Qualified Certificates for Electronic Signatures, Electronic Seals, Website Authentication and PSD2 Compliance

eIDAS Certificates

Qualified eIDAS certificates are essential for ensuring compliance with the European Union's eIDAS regulation, which governs electronic identification, authentication, and trust services. These certificates provide a high level of security and legal assurance, holding the same legal effect as a handwritten signature.

The regulation mandates that these certificates be stored on qualified signature creation devices (QSCDs) and must be issued and managed by a Qualified Trust Service Provider (QTSP).

Sectigo’s eIDAS-compliant certificates enable individuals and organizations to digitally sign and seal documents, ensuring authenticity, integrity, and non-repudiation. Additionally, these certificates allow for time-stamping, helping to prove that a document existed at a specific moment in time. With Sectigo’s eIDAS certificates, businesses can confidently meet regulatory requirements while enhancing security in electronic transactions and communications.

eIDAS PSD2 Certificates and Seals

PSD2 is a regulatory framework designed to enhance the security, efficiency, and ease of payments within the EU. To ensure compliance with PSD2, certificates can only be issued to legal entities that have been authorized and hold a valid PSD2 authorization number from a National Competent Authority (NCA). These certificates are essential for meeting the stringent security standards outlined by the regulation.

PSD2 Seals for Organizations

PSD2-compliant qualified and advanced seals—for banking entities and third-party payment providers who need to comply with PSD2.

PSD2 Qualified Website Authentication

PSD2-compliant QWACs—TLS/SSL certificates that encrypt sensitive data and authenticate banking entities and third-party payment providers for trusted commerce electronic transactions on websites.

Electronic Seal & Signature Solutions

eIDAS-compliant document signing and sealing certificates offer reliable authentication for electronically transmitted documents, ensuring the validity of both the document and its author. These certificates provide trusted verification, aligning with the eIDAS regulations for secure digital transactions.

For Citizens

Advanced and Qualified Electronic Signatures commonly used for personal identification, tax filing, and government requirements. Qualified Electronic Signatures are in the name of an individual and have the same legal effect as handwritten signatures.

For Businesses + Enterprises

Advanced and Qualified (QSCD) Signatures and Seals for Employees and Organizations. Used for calls for tender, business documents, automated processing and more.

eIDAS Qualified Website Authentication Certificates

QWACs (Qualified Website Authentication Certificates) confirm the identity of a natural or legal person behind a website or server, providing trustworthy information. These certificates utilize encryption algorithms for data protection and offer extended validation to authenticate EU-based organizations or individuals, ensuring users can confidently interact with secure websites.

For Individuals

TLS/SSL certificates that provide end-to-end data encryption between servers and clients - Used by individuals for personal websites

For Businesses + Enterprises

TLS/SSL certificates that provide end-to-end data encryption between servers and clients - Used by organizations and companies

Key Information on eIDAS Certificates

eIDAS Certificates can be used on a wide range of signing solution platforms. Certs issued by Sectigo are trusted by qualified trust service providers in each member nation. Most common file formats are supported, including Adobe PDF and Microsoft Office.

There are two main types of eIDAS certificates:

  1. The certificate in the name of an individual used for document signatures
  2. The certificate in the name of an organization used for document seals
  3. Both types come with an unlimited number of signatures

Validation is an important part of the eIDAS certificate issuing process. As such, Sectigo has adopted stringent validation policies and procedures to strengthen the security of certificate operations and validation processes.

Sectigo verifies the following:

  1. The identity of the key holder, the subject named in the certificate
  2. The identity and address of the entity to confirm its physical existence
  3. That the entity has authorized the issuance of the certificate

The validation work is done by Sectigo. You are required to respond to emails, follow instructions and provide the requested documents.

Sectigo aims to promptly complete your order while adhering to strict validation standards. To ensure the integrity of the certificate, Sectigo will not issue a certificate that has not passed validation.

After you have submitted the required documents, Sectigo will validate the information and identity. The validation process may take 1-5 business days. You will be notified when the validation process is complete. Once the certificate is issued, it will be installed on a USB token and mailed to you. The arrival time depends on your location and shipping methods. You will receive tracking information via email.

For more information on how to use the eIDAS certificates, refer to our detailed eIDAS Certificate Instructions.

Are you interested to become Sectigo Malaysia partner?

Become a valued member of our community and unlock exciting opportunities. Connect, grow, and make an impact—start your journey with us today!