Skip to main content

a.sign seal qualified registration process

Preconditions​

For a.sign seal qualified a PKCS#10 request for an authentication certificate is required.

This request can be generated with openssl using the following commands:

openssl req −nodes
            −new
            −newkey rsa:2048
            −sha256
            −out certificate_request.txt
            −keyout private_key.pem

A new private key file private_key.pem and a certificate request file certificate_request.txt will be generated. Pay attention to the file `private_key.pem*, it will be needed for every signature request and should be kept secret.

Order process​

To order an a.sign seal qualified certificate visit the website https://www.a-trust.at/Bestellungen/asignsealqualified/, fill out the form and provide the necessary documents. An A-Trust Support employee will contact you regarding further action to complete the registration process.

After completing the registration process, A-Trust will provide you with an a.sign seal qualified certificate and an authentication certificate.

Optional step, combining private key and authentication certificate​

If your client software needs a PKCS#12 file rather than seperate private key and certificate files, the following command creates the PKCS#12 file with the name authentication_certificate.p12.

openssl x509 −inform der
             −in SealAuthenticationCertificate.cer
             −out SealAuthenticationCertificate.pem
             
openssl pkcs12 −export
               −out authentication_certificate.p12
               −inkey private_key.pem
               −in SealAuthenticationCertificate.pem