SSL Certificates

What kind of documents are necessary to obtain Premium EV SSL certificate?

CERTUM verifies applicants in accordance with Guidelines For The Issuance And Management Of Extended Validation Certificates requirements. Verification process requires domain access control and additional vetting documents used to perform the identification of the applicant. Additionally CERTUM must verify a main applicant’s telephone number by calling it and obtaining an affirmative response sufficient to enable a reasonable person to conclude that the applicant is reachable by telephone at the number dialed.

CERTUM automatically verifies the identity of the subscriber. Verification process requires confirmation of access to the certified domain and email address. Please log in to your account on sklep.unizeto.pl, go to Activates Certificates tab and continue the process:

1. domain access control - please verify domain by placing an entry in the “head” section or enter the appropriate “html” file on the main page of the certified domain.
2. email access control – please confirm (just by click on the link) the control message send you to the one of the following email address at your domain: admin@yourdomain.com, administrator@ yourdomain.com, webmaster@ yourdomain.com, postmaster@ yourdomain.com, hostmaster@ yourdomain.com

In order to verify the data contained in the request for certificate issuance, please provide copies of the following documents:

For Private Organizations and Governments Entities:

• copy of ID document of a person responsible for the certification procedure (ID card, passport, residence permit, student’s ID card, social insurance ID, etc.) to check the data given in a form filled in on a website
• copy of ID document of a person responsible for the certification procedure (ID card, passport, residence permit, student’s ID card, social insurance ID, etc.) to check the data given in a form filled in on a website
• document to assure the person responsible for certification procedure is an employee or representative of company/institution
• document to verify company/institution legal existence authenticity, e.g.
  • DUNS number (Dun and Bradstreet)
  • Articles of Incorporation
  • Business License
  • Doing Business As (DBA) registration
  • Partnership documentation
  • Factitious Name Statement
  • Assumed Name Statement
  • Sales Permit

All delivered documents must be signed by official representative. Delivered documents must be in English or must be translated into English by sworn translator.

For Business Entities (e.g. general partnerships, unincorporated associations, and sole proprietorships):

• copy of ID document of a person responsible for the certification procedure (ID card, passport, residence permit, student’s ID card, social insurance ID, etc.) to check the data given in a form filled in on a website
• copy of ID document of a person responsible for the certification procedure (ID card, passport, residence permit, student’s ID card, social insurance ID, etc.) to check the data given in a form filled in on a website
• document to assure the person responsible for certification procedure is an employee or representative of company/institution
• document to verify company/institution authenticity, e.g.
  • DUNS number (Dun and Bradstreet)
  • Articles of Incorporation or Registration
  • Business License
  • Doing Business As (DBA) registration
  • Partnership documentation
  • Factitious Name Statement
  • Assumed Name Statement
  • Seller's Permit
  • Occupational License
  • Sales Permit

All delivered documents must be signed by official representative. Delivered documents must be in English or must be translated into English by sworn translator.

Attention!

The authorized representatives associated with the Business Entity may be required to be validated in a face-to-face setting conducted before either the Notary (or equivalent in the Applicant’s jurisdiction), a Lawyer or Accountant .

CERTUM reserves the right to request such verification as described above.

All collected documents should be sent  to CERTUM in one of the following ways:

1. by fax: 004891 4257 422
2. via e-mail: info@certum.pl
3. per post:
   
   CERTUM PCC
   ul. Bajeczna 13
   71-838 Szczecin, Poland

What kind of documents are necessary to obtain Commercial SSL certificate?

CERTUM automatically verifies the identity of the subscriber. Verification requires confirmation of access to the certified domain and email address. Subscriber verifies certified domain by placing an entry in the “head” section or enter the appropriate “html” file on the main page of the domain and confirms (just by click on the link) the control message sent by CERTUM to the one of the following email address at your domain: admin@yourdomain.com, administrator@ yourdomain.com, webmaster@ yourdomain.com, postmaster@ yourdomain.com, hostmaster@ yourdomain.com

CERTUM reserves the right to request additional documents to be sent, if it is required by the particular order.

