esFIRMA Certification Authority

Provided certificates

Provided certificates

Public employee smartcard signing certificate

These certificates are issued to public employees to identify them as persons in the service of the Administration, agency, or entity of public law

These certificates guarantee the identity of the Subscriber and the signer, and allow the generation of the "recognized electronic signature"; i.e., the advanced electronic signature based on a qualified certificate and which has been generated using a secure device.

OID: 1.3.6.1.4.1.47281.1.1.1

Downloads

Public employee smartcard authentication certificate

These certificates are issued to public employees to identify them as persons in the service of the Administration, agency, or entity of public law

OID: 1.3.6.1.4.1.47281.1.1.5

Downloads

Public employee centralized signing certificate

These certificates are issued to public employees to identify them as persons employed by the Administration, body or entity of public law, linking them with it, complying with the requirements established in article 43 of Law 40/2015, of October 1, of Legal Regime of the Public Sector, for the electronic signature of the personnel at the service of the Public administrations.

The certificates of public employee employed in the public sector are managed centrally.

OID:1.3.6.1.4.1.47281.1.1.4

Download

Public employee with pseudonym smartcard signing certificate

These certificates are issued to public employees to identify them (through a Pseudonym) as persons in the service of the Administration, body or legal entity Public, linking them to it, fulfilling the requirements established in article 43 of the Law 40/2015, of 1 October, on the Legal Regime of the Public Sector, for the electronic signature of the personnel in the service of the Public Administrations.

The certificates of public employed person with high level pseudonym, work with Secure signature creation device in accordance with Annex II of Regulation (EU) 910/2014 of the European Parliament and of the Council of 23 July 2014.

OID: 1.3.6.1.4.1.47281.1.3.1

Download

Public employee with pseudonym smartcard authentication certificate

These certificates are issued to public employees to identify them (through a Pseudonym) as persons in the service of the Administration, body or legal entity Public, linking them to it, fulfilling the requirements established in article 43 of the Law 40/2015, of 1 October, on the Legal Regime of the Public Sector, for the electronic signature of the personnel in the service of the Public Administrations.

OID: 1.3.6.1.4.1.47281.1.3.5

Download
+

Public employee with pseudonym centralized signing certificate

These certificates are issued to public employees to identify them (through a Pseudonym) as persons in the service of the Administration, body or legal entity Public, linking them to it, fulfilling the requirements established in article 43 of the Law 40/2015, of 1 October, on the Legal Regime of the Public Sector, for the electronic signature of the personnel in the service of the Public Administrations.

The certificates of public employed person with pseudonym are managed centrally

OID: 1.3.6.1.4.1.47281.1.3.4

Download

Natural person linked to entity smartcard signing certificate

These certificates are issued to employees to identify them as persons in the service of an entity

These certificates guarantee the identity of the Subscriber and the signer, and allow the generation of the "recognized electronic signature"; i.e., the advanced electronic signature based on a qualified certificate and which has been generated using a secure device.

OID: 1.3.6.1.4.1.47281.1.6.1

Downloads

Natural person linked to entity smartcard authentication certificate

These certificates are issued to employees to identify them as persons employed by an entity

OID: 1.3.6.1.4.1.47281.1.6.5

Downloads

Natural person linked to entity centralized signing certificate

These certificates are issued to employees to identify them as persons employed by an entity, linking them with it.

The certificates are managed centrally.

OID:1.3.6.1.4.1.47281.1.6.4

Download

Natural person with pseudonym linked to entity smartcard signing certificate

These certificates are issued to public employees to identify them (through a Pseudonym) as employees on an entity.

The certificates work with a secure signature creation device in accordance with Annex II of Regulation (EU) 910/2014 of the European Parliament and of the Council of 23 July 2014.

OID: 1.3.6.1.4.1.47281.1.7.1

Download

Natural person with pseudonym linked to entity smartcard authentication certificate

These certificates are issued to public employees to identify them (through a Pseudonym) as persons employed by an entity

OID: 1.3.6.1.4.1.47281.1.7.5

Download

Natural person with pseudonym linked to entity centralized signing certificate

These certificates are issued to public employees to identify them (through a Pseudonym) as persons employed by an entity

The certificates are managed centrally

OID: 1.3.6.1.4.1.47281.1.7.4

Download

Public body seal software certificate

These certificates are issued for identification and authentication of the exercise of jurisdiction in administrative performance.

OID: 1.3.6.1.4.1.47281.1.2.2

Downloads

Public body seal centralized certificate

These certificates are issued for the identification and authentication of the exercise of the Administrative action in accordance with Article 42 of the Law 40/2015, of 1 October, on the Legal Regime of the Public Sector.

