⚠️ Important notice
This is not a government website. Certificado Digital Global is a Registration Authority accredited to the Certisign network, a brand of Kindness in Business Consulting Ltd (UK Company No. 10386293), serving clients from London. Issuance depends on identity validation, documentation and ICP-Brasil rules. Do not send CPF, passport or sensitive documents via WhatsApp or the initial form.
O que é
Once you understand how the digital certificate works for Brazilians abroad, you stop asking “but will it really count, with me being here?” — because you see that distance doesn't enter any step of the mechanism. Thi…
Para quem
ITI → Certisign → RA chain · Private key held only by the holder
Como resolve
Public verification on ITI's validator · Identity validation by video
Limite
Não é site do governo. Emissão sujeita a validação de identidade, documentação e normas da ICP-Brasil.
The three parts of the mechanism
The key pair
At issuance, your device generates two mathematically linked keys: the private one, which never leaves where it was created, and the public one, which goes inside the certificate. What one does, only the other undoes.
The certificate
A file signed by AC Certisign that binds your public key to your name and CPF (or CNPJ). It's the CA's statement that the RA checked your identity.
The chain of trust
ITI, as the Root CA, signs Certisign's certificate; Certisign signs yours. Whoever trusts the root trusts everything it chains — and every Brazilian system trusts the root.
What happens at each click when you sign
At none of these steps are the IP address, the country or the time zone assessed. The check is mathematical and trust comes from the chain, not from geography.
Scenario: the auditor who wanted to see inside
Real case
Illustrative scenario. A Brazilian internal auditor working in Montevideo needs to sign, as a partner, the minutes of a quotaholders' meeting of a company in Porto Alegre. Before issuing the e-CPF, he wants to understand how a bank in Brazil will trust a signature made in Uruguay. In the WhatsApp conversation he follows the reasoning: the private key is born on his laptop during issuance; the certificate Certisign signs states that the RA checked his passport live; when he signs the minutes, the bank will recompute the hash, validate the chain up to ITI and check the revocation list. Satisfied with the logic, he does the video validation, signs the minutes and sends the bank the ITI validator link along with the PDF. — Understanding the mechanism removed the doubt about the place
Why Brazilian systems accept it from any country
What does e-CAC check?
Whether the certificate presented at login was issued by an ICP-Brasil CA, whether it's within validity and whether it's absent from the revocation list. With all three satisfied, access is granted — from São Paulo or from Montevideo.
And the notary, on e-Notariado?
The platform validates the certificate the same way and the notary checks your identity on the video call. The act is drawn up in Brazil; your participation is remote.
And the commercial registry?
It receives the signed PDF, recomputes the hash and validates the chain. Partners in different countries sign the same file in sequence.
Why doesn't an eIDAS or BankID certificate work?
Because their chain ends at a European root, not at ITI. The maths is the same; the trust isn't. Brazilian systems only climb the chain up to the ICP-Brasil root.
Before you decide
“If validation is by video, is the key less secure?”
No. Validation checks who you are; the key is generated on your device regardless of how identity was checked. The resulting certificate is identical to one issued in person.
“Can someone at the RA sign for me?”
Impossible by design: the private key never leaves your device, and the RA doesn't know the password. Only someone with both can sign.
“What if I get hacked?”
Revoke immediately, through the CA. From publication on the CRL, any new signature with that certificate is rejected at verification. Earlier ones remain valid.
“Do I need to understand all this to use it?”
No. Day to day it's open, click sign and type the password. The explanation is here for those who want to trust on grounds, not on faith.
Transparent pricing
The figure covers validation of your identity, issuance by AC Certisign and guidance to generate and install the key pair on your device. Later signatures and verifications carry no cost.
A1 or A3 and the chosen validity set the final figure; confirm on WhatsApp.
Generate my key