What kind of documents are necessary to obtain Commercial MultiDomian SSL certificate?

The certificate confirms the reliability of secured website. Commercial MultiDomain SSL certificate is mainly used in case the server transmits personal data, identification numbers or confidential information. The certificate includes 4, 6 or 10 domain names and can be used for the secure access to a server since it provides the encrypted connection between the customer’s software and server.

Example usage:

Commercial MultiDomain SSL server certificate allows to secure 4, 6 or 10 domain names e.g.:

• your-domain.com
• www. your-domain.com
• mail.your-domain.com
• ftp. your-domain.com
• your-second-domain.com
• www.your-second-domain.com
• mail.your-second-domain.com
• ftp.your-second-domain.com
  etc.

Attention: Commercial MultiDomain SSL certificate does not include the www. hostname as default extension

Verification examples:

Attention: Commercial MultiDomain SSL certificate does not include the www. hostname as default extension.

Verification requirements

CERTUM automatically verifies the identity of the subscriber. Verification process requires confirmation of access to the certified domain and email address. Subscriber verifies certified domain by placing an entry in the “head” section or enter the appropriate “html” file on the main page of the domain and confirms (just by click on the link) the control message sent by CERTUM to the one of the following email address at your domain: admin@yourdomain.com, administrator@ yourdomain.com, webmaster@ yourdomain.com, postmaster@ yourdomain.com, hostmaster@ yourdomain.com

CERTUM reserves the right to request additional documents to be sent, if it is required by the particular order.

What kind of documents are necessary to obtain Trusted SSL/Trusted Wildcard SSL certificate?

In order to issue Trusted SSL or Trusted Wildcard SSL certificate CERTUM requires to verify the additional data contained in the request for certificate issuance. Please provide copies of the following documents:

For private persons:

• copy of ID document of a person responsible for the certification procedure (ID card, passport, residence permit, student’s ID card, social insurance ID, etc.) to check the data given in a form filled in on a website

For company / organisation representatives:

• copy of ID document of a person responsible for the certification procedure (ID card, passport, residence permit, student’s ID card, social insurance ID, etc.) to check the data given in a form filled in on a website
• document to assure the person responsible for certification procedure is an employee or representative of company/institution
• document to verify company/institution authenticity, e.g.:
  • DUNS number (Dun and Bradstreet)
  • Articles of Incorporation
  • Business License
  • Doing Business As (DBA) registration
  • Partnership documentation
  • Sole Proprietorship documentation
  • Factitious Name Statement
  • Assumed Name Statement
  • Seller’s Permit
  • Occupational License
  • Sales Permit

All collected documents should be sent within 7 days to CERTUM in one of the following ways:

1. by fax: 004891 4257 422
2. via e-mail: info@certum.pl
3. per post:
   
   CERTUM PCC
   ul. Bajeczna 13
   71-838 Szczecin, Poland
   

 

Why is the Install Certificate button inactive in the browser during certificate installation?

Some browsers (e.g. Firefox) do not indicate that a certificate has been installed. The notice should be visible in the security setup.
In case of Mozilla Firefox, it can be checked in the menu:
Tools -> Options -> Advanced -> Certificate manager -> Your certificates 

How long does it take to obtain an non-qualified certificate?

Unqualified commercial certificates are issued  upon:

• filling-in  of a certification form
• handing over documents confirming the data included in the form

The time one has to wait for a certificate depends on how fast CERTUM receives the documents. Certificates are issued within minutes.

How to renew a certificate?

One has to pay for the renewal of a certificate, but it is cheaper than the first issue.
If there are no changes in the data, no documents are required.

Is it necessary to send again documents while renewing a certificate?

No, If there are no changes in the data. You may receive a standard autoresponder asking you to send these documents, but please ignore it.

What if while applying/renewing a certificate, the wrong type of it has been given?

