Required documents

The verification process and the documents required when purchasing:

  • The EV Code Signing certificate

    We do not issue EV Code Signing certificates to natural persons!

    To verify the Subscriber’s identity CERTUM requires the submission of the following documents:

    1. identity document (ID card, passport, residency card, driving license)- in Latin characters – of the person placing the order. The copy should depict the entire document (both sides),

      or one of the following:

      • notarial identity confirmation – a document in English language or a document translated into English by the sworn translator
      • identity confirmation at CERTUM’s Registration Point or Identity Confirmation Point
      • possession of the qualified certificate issued by CERTUM

      and

    2. a utility bill (e.g. water, electric power, natural gas, etc.), bank statement, credit card statement, government‐issued tax document belonging to the organization,
    3. company registration documents – only in the case where the company doesn’t possess the DUNS number (it’s impossible to verify the company by using this number or by using national registration number),
    4. authorisation or power of attorney confirming connection of the person submitting the order with the organisation – only when the applicant doesn’t appear in the relevant registry as a person authorized to represent the company

    In appropriate cases the CERTUM Team may ask for additional documents necessary for proper verification.

    Please note:

    We do not issue EV Code Signing certificates to natural persons,
    EV Code Signing certificates must not contain a Domain Name or IP Address

    All required documents should be sent to CERTUM PCC in one of the following ways:

    • scans of documents by e-mail to: ccp@certum.pl (recommended)
    • by fax to: +48 (0) 91 4257 422
    • by post to:
      CERTUM PCC
      ul. Bajeczna 13
      71-838 Szczecin

    In appropriate cases the CERTUM Team may ask for additional documents necessary for proper verification

    Phone verification

    The contact phone number used for the phone verification of the certified organization has to match the number found in qualified sources of information such as public business and organization registers.

    (e.g. DUNS, www.yellopages.com, www.numberway.com, or other public databases which are qualified as reliable and credible). In case the phone number mismatch, the verification will be carried out using documents.

  • The Standard Code Signing certificate

    To verify the Subscriber’s identity CERTUM requires the submission of the following documents.

    Verification of a private individual applying for the certificate on their own behalf:
    1. identity document (ID card, passport, residency card, driving license) – in Latin characters – of the person placing the order. The copy should depict the entire document (both sides),

      or one of the following:

      • notarial identity confirmation – a document in English language or a document translated into English by the sworn translator
      • identity confirmation at CERTUM’s Registration Point or Identity Confirmation Point
      • possession of the qualified certificate issued by CERTUM

      and

    2. a utility bill (e.g. water, electric power, natural gas, etc.), bank statement, credit card statement, government‐issued tax document belonging to the Subscriber
    Verification of a person applying for the certificate on behalf of the organization:
    1. identity document (ID card, passport, residency card, driving license)- in Latin characters – of the person placing the order. The copy should depict the entire document (both sides),

      or one of the following:

      • notarial identity confirmation – a document in English language or a document translated into English by the sworn translator,
      • identity confirmation at CERTUM’s Registration Point or Identity Confirmation Point,
      • possession of the qualified certificate issued by CERTUM

      and

    2. a utility bill (e.g. water, electric power, natural gas, etc.), bank statement, credit card statement, government‐issued tax document belonging to the organization,
    3. company registration documents – only in the case where the company doesn’t possess the DUNS number (it’s impossible to verify the company by using this number or by using national registration number),
    4. authorisation or power of attorney confirming connection of the person submitting the order with the organization – only when the applicant doesn’t appear in the relevant registry as a person authorized to represent the company

    E-mail address access verification – click the verification link sent after the activation of the certificate.

    In appropriate cases the CERTUM Team may ask for additional documents necessary for proper verification

    Please note:

    Standard Code Signing certificates must not contain a Domain Name or IP Address

    All the collected documents should be sent to CERTUM PCC using one of the ways given below:

    • via e-mail (recommended) as a scanned copy to: ccp@certum.pl
    • by fax to: +48 (0) 91 4257 422
    • by post to:
      CERTUM PCC
      ul. Bajeczna 13
      71-838 Szczecin

    In justified cases the CERTUM PCC team may request for additional documents required for correct verification to be sent.

    Phone verification (does not apply to natural persons)

    The contact phone number used for the phone verification of the certified organization has to match the number found in qualified sources of information such as public business and organization registers.

    (e.g. DUNS, www.yellopages.com, www.numberway.com, or other public databases which are qualified as reliable and credible). In case the phone number mismatch, the verification will be carried out using documents.

  • The Open Source Code Signing certificate

    Open Source Code Signing Certificates are issued only to natural persons!

    Note for the Clients who in the Open Source Code Signing certificate request chose the ‘Telephone Verification’ option:

    We wish to inform you that since 13.03.2017 this option is no longer available for this type of certificates, therefore please send us the following documents.

    To verify the Subscriber’s identity CERTUM requires the submission of the following documents.
    1. identity document (ID card, passport, residency card, driver’s license) – in Latin characters – of the person placing the order. The copy should depict the entire document (both sides),

      or one of the following:

      • notarial identity confirmation – a document in English language or a document translated into English by the sworn translator,
      • identity confirmation at CERTUM’s Registration Point or Identity Confirmation Point,
      • possession of the qualified certificate issued by CERTUM

      and

    2. a utility bill (e.g. water, electric power, natural gas, etc.), bank statement, credit card statement, government‐issued tax document belonging to the Subscriber
    3. internet address of the project.
    Important:

    The project has to be publically accessible and unambiguously connected with the Subscriber. If CERTUM will not be able to identify the project on the basis of generally available information, the certification application will be rejected.

    In appropriate cases the CERTUM Team may ask for additional documents necessary for proper verification

    Please note:

    Open Source Code Signing certificates must not contain a Domain Name or IP Address The Applicant must at the same time be the Subscriber of the certificate Open Source Code Signing Certificates are issued only to natural persons

    All the collected documents should be sent to CERTUM PCC using one of the ways given below:

    • via e-mail (recommended) as a scanned copy to: ccp@certum.pl
    • by fax to: +48 (0) 91 4257 422
    • by post to:
      CERTUM PCC
      ul. Bajeczna 13
      71-838 Szczecin

 


Please note!

Validity of the documents which are the basis for verification of certification request:

  • For new applications of certification and certificate renewals the documents and public registry information must not be older than 13 months,
  • Documents of authentication, regardless of their original validity, remain valid for 13 months from their issue date,
  • Documents of identification must be valid on the day of certification.

For documents from public registries, we also accept information obtained online from reliable, credible sources (e.g. government websites). In that case we require a direct link to this information to be sent to ccp@certum.pl.

Certum issues Code Signing Certificates according to requirements set out in the Minimum Requirements for the Issuance and Management of Publicly-Trusted Code Signing Certificates and Certification practice statement.

Dear User

Pursuant to Article 13(1)(2) of the General Data Protection Regulation of 27 April 2016 (hereinafter referred to as the “Regulation”), please be informed that:

  • The administrator of your personal data is Asseco Data Systems S.A. with registered office in Gdynia, ul. Podolska 21, 81-321 Gdynia;
  • The Data Protection Officer at Asseco Data Systems S.A. can be contacted at e-mail address: IOD@assecods.pl, tel. +48 42 675 63 60.
  • Your personal data will be processed for the purpose of:
    1. preparing a response to your enquiry, pursuant to Art. 6(1)(b) of the Regulation.
    2. sending marketing information by means of electronic communication and automation software on the basis of the Act on the provision of services by electronic means of 18 July 2002 and in connection with Article 172(1) of the Act “Telecommunications Law” of 16 July 2004 (alternative consent), pursuant to Article 6(1)(a) of the Regulation.
  • Your personal data will be stored for the time necessary to prepare a response to your enquiry and to respond it until you withdraw your consent for receipt of marketing information.
  • You have the right to access the contents of your data and the right to correct it, to have it removed/forgotten, to restrict its processing, to transfer it, to make an objection, to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of your consent prior to its withdrawal. All the above rights may be exercised through an application submitted at https://www.daneosobowe.assecods.pl
  • You have the right to lodge a complaint with the Regulator if you consider that the processing of your personal data is in breach of provisions of the Regulation.
  • Provision of personal data by you is necessary for the execution of your enquiry. You must provide it, and the consequence of not providing personal data will be that you will not be able to receive a response to your enquiry.
  • Your data will be processed automatically, also in the form of profiling. Automated decision making will be based on the principles of processing personal data supplied at the time of creating an Account and any supplemented data stored in it as well as data concerning activity on the Websites (in accordance with the Privacy Policy of Asseco Data Systems S.A. website Privacy Policy) and activity related to our communication with you through e-mail, and such processing will result in adjustment of marketing information concerning our products and services that may be of interest to you.
Privacy policy