esFIRMA Certification Authority

Provided certificates

Provided certificates

Public employee smartcard signing certificate

These certificates are issued to public employees to identify them as persons in the service of the Administration, agency, or entity of public law

These certificates guarantee the identity of the Subscriber and the signer, and allow the generation of the "recognized electronic signature"; i.e., the advanced electronic signature based on a qualified certificate and which has been generated using a secure device.

OID: 1.3.6.1.4.1.47281.1.1.1

Downloads

Public employee smartcard authentication certificate

These certificates are issued to public employees to identify them as persons in the service of the Administration, agency, or entity of public law

OID: 1.3.6.1.4.1.47281.1.1.5

Downloads

Public employee centralized signing certificate

These certificates are issued to public employees to identify them as persons employed by the Administration, body or entity of public law, linking them with it, complying with the requirements established in article 43 of Law 40/2015, of October 1, of Legal Regime of the Public Sector, for the electronic signature of the personnel at the service of the Public administrations.

The certificates of public employee employed in the public sector are managed centrally.

OID:1.3.6.1.4.1.47281.1.1.4

Download

Public employee with pseudonym smartcard signing certificate

These certificates are issued to public employees to identify them (through a Pseudonym) as persons in the service of the Administration, body or legal entity Public, linking them to it, fulfilling the requirements established in article 43 of the Law 40/2015, of 1 October, on the Legal Regime of the Public Sector, for the electronic signature of the personnel in the service of the Public Administrations.

The certificates of public employed person with high level pseudonym, work with Secure signature creation device in accordance with Annex II of Regulation (EU) 910/2014 of the European Parliament and of the Council of 23 July 2014.

OID: 1.3.6.1.4.1.47281.1.3.1

Download

Public employee with pseudonym smartcard authentication certificate

These certificates are issued to public employees to identify them (through a Pseudonym) as persons in the service of the Administration, body or legal entity Public, linking them to it, fulfilling the requirements established in article 43 of the Law 40/2015, of 1 October, on the Legal Regime of the Public Sector, for the electronic signature of the personnel in the service of the Public Administrations.

OID: 1.3.6.1.4.1.47281.1.3.5

Download
+

Public employee with pseudonym centralized signing certificate

These certificates are issued to public employees to identify them (through a Pseudonym) as persons in the service of the Administration, body or legal entity Public, linking them to it, fulfilling the requirements established in article 43 of the Law 40/2015, of 1 October, on the Legal Regime of the Public Sector, for the electronic signature of the personnel in the service of the Public Administrations.

The certificates of public employed person with pseudonym are managed centrally

OID: 1.3.6.1.4.1.47281.1.3.4

Download

Natural person linked to entity smartcard signing certificate

These certificates are issued to employees to identify them as persons in the service of an entity

These certificates guarantee the identity of the Subscriber and the signer, and allow the generation of the "recognized electronic signature"; i.e., the advanced electronic signature based on a qualified certificate and which has been generated using a secure device.

OID: 1.3.6.1.4.1.47281.1.6.1

Downloads

Natural person linked to entity smartcard authentication certificate

These certificates are issued to employees to identify them as persons employed by an entity

OID: 1.3.6.1.4.1.47281.1.6.5

Downloads

Natural person linked to entity centralized signing certificate

These certificates are issued to employees to identify them as persons employed by an entity, linking them with it.

The certificates are managed centrally.

OID:1.3.6.1.4.1.47281.1.6.4

Download

Natural person with pseudonym linked to entity smartcard signing certificate

These certificates are issued to public employees to identify them (through a Pseudonym) as employees on an entity.

The certificates work with a secure signature creation device in accordance with Annex II of Regulation (EU) 910/2014 of the European Parliament and of the Council of 23 July 2014.

OID: 1.3.6.1.4.1.47281.1.7.1

Download

Natural person with pseudonym linked to entity smartcard authentication certificate

These certificates are issued to public employees to identify them (through a Pseudonym) as persons employed by an entity

OID: 1.3.6.1.4.1.47281.1.7.5

Download

Natural person with pseudonym linked to entity centralized signing certificate

These certificates are issued to public employees to identify them (through a pseudonym) as persons employed by an entity

The certificates are managed centrally

OID: 1.3.6.1.4.1.47281.1.7.4

Download

Public body seal software certificate

These certificates are issued for identification and authentication of the exercise of jurisdiction in administrative performance.

OID: 1.3.6.1.4.1.47281.1.2.2

Downloads

Public body seal centralized certificate

These certificates are issued for the identification and authentication of the exercise of the Administrative action in accordance with Article 42 of the Law 40/2015, of 1 October, on the Legal Regime of the Public Sector.

Medium-level electronic seal certificates are centrally managed

OID: 1.3.6.1.4.1.47281.1.2.4

Download

Electronic seal software certificate

These certificates are qualified in accordance with article 38 and Annex III of Regulation (EU) 910/2014 of the European Parliament and of the Council, of July 23, 2014 and comply with the provisions of the technical regulations identified with the ETSI reference EN 319 411-2

OID: 1.3.6.1.4.1.47281.1.8.2

Downloads

Electronic seal centralized certificate

These certificates are qualified in accordance with article 38 and Annex III of Regulation (EU) 910/2014 of the European Parliament and of the Council, of July 23, 2014 and comply with the provisions of the technical regulations identified with the ETSI reference EN 319 411-2.