Medium-level electronic seal certificates are centrally managed

OID: 1.3.6.1.4.1.47281.1.2.4

Download

Qualified Timestamp Certificate

These certificates allow the signing of digital evidence of electronic time. (crt, pem)

OID: 1.3.6.1.4.1.47281.1.5.2

Download

Timestamps

The electronic time stamps declared as qualified follow the Regulation EU 910/2014

OID: 0.4.0.2023.1.1

Downloads

Qualified website authentication certificate

These certificates are issued to:

  • Web addresses to identify them as electronic administrative sites of the Administration, body or entity of public law, linking them with it, fulfilling the requirements established in article 38 of Law 40/2015, of October 1, Public Sector Law, for its identification and guaranteeing a secure communication with citizens.

  • Web addresses to identify them as sites of an entity.

OID: 1.3.6.1.4.1.47281.1.4.2

Download

Use of certificates

How to apply for a certificate

The administration, agency, or entity must sign a contract for the provision of services of certification with esFIRMA. There should be a Subscriber authorization so that the applicant can perform the request.

How to renew the certificate

The renewal of certificates requires the renewal of keys. The certificates are enewed automatically, unless subscriber expresses its opposition. .

How to request a certificate revocation

You can request the revocation of a certificate by written request to esFIRMA or by phone number 976 579 516. The revocation request will be processed upon receipt, and inform the subscriber, and the natural person identified in the certificate about the change of status revoked certificate. The revocation will occur immediately when received, within the regular hours of operation at esFIRMA.

Laws and regulations

Certification Practice Statement

Downloads
  • Versión 1.10 PDF
History
  • Versión 1.9 PDF
  • Versión 1.8 PDF
  • Versión 1.6 PDF
  • Versión 1.5 PDF

Test certificates

A set of test certificates is made available to interested parties. You can request the set by email (info@esfirma.com) indicating entity, name and the reason for the request.

The following test pages are provided :

How to validate a certificate though a CRL

You can check the status of certificates is referring to the List of Revoked Certificates issued by esFIRMA. The Certificate Revocation Lists are published in the Deposit of the Certification, as well as the following web addresses indicated in certificates:

Root 2 Certification Authority
AAPP 2 Certification Authority

How to validate a certificate though OCSP

EsFIRMA reports the revocation status of certificates by the OCSP protocol, which allows the status of validity of the certificates online from directions:

OCSP AC RAIZ 2
  • https://ocsp.esfirma.com/acraiz2 (crt, pem)
OCSP1 AC AAPP 2
  • https://ocsp1.esfirma.com/acaapp2 (crt, pem)
OCSP2 AC AAPP 2
  • https://ocsp2.esfirma.com/acaapp2 (crt, pem)

Certificate downloads

  • Root 2 CA certificate (crt, pem)
    • SHA-1 7b:21:a0:29:a6:f8:0a:2d:69:e2:2f:c3:ef:de:39:62:c7:e1:e7:fc
    • SHA-256 c6:09:f9:4f:9c:ce:20:cb:2b:a0:2e:8b:5b:33:55:20:06:c1:5d:17:78:32:26:11:07:0f:a1:4f:ff:9d:c9:16
  • OCSP Root 2 certificate (crt, pem)
  • AAPP 2 CA certificate (crt, pem)
    • SHA-1 4c:84:08:72:93:68:8b:dc:3f:9b:8a:78:f7:cf:8b:10:b0:73:62:cd
    • SHA-256 2c:18:23:61:9d:80:73:11:6c:8f:14:8b:d3:85:79:de:9c:05:39:16:02:db:ce:b9:65:73:e4:a1:88:e1:32:6e
  • OCSP1 AAPP 2 certificate (crt, pem)
  • OCSP2 AAPP 2 certificate (crt, pem)
  • AAPP TSA 2 certificate (crt, pem)
    • SHA-1 2f:80:88:13:10:73:ae:e0:b7:b0:41:f4:22:b5:5b:a2:4c:ee:8f:a7
    • SHA-256 f7:d4:39:1c:50:c3:42:98:9b:94:63:f8:5f:db:bb:71:18:ac:03:a5:64:4a:3a:68:a1:83:65:ab:a5:07:9e:52

Certificate repository

There are no authorized certificates to download

Remote signing security info

Security Info

Public Key pem

Address

ESPUBLICO SERVICIOS PARA LA ADMINISTRACION SA (esFIRMA)
Calle Bari 39 (Edificio Binary Building)
50197 · Zaragoza
(+34) 976 300 110

Complaints and suggestions

Yo can formulate any complaint and/or suggestion you filling out the downloadable sheet and send it to us.

Download
  • Complaints and suggestions PDF

Mail:
ESPUBLICO SERVICIOS PARA LA ADMINISTRACION SA (esFIRMA)
Calle Bari 39 (Edificio Binary Building)
50197 · Zaragoza
(+34) 976 300 110

e-Mail: info@esfirma.com