esFIRMA Certification Authority
Provided certificates
- Public employee high level certificate
- Public employee with pseudonym high level certificate
- Public employee medium level certificate
- Public employee with pseudonym medium level certificate
- Public employee centralized medium level certificate
- Organization seal high level certificate
- Organization seal medium level certificate
- Organization seal centralized medium level certificate
- Qualified Time Stamp Certificate
- Extended Validation Site Certificate
Use of certificates
- How to apply for the certificate?
- How to renew the certificate?
- How to revokate the certificate?
- Laws and regulation
- Test certificates
- How to validate a certificate through CRLs?
- How to validate a certificate through OCSP?
- Certificate downloads
- Certificate repository
- Remote signing security info
- Address
- Complaints and suggestions
Provided certificates
These certificates are issued to public employees to identify them as persons in the service of the Administration, agency, or entity of public law
These certificates guarantee the identity of the Subscriber and the signer, and allow the generation of the "recognized electronic signature"; i.e., the advanced electronic signature based on a qualified certificate and which has been generated using a secure device.
OID: 1.3.6.1.4.1.47281.1.1.1
Downloads
- Version 1.5, PDF (AAPP 2)
History
- Version 1.0, PDF (valid from 28.04.2016)
These certificates are issued to public employees to identify them (through a Pseudonym) as persons in the service of the Administration, body or legal entity Public, linking them to it, fulfilling the requirements established in article 43 of the Law 40/2015, of 1 October, on the Legal Regime of the Public Sector, for the electronic signature of the personnel in the service of the Public Administrations.
The certificates of public employed person with high level pseudonym, work with Secure signature creation device in accordance with Annex II of Regulation (EU) 910/2014 of the European Parliament and of the Council of 23 July 2014.
OID: 1.3.6.1.4.1.47281.1.3.1
Download
- Version 1.5, PDF (AAPP 2)
History
N/A
hese certificates are issued to public employees to identify them as persons in the service of the Administration, agency, or entity of public law
These certificates guarantee the identity of the Subscriber and the person named in the certificate, and allow the generation of the "advanced electronic signature based on a qualified electronic certificate".
OID: 1.3.6.1.4.1.47281.1.1.2
Downloads
- Version 1.0, PDF (valid from 28.04.2016)
History
N/A
These certificates are issued to public employees to identify them (through a Pseudonym) as persons in the service of the Administration, body or legal entity Public, linking them to it, fulfilling the requirements established in article 43 of the Law 40/2015, of 1 October, on the Legal Regime of the Public Sector, for the electronic signature of the personnel in the service of the Public Administrations.
The certificates of public employed person with pseudonym are managed centrally
OID: 1.3.6.1.4.1.47281.1.3.4
Download
- Version 1.5, PDF (AAPP 2)
History
N/A
These certificates are issued to public employees to identify them as persons employed by the Administration, body or entity of public law, linking them with it, complying with the requirements established in article 43 of Law 40/2015, of October 1, of Legal Regime of the Public Sector, for the electronic signature of the personnel at the service of the Public administrations.
The certificates of public employee employed in the public sector are managed centrally.
OID:1.3.6.1.4.1.47281.1.1.4
Download
- Version 1.5, PDF (AAPP 2)
History
N/A
These certificates are issued for identification and authentication of the exercise of jurisdiction in administrative performance. .
These certificates guarantee the identity of the Subscriber and the signer, and allow the generation of the "recognized electronic signature"; i.e., the advanced electronic signature based on a qualified certificate and which has been generated using a secure device .
OID: 1.3.6.1.4.1.47281.1.2.1
Downloads
- Version 1.0, PDF (valid from 28.04.2016 to 01.07.2017)
History
N/A
These certificates are issued for the identification and authentication of the exercise of the Administrative action in accordance with Article 42 of the Law 40/2015, of 1 October, on the Legal Regime of the Public Sector.
