason it contains natural person’s information.

Advanced Signature Certificate for Natural Persons associated with Legal Persons 

This type of advanced certificate is issued to a natural person who is associated with a legal person and has the authority to sign on behalf of the Legal Person. The advanced certificate contains not only natural person’s information, but also legal person’s information such as Legal Person’s name and VAT/ NTR number, as well as the natural person’s position within the organization. This advanced certificate is a property of the Company, which is also responsible to revoke the certificate in case the natural person loses the authority to act on behalf of the legal person.

Digitally sign documents according to the eIDAS regulation. Our eSignature solutions enable you to sign legally binding agreements with your customers, suppliers, or business partners wherever they are. 

A qualified electronic signature is an advanced electronic signature which is additionally:

• created by a qualified signature creation device (QSCD) 
• is based on a qualified certificate for electronic signatures
• it is equivalent to a handwritten signature

ADACOM issues two (2) types of qualified electronic signature certificates: 

Qualified Certificate for Natural Person

This type of qualified certificate is issued to Natural Persons and has the equivalent legal effect of a handwritten signature. Based on eIDAS regulation it is necessary to validate the personal details of Natural person before the issuance of the certificate. This type of qualified certificate is issued to natural persons that want to sign electronically on their behalf as an individual, for this reason it contains natural person’s information.

Qualified Certificate for Natural Persons associated with Legal Persons

This type of qualified certificate is issued to a natural person who is associated with a legal person and has the authority to sign on behalf of the Legal Person. The qualified certificate contains not only natural person’s information, but also legal person’s information such as Legal Person’s name and VAT/ NTR number, as well as the natural person’s position within the organization. This qualified certificate is a property of the Company, which is also responsible to revoke the certificate in case the natural person loses the authority to act on behalf of the legal person.

ADACOM issues qualified electronic signature certificates on two (2) types of Qualified Signature Creation Devices (QSCD):

Local QSCD

ADACOM Local Qualified Electronic Signatures is a qualified eSignature based on eIDAS Qualified Certificate issued and stored at a Local QSCD (USB token).

The private keys are generated and stored on the Local QSCD. The Subscriber/Certificate Holder is responsible for securing the Local QSCD with a Personal Identification Number (PIN).

The Subscriber Private Keys on Local QSCD are protected by PIN codes, which the Subscriber needs to enter for each transaction. Subscriber must change the PIN and PUK code prior to the initial registration process. In case the Subscriber enters a wrong PIN code, after several times, the QSCD is locked for security reasons.

Remote QSCD

ADACOM Remote Qualified Electronic Signatures is a qualified eSignature based on eIDAS Qualified Certificate issued and stored at a remote certified Qualified Signature Creation Device (QSCD) hosted and operated by ADACOM.

This type of remote QSCD allows the usage of remote qualified certificates for electronic signature from any device (laptops, smartphones, tablets). The access to the keys of the certificate in the remote QSCD for qualified electronic signatures is conducted by using an authenticator app that the Subscriber setups to his/her mobile device and the security to this access is ensured through the two-factor authentication by using the username, password and the one-time password (OTP). Applications can be downloaded from Apple or Play store and the access is protected either via PIN or biometric.  

Signature creation devices come in many forms to protect the electronic signature creation data (e.g. private key) of the signatory/creator of the signature, such as smartcards, USB sticks, Remote HSMs. A qualified signature creation device (QSCD), by following stricter requirements laid down in eIDAS, offers higher guarantees regarding the protection (e.g. mitigating any kind of replication or forgery) of the electronic signature creation data (such as the private key) and therefore higher legal certainty regarding the created qualified electronic signatures.

A certificate for electronic seals, issued by a Certificate Authority (CA), is an electronic attestation that links electronic seal validation data to a legal person and confirms the name of that person. This way, the certificate, usually linked to the sealed document, can be used to verify the identity of the creator of the seal and whether the document has been sealed using the corresponding private key.

Like the electronic signature, the eIDAS Regulation defines three levels of electronic seal: 'simple' electronic seal, advanced electronic seal and qualified electronic seal. The requirements of each level are built on the requirements of the level below it, such that a qualified electronic seal meets the most requirements and a 'simple' electronic seal the least.

Nevertheless, levels of electronic seals don’t have the same definitions, requirements, nor legal effects as levels of electronic signatures.

An electronic seal is defined as "data in electronic form, which is attached to or logically associated with other data in electronic form to ensure the latter’s origin and integrity".

