Certum Code Signing - Required Documents
Complete guide to the verification documents required for Certum Code Signing certificates. Learn what you need for Open Source, Standard, and EV Code Signing.
Table of Contents
Certum Code Signing certificates require identity verification to ensure that only legitimate developers can sign software. The documents required vary depending on the type of certificate you're purchasing. This guide covers all three types: Open Source, Standard, and EV Code Signing.
Before You Begin
Make sure you have a valid identity document ready. For detailed information about code signing certificates in general, see our Code Signing Certificates Guide.
Open Source Code Signing
Open Source Code Signing certificates are designed for individual developers working on open-source projects. These certificates are available exclusively to individuals and display "Open Source Developer" in the publisher name.
Identity Verification (Choose One)
Using government ID databases
In-person with authorized partner
Notarized identity documents
High-resolution photos with ID
Already have a Qualified Certificate? You can reuse it for identity verification.
Additional Requirements
- Utility Bill
Recent utility bill or bank statement confirming your address
- Open Source Project URL
Link to your open-source project (GitHub, GitLab, SourceForge, etc.)
Important Restrictions
- Available only to individuals, not organizations
- Certificate cannot contain domain names or IP addresses
- Organization field will be set to "Open Source Developer"
- Cannot be used for commercial software distribution
Commercial Use Warning
If Certum determines that the certificate is being used to sign software distributed commercially, the certificate will be revoked. Open Source Code Signing certificates are strictly for non-commercial open-source projects.
Standard Code Signing
Standard Code Signing certificates are available for both individuals and organizations. The verification requirements differ based on whether you're applying as an individual or on behalf of a company.
For Individuals
Identity Verification (Choose One)
Or reuse an existing Qualified Certificate
Additional Requirements
Recent document confirming your address
For Organizations
Identity Verification (Choose One)
Required Documents
- Power of Attorney
Required only if the person applying for the certificate is not authorized to represent the institution on their own (e.g., on the basis of an excerpt from the National Court Register)
- Company Registration Documents
Required when the company is not listed in the registry
EV Code Signing
Extended Validation (EV) Code Signing certificates provide the highest level of trust and security. These certificates are only available to organizations and require more thorough verification. My-SSL sells this tier as an EV code signing certificate with the key held in Certum SimplySign, and the organization checks below are the ones Certum runs on that order.
Identity Verification (Choose One)
Using government ID databases
In-person verification
Notarized documents
High-resolution photos with ID
Or reuse an existing Qualified Certificate for identity verification.
Required Documents
- Power of Attorney
Required only if the person applying for the certificate is not authorized to represent the institution on their own (e.g., on the basis of an excerpt from the National Court Register)
- Utility Bill (Organization)
Recent utility bill confirming the organization's physical address
- Company Registration Documents
Required when the company is not listed in the registry
Important EV Requirements
- EV Code Signing is available only for organizations, not individuals
- Certificate cannot contain domain names or IP addresses
- Organization must have a physical office address that can be verified
Document Validity
| Document Type | Validity Period |
|---|---|
| Public Register Documents | Maximum 13 months old |
| Authorization Documents (Power of Attorney) | Valid for 13 months from certificate issue date |
| Identity Documents (Passport, ID Card) | Must be valid on certificate issue date |
How to Submit Documents
Via My-SSL Account
Upload documents directly through your My-SSL account dashboard. This is the fastest and most secure method.
Via Email
Send documents to Certum's verification team via email. Include your order number in the subject line.
Email: [email protected]
Note: If sending password-protected files, provide the password in a separate email.
Via Post
Mail physical documents to Certum's offices:
CertumBajeczna 13
71-838 Szczecin
Poland
Document Templates
Certum provides official templates for the required documents:
Related Resources
Frequently Asked Questions
Frequently Asked Questions
Quick answers to related questions.
What identity verification methods are available?
Certum offers four identity verification methods: Automatic verification (using government ID databases), Registration Point verification (in-person with authorized partner), Notarial verification (notarized documents), and Photos verification (high-resolution photos of identity document held by applicant).
Can I reuse my existing Qualified Certificate for identity verification?
Yes! If you already have a valid Qualified Certificate issued by Certum or another CA, you can use it to verify your identity for code signing certificates. This can significantly speed up the verification process.
How long are the verification documents valid?
Documents from public registers must be no older than 13 months. Authorization documents are valid for 13 months from certificate issue date. Identity documents (passport, ID card) must be valid on the certificate issue date.
Can individuals apply for EV Code Signing certificates?
No, EV Code Signing certificates are only available for organizations. Additionally, the organization must have a physical office address that can be verified.
What is the 'Open Source Developer' label on Open Source Code Signing certificates?
Open Source Code Signing certificates display 'Open Source Developer, <Your Name>' as the publisher instead of your name alone. This identifies the code as open-source software.
How do I submit the required documents?
You can submit documents through your My-SSL account (preferred method), via email to Certum's verification team, or by post to Certum's offices. Digital submissions are processed faster.