Medium-level electronic seal certificates are centrally managed
OID: 1.3.6.1.4.1.47281.1.2.4
Download
- Version 1.5, PDF (AAPP 2)
History
N/A
These certificates allow the signing of digital evidence of electronic time. (crt, pem)
OID: 1.3.6.1.4.1.47281.1.5.2
Download
- Version 1.5, PDF (AAPP 2)
History
N/A
Timestamps
The electronic time stamps declared as qualified follow the Regulation EU 910/2014
OID: 0.4.0.2023.1.1
Downloads
- Version 1.5, PDF (AAPP 2)
History
N/A
These certificates are issued to web addresses to identify them as electronic administrative sites of the Administration, body or entity of public law, linking them with it, fulfilling the requirements established in article 38 of Law 40/2015, of October 1, Public Sector Law, for its identification and guaranteeing a secure communication with citizens.
OID: 1.3.6.1.4.1.47281.1.4.2
Download
- Version 1.5, PDF (AAPP 2)
History
N/A
Use of certificates
The administration, agency, or entity of public law must sign a contract for the provision of services of certification with esFIRMA. There should be a Subscriber authorization so that the applicant can perform the request.
The renewal of certificates requires the renewal of keys. The certificates are enewed automatically, unless subscriber expresses its opposition. .
You can request the revocation of a certificate by written request to esFIRMA or by phone number 976 579 516. The revocation request will be processed upon receipt, and inform the subscriber, and the natural person identified in the certificate about the change of status revoked certificate. The revocation will occur immediately when received, within the regular hours of operation at esFIRMA.
A set of test certificates is made available to interested parties. You can request the set by email (info@esfirma.com) indicating entity, name and the reason for the request.
The following test pages are provided (AAPP 2):
You can check the status of certificates is referring to the List of Revoked Certificates issued by esFIRMA. The Certificate Revocation Lists are published in the Deposit of the Certification, as well as the following web addresses indicated in certificates:
Root 2 Certification Authority
AAPP 2 Certification Authority
Root Certification Authority
AAPP Certification Authority
EsFIRMA reports the revocation status of certificates by the OCSP protocol, which allows the status of validity of the certificates online from directions:
OCSP AC RAIZ 2
OCSP1 AC AAPP 2
OCSP2 AC AAPP 2
OCSP1 AC AAPP
OCSP2 AC AAPP
- Root 2 CA certificate (crt, pem)
- SHA-1 7b:21:a0:29:a6:f8:0a:2d:69:e2:2f:c3:ef:de:39:62:c7:e1:e7:fc
- SHA-256 c6:09:f9:4f:9c:ce:20:cb:2b:a0:2e:8b:5b:33:55:20:06:c1:5d:17:78:32:26:11:07:0f:a1:4f:ff:9d:c9:16
- OCSP Root 2 certificate (crt, pem)
- AAPP 2 CA certificate (crt, pem)
- SHA-1 4c:84:08:72:93:68:8b:dc:3f:9b:8a:78:f7:cf:8b:10:b0:73:62:cd
- SHA-256 2c:18:23:61:9d:80:73:11:6c:8f:14:8b:d3:85:79:de:9c:05:39:16:02:db:ce:b9:65:73:e4:a1:88:e1:32:6e
- OCSP1 AAPP 2 certificate (crt, pem)
- OCSP2 AAPP 2 certificate (crt, pem)
- AAPP TSA 2 certificate (crt, pem)
- SHA-1 2f:80:88:13:10:73:ae:e0:b7:b0:41:f4:22:b5:5b:a2:4c:ee:8f:a7
- SHA-256 f7:d4:39:1c:50:c3:42:98:9b:94:63:f8:5f:db:bb:71:18:ac:03:a5:64:4a:3a:68:a1:83:65:ab:a5:07:9e:52
Public Key pem
ESPUBLICO SERVICIOS PARA LA ADMINISTRACION SA (esFIRMA)
Calle Bari 39 (Edificio Binary Building)
50197 · Zaragoza
(+34) 976 300 110
Yo can formulate any complaint and/or suggestion you filling out the downloadable sheet and send it to us.
Download
- Complaints and suggestions PDF
Mail:
ESPUBLICO SERVICIOS PARA LA ADMINISTRACION SA (esFIRMA)
Calle Bari 39 (Edificio Binary Building)
50197 · Zaragoza
(+34) 976 300 110
e-Mail: info@esfirma.com