ADACOM issues two (2) types of electronic seal certificates:

Qualified Electronic Seal for Legal Person 

This type of Seal is generated and stored with no use of a QSCD. For the purposes of the specific project, the Legal Person will generate a Certificate Signing Request (CSR), containing information that will be included in the certificate such as the Organization’s name, VAT/NTR number and country and will send it to ADACOM in order to proceed with the issuance of the ASeal. ADACOM will receive the corresponding CSR and then will create the ASeal certificate using the CA Service. The certificate will be sent to Legal Person’s authorized representative via e-mail and then it will be installed on a server in order to be used for multiple purposes, including document sealing.

Advanced eSeal

 An advanced electronic seal is an electronic seal which is additionally:

• uniquely linked to the creator of the seal
• capable of identifying the creator of the seal
• created using electronic seal creation data that the creator of the seal can, with a high level of confidence under its control, use for electronic seal creation 
• linked to the data to which it relates in such a way that any subsequent change in the data is detectable 

ADACOM issues qualified electronic seal certificates on two (2) types of Qualified Signature Creation Devices (QSCD): 

Local QSCD

ADACOM Local Qualified Electronic Seal is a qualified eSeal based on eIDAS Qualified Certificate issued and stored at a Local QSCD (USB token). 

The private keys are generated and stored on the Local QSCD. The Subscriber/Certificate Holder is responsible for securing the Local QSCD with a Personal Identification Number (PIN).

The Subscriber Private Keys on Local QSCD are protected by PIN codes, which the Subscriber needs to enter for each transaction. Subscriber must change the PIN and PUK code prior to the initial registration process. In case the Subscriber enters a wrong PIN code, after several times, the QSCD is locked for security reasons.

Remote QSCD

ADACOM Remote Qualified Electronic Seal is a qualified eSeal based on eIDAS Qualified Certificate issued and stored at a remote certified Qualified Signature Creation Device (QSCD) hosted and operated by ADACOM.  

This type of remote QSCD allows the usage of remote qualified certificates for electronic seals from any device (laptops, smart phones, tablets). The access to the keys of the certificate in the remote QSCD for qualified electronic seal is conducted by using the username and password.

Seal creation devices come in many forms to protect the electronic seal creation data (e.g. private key) of the signatory/creator of the seal, such as smartcards, USB sticks, Remote HSMs. A qualified seal creation device (QSCD), by following stricter requirements laid down in eIDAS, offers higher guarantees regarding the protection (e.g. mitigating any kind of replication or forgery) of the electronic seal creation data (such as the private key) and therefore higher legal certainty regarding the created qualified electronic seals.

A short-term certificate is a certificate whose validity period, i.e. the period of time from notBefore through notAfter, inclusive, is shorter than the maximum time to process a revocation request as specified in the certificate practice statement.

ADACOM is issuing short-term certificates for qualified electronic signatures with validity up to 24 hours. The short-term certificate are issued through CSC (Cloud Signature Consortium) compliant APIs.

Secure your websites and protect your visitors’ sensitive data using SSL certificates.

Transport Layer Security (TLS) certificates—most commonly known as SSL, or digital certificates—are the foundation of a safe and secure internet. TLS/SSL certificates secure internet connections by encrypting data sent between your browser, the website you’re visiting, and the website server. They ensure that data is transmitted privately and without modifications, loss or theft.

TLS/SSL CERTIFICATES AND BRAND PROTECTION

Give customers a clearer picture of who you are.

Jane Doe is an anonymous, unidentifiable internet user whose actions can’t be tracked. Would you trust her with your personal information?

Verified Mark Certificates (VMCs)

Verified Mark Certificates (VMCs) allow you to render your logo next to the “sender” field in email clients so that users see your mark—and that your organization has been authenticated—before they even open your message. It’s the email equivalent of a checkmark on social media, with added validation and security requirements to help protect your customers and your brand against phishing and spoofing attacks.   How do VMCs work? Logo-verified email is part of a groundbreaking initiative—in cooperation with Brand Indicators for Message Identification (BIMI) and email client providers— to promote a consistent, trusted and visually authenticatable email experience for both businesses and consumers

DigiCert Smart Seal

A SMARTER WORLD NEEDS A SMARTER SYMBOL OF TRUST

The world has changed a lot since the early days of the internet. And yet, for more than a decade, the trust seal remained static. Until now.

Designed to be seen. And understood.

