Digital certificates allow us to relate electronically securely because they prove our identity. Its use is equivalent to a handwritten signature.
The use of digital certificates has become widespread among citizens in recent years, thus increasing the likelihood of identity theft.
As the holder of your digital certificate, you are responsible for its use. It must be remembered that a digital certificate is personal and non-transferable, it is your "I" on the network and it is important that you follow good practices to avoid fraudulent use or impersonation of your identity.
Recommendations and best practices
1. Obtaining the certificate:
It is very important that you select a trusted digital service provider in accordance with the eIDAS Regulation because it is the only one that guarantees security and data protection standards.
The AOC Consortium is a reliable supplier recognized by the Ministry for Digital Transformation and Public Service. The AOC issues, among others, theidCAT Certificate for the citizens.
You have more information at:
2. Download and install theidCAT Certificate
- Before installing your idCAT Certified, check that your computer's operating system is up to date (this is a way to avoid possible security holes).
- Do not download or install it in a newsroom or other place with shared computers.
- Protects theidCAT Certified with a user PIN enabling secure protection of the private key during installation.
- When you finish the installation, save the file to your idCAT Certificate in a safe place. Avoid saving it on a shared computer, USB or hard drive without a password.
- Install it on your computer in your individual password-protected session.
- Delete the certificate file if you change computers.
You have more information at:
3. Custody and use of theidCAT Certificate
- We recommend that you set an alert (by mail or mobile phone) to renew your certificate. It expires after 4 years from its issue.
- Don't leave yours. idCAT Certificate to a third party. Remember, you are responsible for the use made of it.
- If you detect that someone is misusing your certificate, revoke it as quickly as possible.
You have more information at:
