Guides

What a Certisign Registration Authority is: what it can and cannot do, scam signs and how to verify ours

People abroad buy digital certificates online, without shaking anyone's hand — and scammers know it. This page explains what a Certisign Registration Authority is from the angle of security: which acts a legitimate RA performs, which it may never perform, the signs that give away a fake RA and the steps to verify ours before you send a single document. Read, check, and only then send your “hello”.

  • RA accredited to AC Certisign
  • We never ask for passwords or PINs
  • Identity validation always performed
  • A brand of Kindness in Business Consulting Ltd

⚠️ Important notice

This is not a government website. Certificado Digital Global is a Registration Authority accredited to the Certisign network, a brand of Kindness in Business Consulting Ltd (UK Company No. 10386293), serving clients from London. Issuance depends on identity validation, documentation and ICP-Brasil rules. Do not send CPF, passport or sensitive documents via WhatsApp or the initial form.

O que é

People abroad buy digital certificates online, without shaking anyone's hand — and scammers know it. This page explains what a Certisign Registration Authority is from the angle of security: which acts a legitimate RA…

Para quem

RA accredited to AC Certisign · We never ask for passwords or PINs

Como resolve

Identity validation always performed · A brand of Kindness in Business Consulting Ltd

Limite

Não é site do governo. Emissão sujeita a validação de identidade, documentação e normas da ICP-Brasil.

The RA's place in the chain — and why it defines what it can do

ICP-Brasil is a chain of trust with fixed roles. At the top, ITI operates the Root CA. Below it, Certificate Authorities such as Certisign issue the certificates. Below them, Registration Authorities are the point of contact with the person: they receive documents, check identity and forward the request for the CA to issue. What an RA “is” institutionally is already covered in ICP-Brasil registration authority; what matters here is the practical consequence: an RA issues nothing on its own, does not generate your private key, does not keep your password and does not “release” a certificate outside the CA's process. Any promise that departs from this design is outside the chain.

Request a Brazilian photo ID and the registration data needed for validation

Ask for the certificate password, the token PIN or the PUK

Carry out identity validation by video call or in person

Issue or “release” a certificate without validating the holder's identity

Forward the request to AC Certisign and follow the issuance

Generate, copy or store your private key

Guide installation, renewal and revocation

Charge a “release fee” after issuance or make use conditional on extra payments

State the price beforehand, in writing

Promise guaranteed issuance “in minutes” before any check

Six signs it is not an RA

1. It asks for the password

The certificate password is created by you at issuance and exists nowhere within the RA. Whoever asks for it is not an RA — it is someone wanting to sign in your name.

2. It charges to “release”

After validation, issuance follows the CA's process. Messages demanding a second payment to “unlock” or “activate” the certificate are the classic extortion script.

3. It skips validation

Without an identity check there is no ICP-Brasil certificate. An offer of “issuance without video, just over WhatsApp” describes something that cannot exist within the chain.

4. It accepts a foreign ID

The passport of the country you live in, eIDAS, BankID or SingPass identify nobody before ICP-Brasil. Whoever accepts them has no intention of validating anything.

5. It asks for your certificate file back

No support step requires you to send your .pfx or give remote access to the token. Legitimate support guides you to do it; it does not do it for you.

6. It leaves no verifiable trail

Name of the responsible company, the CA it is accredited to, a fixed contact channel and a written price. If any of these is missing, stop.

Scenario: the “RA” that messaged first

I want to verify you first

Real case

Illustrative scenario. A Brazilian software engineer in Kuala Lumpur needed to renew her e-CPF to keep signing the monthly reports of a consultancy she provides to a company in Campinas. Days after searching about renewal, she received a message from an unknown number introducing itself as a “Certisign partner RA”, offering renewal “in ten minutes, no video” — she only had to send her current certificate file, the password and pay a “release fee”. Two of the six signs in a single message. She did not reply, looked for a verifiable channel and, on our WhatsApp, first asked how she could check who we were. She received the name of the responsible company, the CA we are accredited to and the verification steps. Only then did she send her passport, do the video validation at eight in the evening in Kuala Lumpur and renew. The unknown number was blocked and reported. — An approach pattern growing among Brazilians outside the country

How to verify our RA, step by step

  • Who stands behind the brand. Certificado Digital Global is a brand of Kindness in Business Consulting Ltd, a company registered in the United Kingdom and based in London. Ask for the name and check the British companies register.
  • Who we are accredited to. AC Certisign. The certificate you receive is issued by it, and the chain shows in the file itself, on ITI's validator or in your browser: Certisign beneath ITI's Root CA.
  • The channel. One single WhatsApp, +44 7454 581866, and this site's form. Messages from other numbers in our name are not ours.
  • The process. Valid Brazilian document, video validation with an RA agent (or in person in London), issuance by the CA, guided installation. If someone skips validation, it is not our RA.
  • The price. Stated in writing before any document is sent, from €200, with no later “release” charge.
  • What we never ask for. Password, PIN, PUK, certificate file, remote access or bank details beyond the agreed payment. The full journey is described in digital certificate service for Brazilians abroad.

Before you decide

“I'm sending my passport to a company on the other side of the world”

You send it to the RA that will validate you, just as you would at an RA in Brazil. The difference is that here the sending is preceded by everything this page teaches you to check.

“I'd rather do it in person”

In London, validation can be in person with our agent. Outside the UK, the video call is the standard — and it is also a validation run by a person, not a robot.

“What if the time zone is bad?”

We book the session within your day, from Asia to the Americas. Verifying our RA you can do whenever you like, with no appointment.

“Is it worth more than a trip to do it at an RA in Brazil?”

An RA in Brazil performs exactly the same validation we do by video — the difference is the airfare. The certificate issued is the same, by the same CA.

Transparent pricing

From €200

That is the starting point for an e-CPF or e-CNPJ. You receive the figure in writing on WhatsApp before sending any document, and nothing is charged after issuance under the name of release, activation or unlocking.

The final figure depends on A1 or A3 and the validity contracted. Any charge outside what was agreed does not come from us.

Get the price in writing

Frequently asked questions

Related guides

Check first. Then, if it makes sense, issue.

Send “I want to verify” and your country. We reply with the name of the responsible company, the CA we are accredited to and the full process before asking for any document.

Verify the RA

Solicite orientação

Formulário curto para lead inicial. Não solicitamos CPF, data de nascimento, passaporte, upload de documentos ou dados financeiros nesta etapa.