These electronic seal certificates are centrally managed

OID: 1.3.6.1.4.1.47281.1.8.4

Download

Qualified Timestamp Certificate

These certificates allow the signing of digital evidence of electronic time. (crt, pem)

OID: 1.3.6.1.4.1.47281.1.5.2

Download

Timestamps

The electronic time stamps declared as qualified follow the Regulation EU 910/2014

OID: 0.4.0.2023.1.1

Downloads

Use of certificates

How to apply for a certificate

The administration, agency, or entity must sign a contract for the provision of services of certification with esFIRMA. There should be a Subscriber authorization so that the applicant can perform the request.

How to renew the certificate

The renewal of certificates requires the renewal of keys. The certificates are enewed automatically, unless subscriber expresses its opposition. .

How to request a certificate revocation

You can request the revocation of a certificate by written request to esFIRMA or by phone number 976 579 516. The revocation request will be processed upon receipt, and inform the subscriber, and the natural person identified in the certificate about the change of status revoked certificate. The revocation will occur immediately when received, within the regular hours of operation at esFIRMA.

Laws and regulations

Certification Practice Statement

Downloads
  • Versión 1.14 PDF
History
  • Versión 1.13 PDF
  • Versión 1.12 PDF
  • Versión 1.11 PDF
  • Versión 1.10 PDF
  • Versión 1.9 PDF
  • Versión 1.8 PDF
  • Versión 1.6 PDF
  • Versión 1.5 PDF

How to validate a certificate though a CRL

You can check the status of certificates is referring to the List of Revoked Certificates issued by esFIRMA. The Certificate Revocation Lists are published in the Deposit of the Certification, as well as the following web addresses indicated in certificates:

Root 2 Certification Authority
AAPP 2 Certification Authority

How to validate a certificate though OCSP

EsFIRMA reports the revocation status of certificates by the OCSP protocol, which allows the status of validity of the certificates online from directions:

OCSP1 AC AAPP 2
  • https://ocsp1.esfirma.com/acaapp2 (crt, pem)
OCSP2 AC AAPP 2
  • https://ocsp2.esfirma.com/acaapp2 (crt, pem)

Certificate downloads

  • Root 2 CA certificate (crt, pem)
    • SHA-1 7b:21:a0:29:a6:f8:0a:2d:69:e2:2f:c3:ef:de:39:62:c7:e1:e7:fc
    • SHA-256 c6:09:f9:4f:9c:ce:20:cb:2b:a0:2e:8b:5b:33:55:20:06:c1:5d:17:78:32:26:11:07:0f:a1:4f:ff:9d:c9:16
    • Profile: PDF
  • AAPP 2 CA certificate (crt, pem)
    • SHA-1 4c:84:08:72:93:68:8b:dc:3f:9b:8a:78:f7:cf:8b:10:b0:73:62:cd
    • SHA-256 2c:18:23:61:9d:80:73:11:6c:8f:14:8b:d3:85:79:de:9c:05:39:16:02:db:ce:b9:65:73:e4:a1:88:e1:32:6e
    • Profile: PDF
  • OCSP1 AAPP 2 certificate (crt, pem)
  • OCSP2 AAPP 2 certificate (crt, pem)
  • ESFIRMA TSA - QTSU 2023 TimeStamper Certificate (crt, pem)
  • ESFIRMA TSA 2 TimeStamper Certificate (crt, pem)
  • Test Certificate Set (zip)

Certificate repository

There are no authorized certificates to download

Remote signing security info

Security Info

Public Key pem

Address

ESPUBLICO SERVICIOS PARA LA ADMINISTRACION SA (esFIRMA)
Calle Bari 39 (Edificio Binary Building)
50197 · Zaragoza
(+34) 976 300 110

Registry data: Registro Mercantil de Zaragoza, tomo 2.649, Folio 215, hoja Z-28722

Complaints and suggestions

Yo can formulate any complaint and/or suggestion you filling out the downloadable sheet and send it to us.

Download
  • Complaints and suggestions PDF

Mail:
ESPUBLICO SERVICIOS PARA LA ADMINISTRACION SA (esFIRMA)
Calle Bari 39 (Edificio Binary Building)
50197 · Zaragoza
(+34) 976 300 110

e-Mail: info@esfirma.com

DATA PROTECTION NFORMATIVE CLAUSE

Responsible for the treatment: ESPUBLICO SERVICIOS PARA LA ADMINISTRACIÓN S.A., with C.I.F.: A50878842, address at Calle Bari, 39 (Edificio Binary Building), C.P. 50197 - Zaragoza, contact telephone number: 976300110.
Data Protection Officer: dpd@espublico.com
Purpose: manage the complaints and suggestions sent by the interested parties.
Legal basis: legitimate interest of the data controller to respond to the complaints and suggestions made.
Data recipients: there are no data communications or international transfers.
Conservation period: until the interested party exercises their right of opposition or deletion.
Exercise of rights: access, rectification, deletion, opposition, limitation and portability through the aforementioned postal address or email dpd@espublico.com. Likewise, if their rights are not satisfied, the interested parties may file a claim with the Spanish Agency for Data Protection (www.aepd.es).