Do not send the documents – a certificate will not be issued and you will not have to pay for it.

How to install a certificate exported earlier?

If you have a backup copy of the certificate (*.pfx file), it can be installed again in the software in use. In the certificate manager select Import and choose a file with the backup copy. In case of Internet Explorer browser, certificate manager can be found in the Tools menu -> Internet Options ...-> Content -> Certificates -> Personal. In case of Firefox, in the Tools menu -> Options -> Advanced -> Certificate manager -> Your certificates) choose Import.

What if I change my address?

There are no information concerning one’s place of residence in a certificate. It does not require changing then. New data shall be reported in our database – it can be changed by clicking on Certificate service/Data change at:
http://www.certum.eu/

What to do in case of new identity cards, driving licenses, passports or military service IDs?

Data in an ID card/a passport/a driving license/a military service ID are not contained in a certificate. Any changes of these documents do nor affect the contents of a certificate. A new document has to be presented to CERTUM while applying for a new certificate, while renewing the existing one or in case of certificate data modification (e.g. change of name).

How to change a certificate e-mail?

It is impossible to change it. It requires a renewal of the certificate (a renewal fee will be charged).

Is it possible to renew an unqualified certificate with a different e-mail address?

What happens with expired certificates?

Once a certificate expires, it cannot be used for affixing electronic signatures. It can only be used for message decryption and verification. You have to obtain a new certificate to be able to affix signatures.

How to install a certificate in Mozilla Firefox?

In some browsers (e.g. in Firefox) a certificate is correctly installed after choosing Install certificate options on the recommended websites. The user does not receive a confirmation of a successful installation process completion. A certificate’s installation can be checked in the Tools menu -> Options -> Advanced -> Certificate manager -> Your certificates.

Users who obtain certificates in the form of a PKCS#12 package (*.pfx or *.p12 formats) on the basis of personal agreements with CERTUM have to install them in their systems. The certificates from the received floppy discs or e-mails have to be saved on a disc (on the desktop) and copied to an appropriate program.

Users who exported a key from their work station in the form of a PKCS#12 package (*.pfx OR *.p12 formats) can install them in a different environment (in the same way as described above).

In case of Mozilla Firefox, a certificate is imported from a pfx file in the following way:

• click Tools menu -> Options -> Advanced -> Certificate manager -> Your certificates
• choose Import option
• indicate the location of your file and its name
• enter password (set when exporting the certificate)
  

What kind of guarantees does the certificate drawer offer?

Financial guarantee whose amount depends on the type of a certificate.
The guarantee applies to situations in which, due to the drawers’ fault:

• a certificate is issued with wrong data
• a certificate is wrongly revoked
• confidential data is disclosed
• a certificate key is broken
• other certificates are issued for the same key

How to install the same certificate on different computers?

You have to export the certificate with a private key (to pfx file) – such a file can be copied to a different software. Export / import is done by means of certificate manager (Tools menu -> Options -> Advanced –in case of Firefox, and Tools -> Internet options -> Contents -> Certificates – in case of Internet Explorer.

Is CERTUM an Internet Explorer trusted Certification Authority?

Yes. CERTUM certificates are available in IE for XP and 2003 through CTL service (automatic certificate storage update at a client’s) or by WindowsUpdate for lower systems (W9x, ME, 2K).

What if a renewed certificate is of a wrong type, or the expiry date is incorrect?

It means that a wrong type of certificate has been given in the application form. Please create a new certificate.

I have received a security warning saying that a message has been altered by an incompetent person. What shall I do?

Such a modification can be the result of having some information attached to an e-mail (e.g. advertisements), or changes made by antivirus / antispam programs or a mail server (change of encryption, end of line signs, etc.).
It can also mean that somebody has changed it against your will.
It would be advisable to check the setups of antispam or antivirus programs. Turn them off for a moment, send the message again and see if the mail program still indicates the modification. If switching off the mentioned programs changes the situation, please contact the provider.