SSL Certificates

What kind of documents are necessary to obtain Commercial SSL certificate?

Commercial SSL – no documents required.

What kind of documents are necessary to obtain Enterprise SSL and Wildcard Domain certificate?

Wildcard Domain and Enterprise SSL – documents required only if requested by CERTUM:

• document to assure the person responsible for certification procedure is an employee or representative of company/institution
• document to verify company/institution authenticity, e.g.:
  • DUNS number (Dun and Bradstreet)
  • Articles of Incorporation
  • Business License
  • Doing Business As (DBA) registration
  • Partnership documentation
  • Sole Proprietorship documentation
  • Factitious Name Statement
  • Assumed Name Statement
  • Seller’s Permit
  • Occupational License
  • Sales Permit

What kind of documents are necessary to obtainTrusted SSL certificate?

Trusted SSL – required documents:

• copy of ID document of a person responsible for the certification procedure (ID card, passport, residence permit, student’s ID card, social insurance ID, etc.) to check the data given in a form filled in on a website
• document to assure the person responsible for certification procedure is an employee or representative of company/institution
• document to verify company/institution authenticity, e.g.:
  • DUNS number (Dun and Bradstreet)
  • Articles of Incorporation
  • Business License
  • Doing Business As (DBA) registration
  • Partnership documentation
  • Sole Proprietorship documentation
  • Factitious Name Statement
  • Assumed Name Statement
  • Seller’s Permit
  • Occupational License
  • Sales Permit
• if certificate should be issued for other institution then original domain owner - copy of the document to assure right to use the domain

All documents delivered by post must be officially confirmed (by notary, legal adviser, court or government institution) and signed by official representative. All delivered documents must be signed by official representative.

How is Enterprise SSL and Wildcard Domain verification proceeded?

• copy of ID document of a person responsible for the certification procedure (ID card, passport, residence permit, student’s ID card, social insurance ID, etc.) to check the data given in a form filled in on a website
• document to assure the person responsible for certification procedure is an employee or representative of company/institution
• document to verify company/institution authenticity, e.g.:
  • DUNS number (Dun and Bradstreet)
  • Articles of Incorporation
  • Business License
  • Doing Business As (DBA) registration
  • Partnership documentation
  • Sole Proprietorship documentation
  • Factitious Name Statement
  • Assumed Name Statement
  • Seller’s Permit
  • Occupational License
  • Sales Permit
• if certificate should be issued for other institution then original domain owner - copy of the document to assure right to use the domain

Why is the Install Certificate button inactive in the browser during certificate installation?

Some browsers (e.g. Firefox) do not indicate that a certificate has been installed. The notice should be visible in the security setup.
In case of Mozilla Firefox, it can be checked in the menu:
Tools -> Options -> Advanced -> Certificate manager -> Your certificates 

How long does it take to obtain an non-qualified certificate?

Unqualified commercial certificates are issued  upon:

• filling-in  of a certification form
• handing over documents confirming the data included in the form

The time one has to wait for a certificate depends on how fast CERTUM receives the documents. Certificates are issued within minutes.

How to hand over necessary documents?

It depends on the class of an unqualified certificate to be issued?

• by fax (Wildcard Domain, Enterprise SSL)
• by e-mail: info@certum.eu (Wildcard Domain, Enterprise SSL)
• by mail (Wildcard Domain, Enterprise SSL)
• by registered letter – notarized copies (Trusted SSL)
• personally (Trusted SSL, Wildcard Domain, Enterprise SSL)

How to renew a certificate?

One has to pay for the renewal of a certificate, but it is cheaper than the first issue.
If there are no changes in the data, no documents are required.

Is it necessary to send again documents while renewing a certificate?

No, If there are no changes in the data. You may receive a standard autoresponder asking you to send these documents, but please ignore it.

What if while applying/renewing a certificate, the wrong type of it has been given?

Do not send the documents – a certificate will not be issued and you will not have to pay for it.

How to install a certificate exported earlier?

If you have a backup copy of the certificate (*.pfx file), it can be installed again in the software in use. In the certificate manager select Import and choose a file with the backup copy. In case of Internet Explorer browser, certificate manager can be found in the Tools menu -> Internet Options ...-> Content -> Certificates -> Personal. In case of Firefox, in the Tools menu -> Options -> Advanced -> Certificate manager -> Your certificates) choose Import.

What if I change my address?

There are no information concerning one’s place of residence in a certificate. It does not require changing then. New data shall be reported in our database – it can be changed by clicking on Certificate service/Data change at:
http://www.certum.eu/

What to do in case of new identity cards, driving licenses, passports or military service IDs?

Data in an ID card/a passport/a driving license/a military service ID are not contained in a certificate. Any changes of these documents do nor affect the contents of a certificate. A new document has to be presented to CERTUM while applying for a new certificate, while renewing the existing one or in case of certificate data modification (e.g. change of name).

How to change a certificate e-mail?

It is impossible to change it. It requires a renewal of the certificate (a renewal fee will be charged).

Is it possible to renew an unqualified certificate with a different e-mail address?

What happens with expired certificates?

Once a certificate expires, it cannot be used for affixing electronic signatures. It can only be used for message decryption and verification. You have to obtain a new certificate to be able to affix signatures.

How to install a certificate in Mozilla Firefox?

In some browsers (e.g. in Firefox) a certificate is correctly installed after choosing Install certificate options on the recommended websites. The user does not receive a confirmation of a successful installation process completion. A certificate’s installation can be checked in the Tools menu -> Options -> Advanced -> Certificate manager -> Your certificates.

Users who obtain certificates in the form of a PKCS#12 package (*.pfx or *.p12 formats) on the basis of personal agreements with CERTUM have to install them in their systems. The certificates from the received floppy discs or e-mails have to be saved on a disc (on the desktop) and copied to an appropriate program.

Users who exported a key from their work station in the form of a PKCS#12 package (*.pfx OR *.p12 formats) can install them in a different environment (in the same way as described above).

In case of Mozilla Firefox, a certificate is imported from a pfx file in the following way:

• click Tools menu -> Options -> Advanced -> Certificate manager -> Your certificates
• choose Import option
• indicate the location of your file and its name
• enter password (set when exporting the certificate)
  

What kind of guarantees does the certificate drawer offer?

Financial guarantee whose amount depends on the type of a certificate.
The guarantee applies to situations in which, due to the drawers’ fault:

• a certificate is issued with wrong data
• a certificate is wrongly revoked
• confidential data is disclosed
• a certificate key is broken
• other certificates are issued for the same key

How to install the same certificate on different computers?

You have to export the certificate with a private key (to pfx file) – such a file can be copied to a different software. Export / import is done by means of certificate manager (Tools menu -> Options -> Advanced –in case of Firefox, and Tools -> Internet options -> Contents -> Certificates – in case of Internet Explorer.

Is CERTUM an Internet Explorer trusted Certification Authority?

Yes. CERTUM certificates are available in IE for XP and 2003 through CTL service (automatic certificate storage update at a client’s) or by WindowsUpdate for lower systems (W9x, ME, 2K).

What if a renewed certificate is of a wrong type, or the expiry date is incorrect?

It means that a wrong type of certificate has been given in the application form. Please create a new certificate.

I have received a security warning saying that a message has been altered by an incompetent person. What shall I do?

Such a modification can be the result of having some information attached to an e-mail (e.g. advertisements), or changes made by antivirus / antispam programs or a mail server (change of encryption, end of line signs, etc.).
It can also mean that somebody has changed it against your will.
It would be advisable to check the setups of antispam or antivirus programs. Turn them off for a moment, send the message again and see if the mail program still indicates the modification. If switching off the mentioned programs changes the situation, please contact the provider.