Digital Certificate

Information and help in the IT field of computers, internet, ISP's, mobile and fixed line telephones plus satellite TV systems.
User avatar
gerryh
Andalucia Guru
Posts: 6817
Joined: Sat Jan 12, 2008 6:17 pm
Location: Cajiz, Malaga

Digital Certificate

Postby gerryh » Mon May 09, 2016 7:43 pm

I have gone through the relatively easy process of obtaining a Digital certificate for my wife, I already have one.
Got the email to confirm it had been validated and a link to download it.
Opens up in Firefox, where I applied for the certificate, but get message "Your connection is not secure"
clicked on the Advanced button but get message "SEC_ERROR_UNKNOWN_USER" and not the option to accept the "suspect" certificate.
Haven't found a way, yet, to bypass Firefox's security so that I can download the certificate.
Any ideas?
Cheers
Gerry
Gerry Harris

User avatar
Enrique
Andalucia Guru
Posts: 7945
Joined: Tue Mar 24, 2009 9:47 am
Location: Camberley/Alcala La Real

Re: Digital Certificate

Postby Enrique » Mon May 09, 2016 7:53 pm

Hi gerryh,
Have you come across this................. :?:

https://support.mozilla.org/en-US/kb/tr ... OWN_ISSUER

Or do This............
Can you right click on the error ........ "This connection is Untrusted"
Next box "This Frame"
Next box "Show only this Frame"

Open in new tab.....should be able to accept ................might depend on Version of Firefox you're running.......
Last edited by Enrique on Mon May 09, 2016 8:06 pm, edited 1 time in total.
UNIX is basically a simple operating system, but you have to be a genius to understand the simplicity.

User avatar
gerryh
Andalucia Guru
Posts: 6817
Joined: Sat Jan 12, 2008 6:17 pm
Location: Cajiz, Malaga

Re: Digital Certificate

Postby gerryh » Mon May 09, 2016 7:58 pm

Hi Enrique
Yes but I don't get the "add exception" button :thumbdown:
Cheers
Gerry
Gerry Harris

Beachcomber
Andalucia Guru
Posts: 9486
Joined: Tue Jun 15, 2004 11:11 pm
Location: Guadalhorce Valley

Re: Digital Certificate

Postby Beachcomber » Mon May 09, 2016 7:59 pm

Have you tried adding the exception manually?

User avatar
Enrique
Andalucia Guru
Posts: 7945
Joined: Tue Mar 24, 2009 9:47 am
Location: Camberley/Alcala La Real

Re: Digital Certificate

Postby Enrique » Mon May 09, 2016 8:09 pm

Hi gerryh,
That last few lines in my Post above is when you don't have the option to Add exception, has worked before , not tried it on latest Firefox.
UNIX is basically a simple operating system, but you have to be a genius to understand the simplicity.

Beachcomber
Andalucia Guru
Posts: 9486
Joined: Tue Jun 15, 2004 11:11 pm
Location: Guadalhorce Valley

Re: Digital Certificate

Postby Beachcomber » Mon May 09, 2016 8:13 pm

You can add it manually:

Click on Tools>Options>Advanced>View Certificates>Servers>Add Exception. Add the web address exactly as it appears in the error message and click on 'Confirm Security Exception'.

User avatar
gerryh
Andalucia Guru
Posts: 6817
Joined: Sat Jan 12, 2008 6:17 pm
Location: Cajiz, Malaga

Re: Digital Certificate

Postby gerryh » Mon May 09, 2016 9:03 pm

I think I did as you suggested. Now get "DOWNLOAD FNMT'S USER CERTIFICATE" which asks for
Nº DEL DOCUMENTO DE IDENTIFICACIÓN

PRIMER APELLIDO

REQUEST CODE
Filled those in excepted the conditions
then get
DOWNLOAD FNMT'S USER CERTIFICATE
Clicked the install certificate and get
"This personal certificate can't be installed because you do not own the corresponding private key which was created when the certificate was requested."

Cheers
Gerry
Gerry Harris

El Cid
Andalucia Guru
Posts: 13884
Joined: Sun Oct 24, 2004 10:42 pm
Location: La Herradura, Costa Tropical, Granada

Re: Digital Certificate

Postby El Cid » Mon May 09, 2016 9:21 pm

I used to have a digital certificate but failed dismally to renew it. It has now pretty well been replaced with a new system called Cl@ve PIN. this can be used at more locations than the digital certificate and more sites will follow. The advantage is that it is not connected to your PC in any way, it is a truly personal digital ID.

There used to be a similar system called PIN 24 but Cl@ve PIN has effectively replaced that. There are three ways to get one. If you have a digital certificate or PIN 24 you can upgrade to it online. If not there are two other methods. You can apply online for a letter containing a special authorisation code or you can go to a government office with ID etc and they will do it for you.

It relies on your NIE combined with you bank IBAN code and your mobile phone, all of which you have previously submitted to the government as part of your tax declaration.

To use it, you access whatever site that requires it and when it asks for your Cl@ve PIN you can access the Cl@ve website and request one. The code is sent to your mobile phone and is valid for 10 minutes. The other alternative is to download an app for Android or Apple and after you have set it up, a couple of clicks will generate a PIN which is sent to your phone or tablet.

It does seem to be a far better way of establishing your identity and has none of the hassle that digital certificates have, and above all else, it doesn't involve your PC.

I shall use it shortly to submit my tax declaration online.

More info at http://clave.gob.es/clave_Home/clave.html

Sid

Beachcomber
Andalucia Guru
Posts: 9486
Joined: Tue Jun 15, 2004 11:11 pm
Location: Guadalhorce Valley

Re: Digital Certificate

Postby Beachcomber » Tue May 10, 2016 7:56 am

Whenever I do a digital signature I always decline the private key option because this does cause problems for some reason. I suggest you contact the helpline by email. They do respond quite quickly and have been very helpful to me in the past.

My renewal went without a hitch last year except that I had to go through the accreditation of identity procedure because it was more than five years since I had last done so.

Having used both the digital signature and the Cl@ve Pin my preference is for the digital signature until or unless they discontinue its use.

User avatar
gerryh
Andalucia Guru
Posts: 6817
Joined: Sat Jan 12, 2008 6:17 pm
Location: Cajiz, Malaga

Re: Digital Certificate

Postby gerryh » Tue May 10, 2016 8:41 am

El Cid wrote:
More info at http://clave.gob.es/clave_Home/clave.html

Sid

Looks a better system. :thumbup:
Just had a go at converting my Digital Certificate and part of the registration process asks for " Número de soporte "
What is it?
Cheers
Gerry
Gerry Harris

El Cid
Andalucia Guru
Posts: 13884
Joined: Sun Oct 24, 2004 10:42 pm
Location: La Herradura, Costa Tropical, Granada

Re: Digital Certificate

Postby El Cid » Tue May 10, 2016 9:24 am

Yes, that foxed me as well. The official guide says it is on your Residency Card. Since we no longer have one I tried the serial number on the green form. That didn't work so I tried the number on my out of date residency card - it worked!

I also tried getting the unique reference number for use with the tax declaration. That was easy as it just needs your NIE, mobile number and the exact amount that was in box 490 on your 2014 declaration.

https://www2.agenciatributaria.gob.es/s ... btRef.html

The Cl@ve seems to be used on at least as many sites as the digital certificate. The only exception I have found so far is the Junta Salud site, but there may be some more. There are other ways of making an appointment, such as the excellent app, but if you want access to the details on your medical record or to change doctors, you still need entry via the certificate. No doubt that will change in due course.

Sid

User avatar
gerryh
Andalucia Guru
Posts: 6817
Joined: Sat Jan 12, 2008 6:17 pm
Location: Cajiz, Malaga

Re: Digital Certificate

Postby gerryh » Tue May 10, 2016 12:43 pm

Just got back from Trafico in Malaga. Might post about my experiences there.
Anyway, thanks for the information.
Yes the number from my old out of date card works.
I'll have a go at getting a Cl@ve PIN for my wife.
She doesn't have a digital certificate or an old residency card, it was in her purse which got stolen.
Cheers
Gerry
Gerry Harris

El Cid
Andalucia Guru
Posts: 13884
Joined: Sun Oct 24, 2004 10:42 pm
Location: La Herradura, Costa Tropical, Granada

Re: Digital Certificate

Postby El Cid » Tue May 10, 2016 12:47 pm

The best way to do that, avoiding a visit to the police, is to take the option for them to send you a letter with a special code in it which will enable you to set up the Cl@ve.

Sid

User avatar
gerryh
Andalucia Guru
Posts: 6817
Joined: Sat Jan 12, 2008 6:17 pm
Location: Cajiz, Malaga

Re: Digital Certificate

Postby gerryh » Tue May 10, 2016 2:49 pm

Been out again and just got back.
Tried to activate my Cl@ve PIN entered the code in from the PDF and then entered the code received on my phone.
Got message to the effect that the document containing the code, presumably my old residency code, has expired and I should renew it with the police.
Have you successfully activated your Cl@ve PIN ?
Cheers
Gerry
Gerry Harris

El Cid
Andalucia Guru
Posts: 13884
Joined: Sun Oct 24, 2004 10:42 pm
Location: La Herradura, Costa Tropical, Granada

Re: Digital Certificate

Postby El Cid » Tue May 10, 2016 3:08 pm

Yes, it works fine. The code on the PDF is for getting a permanent Cl@ve which you can use anytime. I tried using that code and got the message you received. The first page of the PDF confirms that you have a Cl@ve PIN and should show the Nº Soporte. If they were going to reject it, you would not have got that far.

Once you have downloaded a pin you can test it here https://www2.agenciatributaria.gob.es/e ... %2EPi24Eco

Sid

User avatar
gerryh
Andalucia Guru
Posts: 6817
Joined: Sat Jan 12, 2008 6:17 pm
Location: Cajiz, Malaga

Re: Digital Certificate

Postby gerryh » Tue May 10, 2016 3:43 pm

Installed the app on my Android phone and got a PIN returned.
Was able to access the site you suggested for testing.
All seems to work OK and should be very secure.
I will try the process for setting up my wife in the Cl@ve system sometime tomorrow, my brain hurts. :oops:
Cheers
Gerry
Gerry Harris

User avatar
gerryh
Andalucia Guru
Posts: 6817
Joined: Sat Jan 12, 2008 6:17 pm
Location: Cajiz, Malaga

Re: Digital Certificate

Postby gerryh » Wed May 18, 2016 4:54 pm

El Cid wrote:The best way to do that, avoiding a visit to the police, is to take the option for them to send you a letter with a special code in it which will enable you to set up the Cl@ve.

Sid

Applied for the CSV code on Wed 11th and received it today.
My wife now has a cl@ve PIN :thumbup:
Cheers
Gerry
Gerry Harris

User avatar
Enrique
Andalucia Guru
Posts: 7945
Joined: Tue Mar 24, 2009 9:47 am
Location: Camberley/Alcala La Real

Re: Digital Certificate

Postby Enrique » Wed May 18, 2016 5:18 pm

Hi,
Can Non-Residents obtain a cl@ve PIN :?:

If so what documents are required.

Thanks.
UNIX is basically a simple operating system, but you have to be a genius to understand the simplicity.

El Cid
Andalucia Guru
Posts: 13884
Joined: Sun Oct 24, 2004 10:42 pm
Location: La Herradura, Costa Tropical, Granada

Re: Digital Certificate

Postby El Cid » Wed May 18, 2016 8:06 pm

I see no reason why not. Non residents still need access to many of the government departments that use Cl@ve PIN

registration details here http://clave.gob.es/clave_Home/registro ... rarme.html

Sid

User avatar
Enrique
Andalucia Guru
Posts: 7945
Joined: Tue Mar 24, 2009 9:47 am
Location: Camberley/Alcala La Real

Re: Digital Certificate

Postby Enrique » Fri Nov 03, 2017 9:33 am

Hi El Cid,
Might be good to update the FAQ ... Obtaining Digital Signature.........with CL@ve PIN info.

Non-Residents can get a CL@ve........if you have one the following..........

DNI electrónica
DNI
Tarjeta de extranjero
Permiso de Residencia
Certificado de Registro de ciudadano de la unión

The only one a Non-Resident might have ......Certificado de Registro de ciudadano de la unión ....(registered to stay over 90 days)

Unless they have moved the goal posts of late............. :?:
UNIX is basically a simple operating system, but you have to be a genius to understand the simplicity.


Return to “Computers, Internet, Telephony, TV & Electronics”

Who is online

Users browsing this forum: No registered users and 10 guests