New AOC Consortium certification hierarchy from October 15, 2025

Facebook Facebook Facebook Facebook Share

The new certification hierarchy of the AOC Consortium, approved by the Ministry of Economic Affairs and Digital Transformation on October 16, 2024, already has a confirmed date for entry into production, October 15, 2025.

This hierarchy is composed of a certification root and two SubCAs:

The new hierarchy will allow:

  • extend its validity until the year 2048
  • emit with elliptic curves
  • increase certificate security

The certificates issued by the new certification bodies must allow them to be made same uses than the current certificates and, therefore, the recognition processes necessary to ensure interoperability from the first day of issue.

You will also need to configure certificates of these two new CAs to your systems and applications. It is essential that enable compatibility with these user application certificates. Also Windows server and client systems through corporate domain trusts, JAVA-based applications at the client and server level, etc. 

On the other hand, as we mentioned above, we are managing theacceptance of new certificates at the level of systems based on Internet trusts (such as by the main validation services: PSIS and @FIRMA; by the platforms of the AOC Consortium, etc.) so that they are operational when the new certification entities start the emission activity.

Furthermore, if you use any of your own or third-party applications (such as applications from a Ministry or other AGE entities) that must accept the new certificates, please let us know through the User Support Center and we will try to help you manage the functionality tests.

 For any question in this regard you can contact ours Customer Service Center.

Published in

Subscribe to the AOC newsletter

Receive weekly doses of vitamins to move towards a digital government

Related entries

See all →
  • Identity and digital signature
  • ·
  • Integration

Change in the treatment of the state parameter in the VALId service (pre-production)

In order to comply with the recommendations of the OAuth 2.0 standard, and guarantee the compatibility of the VALId service with integrations with Moodle, given the possibility...
  • Digital identity
  • ·
  • Identity and digital signature

Pre-register for the 2026-27 school year withidCAT Phone

Pre-registration for the 2026-27 school year for early childhood, primary, secondary and high school education, which must be done online, can be submitted with theidCATMobile, the identification mechanism...
  • Digital certification
  • ·
  • Registration entities idCAT and T-CAT
  • ·
  • Digital identity
  • ·
  • Identity and digital signature

Start of the 2026 Audit of the Digital Certification Service (SCD)

Subscribers, ER T-CAT and ER idCAT The AOC Consortium has initiated the audit process corresponding to the certificates issued in 2025 by the Digital Certification Service...