The digital certificate and the electronic signature: together, but not mixed up

Companies and freelancers who need to process procedures online can now do so quickly and securely, thanks to the benefits of the electronic signature... Or the digital certificate? 🤔

Although these concepts are closely related, a digital certificate is not the same as an electronic signature. Each one fulfils a different function within the process of electronic signature of documents.

Read on to find out the specificities of each concept and what the eIDAS regulation says about it.

🥖 To bread, bread and wine, wine! 🍷

See all software Electronic Signature

The digital certificate from A to Z

What is a digital certificate?

In general terms, a digital certificate refers to a set of electronic data that makes it possible to identify a person (natural or legal) and verify their identity over the internet. In other words, the digital certificate works in the same way as the DNI or NIE, when you intend to carry out a face-to-face procedure.

Thus, the digital certificate is necessary and useful for interacting with public authorities without having to go to their offices. These entities include:

• Social Security,
• The Tax Agency,
• The Bank of Spain,
• the courts, etc.

From the moment the Tax Agency made it compulsory to submit certain documents electronically, the digital certificate became a necessity for companies and freelancers.

Where to apply for a digital certificate?

Digital certificates are issued by an authorised Certification Authority (CA). This authority, since it acts as a third party or non-interested party, is in a position to guarantee:

• Compliance with the requirements for carrying out a procedure,
• the validity of the documents to be signed.

In Spain, the Ministry of Industry, Energy and Tourism has empowered different bodies to issue recognised certificates, including:

• The Fábrica Nacional de Moneda y Timbre (FNMT ),
• the Catalan Certification Agency (CATCert),
• the Higher Council of Chambers of Commerce (Camefirma),
• Notarial Certification Agency (ANCERT), among others.

Since the digital certificate contains electronically stored information, it must be able to be installed or stored in a medium that allows it to be read, such as a server on a computer, a USB memory, a cryptographic card or token, a hardware security module, etc.

What types of digital certificates are there?

A Certification Authority is able to issue different types of certificates. The FNMT, for example, through its SEDE Electrónica, issues the following types of digital certificates:

• Digital certificate for a natural person. This works in the same way as an electronic ID card, as it allows the person to identify themselves telematically in order to sign or encrypt electronic documents. There is no cost to acquire it from the FNMT and any citizen in possession of their DNI or NIE can apply for it.
• Digital representative certificate for:
  • Legal entity,
  • sole and joint administrators,
  • entities without legal personality.

In what situations should the digital certificate be used?

As we saw at the beginning, the digital certificate allows electronic documents to be signed before public entities that require it. In this sense, some of the procedures that can be carried out thanks to having this electronic certificate include:

• Obtaining the following from the Social Security:
  • Work life and contribution base reports,
  • withholding and income certificates,
  • documents accrediting entitlement to public health care.
• To make payments to the State Tax Administration Agency:
  • Payment of taxes,
  • consultation of files,
  • requesting claims.
• Applying to the State Public Employment Service:
  • Unemployment benefits,
  • modification of bank details.

The above are just some examples of the entities and procedures that can be simplified and speeded up, thanks to the implementation of the digital certificate.

What are digital signature and electronic signature?

Two other concepts that are useful to differentiate when talking about the digital certificate are electronic signature and digital signature. Let's see what they are:

• Electronic signature. It is a series of data in electronic form, which, when entered and associated with other data, allows the identification of a signatory person. The eIDAS (Electronic IDentification And Trust Services) Regulation recognises three different types of electronic signature:
  • Simple electronic signature,
  • advanced electronic signature,
  • qualified electronic signature.
• Digital signature. This is a cryptographic mechanism used to identify a signatory and guarantee the integrity of the documents he or she signs. In relation to the electronic signature, the digital signature forms part of the advanced and qualified electronic signatures, thanks to the fact that it is the mechanism that makes it possible to provide them with higher levels of security.

According to the above, we can infer that the concept of digital signature is contained in that of electronic signature; but not every electronic signature contains elements of digital signature.

See all software Electronic Signature

In short...

• The digital certificate is the means by which a person (natural or legal) can technically and legally guarantee his or her identity via the internet.
• The purpose of using a digital certificate is to be able to sign documents electronically that would otherwise be difficult to process or invalid.
• In Spain, this certificate can be issued by one of the Certification Authorities recognised for this purpose.
• An electronic signature consists of a sequence of characters that associates a signatory with a defined file. There are types of electronic signature that are based on electronic certificates and on the cryptographic mechanism provided by the digital signature to offer a maximum level of security and legal validity.
• In this sense, the qualified electronic signature is the one that offers the highest degree of security and legal guarantee, as it is based on digital certificates. This makes it equivalent to a handwritten signature.

Do you have any questions? Leave them in the comments!