Simple micro-interactions engage users while making the seal harder to spoof. Users can also get a detailed view of certificate and site details with a single click.

The mark of a security-minded organization.

Put security at the center of your brand by having your verified logo displayed in the Smart Seal—a form of visual verification for your customers.

The PSD2 Directive requires that all transactions to be performed through secure channels and all data shall be protected concerning authenticity and integrity. These two requirements can be met by using a Qualified Website Authentication Certificate (QWAC) PSD2 and/or a Qualified electronic Seal Certificate (QSealC) PSD2.

PSD2 Qualified Certificate e-Seal for Legal Person

This type of Seal is an electronic seal under the payment services Directive (EU) 2015/2366 (PSDII), for electronic transactions within the internal European market. For the purposes of the specific project, the Legal Person will generate a Certificate Signing Request (CSR), containing information that will be included in the certificate such as the Organization’s name, PSD2 information, VAT/NTR number and country and will send it to ADACOM in order to proceed with the issuance of the ASeal. ADACOM will receive the corresponding CSR and then will create the ASeal certificate using the CA Service. The certificate will be sent to Legal Person’s authorized representative via e-mail and then it will be installed on a server in order to be used for multiple purposes, including document sealing.

QWAC PSD2 Certificate

Qualified website authentication certificate (QWAC certificate) is a qualified digital certificate  under the payment services Directive (EU) 2015/2366 (PSDII).

In the eIDAS Regulation trust services are defined as electronic services, normally provided by trust service providers (TSPs), which consist of electronic signatures, electronic seals, electronic time stamps, electronic registered delivery services and website authentication.

Secure the authenticity of your email address and the contents of your email messages.

Email client certificates, also known as S/MIME Certificates, have a public/private key pair. Your private key stays with you and is used to sign outgoing emails and decrypt incoming emails encrypted with your public key. Your public key is used to verify your signature and encrypt emails sent to you.

Secure/Multipurpose Internet Mail Extensions, or S/MIME, is an internet standard to digitally sign and encrypt email messages. It ensures the integrity of email messages remains intact while being received.

By using digital signatures, S/MIME provides for authentication, message integrity, and non-repudiation:

Sign your Software with a Code Signing Certificate and earn public trust by securing the authenticity of your Software and its Publisher.

Code signing increases user confidence and trust

Code Signing Certificates are used by software developers to digitally sign applications, drivers, executables and software programs as a way for end-users to verify that the code they receive has not been altered or compromised by a third party. They include your signature, your company’s name and, if desired, a timestamp. 

EV Code Signing increases trust and adoption

Extended Validation (EV) Code Signing Certificates include all the standard benefits of digitally signed code plus a rigorous vetting process and hardware security requirement, so your users can have even greater confidence in the integrity of your applications. 

Companies investing in Internet of Things (IoT) platforms and connected devices face a host of challenges when it comes to security. There is a complex and diverse mix of hardware, operating systems, and standards. There is a high variance in form factor and memory needs from small to large workloads. Once devices are in the field, they need to be updatable, and legacy brownfield devices need to be able to communicate with new greenfield units.

ADACOM IoT Device Manager makes it simple to manage all your devices, regardless of how they’re built, what they do or how many you send out into the world. IoT Device Manager is a PKI management solution that embeds and manages device identity at scale through the provisioning and lifecycle management of digital certificates. IoT Device Manager supports a broad range of certificate types and enrollment methods, meeting the diverse security needs and form factors of the connected device market.

• Total awareness: Manage discovery, reporting, certificate creation and revocation, user access and permissions, all in one place  
• Efficient management: Save time and prevent lapses with automated backups and updates on fast, high-volume-issuing container-based architecture  
• Adaptable integration: Make your security work easily with any number of systems, using REST API, SCEP, EST and CMPv2
• Quicker deployment: Securely roll out new services throughout your production in minutes with near-instant ICA creation and advanced permissions 

IoT use cases

• HEALTHCARE: Protect patient data while securing smart care devices like pacemakers and continuous glucose monitors 
• HOME AND CONSUMER: Secure home networks and protect private data for everything from routers to cameras to wearables
• INDUSTRIAL: Build secure identity into the manufacturing process, with options from silicon injection to assembly and beyond 
• SMART CITIES: Maximize smart grid efficiency and protect the real-time data shared between meters, sensors and systems 
• TRANSPORTATION: Encrypt and identify sensors and systems that monitor and control all types of vehicles—sea, land, air and space