Renewing Digital Certificate Online

Frequently asked Questions about living and working in Andalucia and Spain This section is for information only and drawn from the other forum section threads. Members cannot post to it directly but we accept suggestions for topics and to accept members contributions via other threads.
Andalucia Guru
Posts: 10648
Joined: Tue Jun 15, 2004 11:11 pm
Location: Guadalhorce Valley

Renewing Digital Certificate Online

Postby Beachcomber » Mon Jul 21, 2014 4:41 pm

This contribution to the FAQ was prepared and submitted by Chrissiehope.

The first part is taken straight from the email instructions that came with the notice of approaching expiry - I put it through Google Translate! In italics, I have added steps that aren't mentioned or are unclear. At the end is a link to export/import the certs - I think these might already be on the FAQs - again they went through Google Translate, and some of this English leaves a bit to be desired!

You can access the main page in English by clicking 'Welcome' in quite small letters in the top right hand corner of the screen- click on that and as if by magic it's all in English ! Well, actually that page is, but the subsequent ones are a bit hit & miss.

Email begins:
Please note that the electronic certificate with NIF/CIF X1234567N and serial number 1AB23C1A is soon to expire and that, unless the license has been previously revoked, you can now renew on the Internet from the computer where you have installed your certificate now. (This does not have to be the computer you originally obtained the digital certificate on - I got mine on a laptop in Spain, but have renewed on a pc in UK where there are copies of the certificates)

The renewal may be made two months before the certificate expires. If you do not know your expiration date, check it from the computer where the certificate is installed by accessing: ... car-estado

if you are an individual certificate and: ... -juridicas

if it is a certificate of legal entity.

Please note that this electronic renewal process obviates the need to go to any registry office, but if you do not renew the certificate before it expires you will need to reapply repeating the whole process done at the time of obtaining the original certificate.

I had a lot of problems with downloads being blocked - the best way to avoid this is to follow the first link (below) and click on ‘Soporte Technico’, and then ‘Preguntas Frequentes’. At the bottom of the next screen, click on ‘Instrucciones de Installacion de CAPICOM’. Download (‘Descarga) ‘Configurado_FNMT’ and ‘Run’ (I tried saving this to my pc, but it wouldn’t open). You will need to restart your computer, and then everything should run smoothly ;-)

The renewal process consists of three steps:

1 -. Browser settings. To avoid problems when renewing the certificate, please refer to this section and follow the instructions. Access for individuals or ... es-previas ... para-legal

2 - Application for renewal by accessing: ... renovacion

if it is a certificate of physical person, ... ly-renewal

if a certificate of legal person.

Scroll down, and click ‘Aceptar’

A small window pops up listing all certificates on your computer - select the one you want to renew (if there are more than 1, click ‘View Certificate’ to check which one you have selected)
The details will appear on the webpage - check they are correct & click ‘Renovar certificado’
Click ‘Generar Solicitud Electronica’ (if you set up a ‘private key’ when you first got the digital certificate, tick the little box)

You will get a message saying ‘An application is creating a Protected Item’ - click OK
The next screen gives a lot of numbers & ‘stuff’ - at the bottom, click ‘Firmar’.
The small window listing certificates will pop up - select the correct one (checking as above if necessary) and click OK

On the screen, next to ‘Firmar’ (now greyed out) , click ‘Enviar’

You get a 9-digit code that should print or write down to proceed to download your renewed certificate in step 3.

3 -. Download renewed certificate (several minutes after you performed step 2 renewal application), by accessing: ... ertificado

if it is a certificate of physical person: ... ertificado

if a certificate of legal entity.

Enter the relevant NIE number and the 9 digit number from previous step, click ‘Enviar peticion’
Once the next screen loads, close the window - your certificate should be downloaded automatically

Additionally, if you wish, you may change your personal details, including the address of the email account associated with the certificate.

INFORMATION NOTE: In no circumstances will the certificate be sent by email.

If you have questions about the process you can access the page: ... es-previas

if it is an individual certificate, and: ... iderations

in the case of a certificate of legal entity.

Additionally, accessing:

can get more detailed information on the FAQ.

best regards,

The Electronic Service Certificates National Mint and Stamp

For info on exporting certs: ... rtificados

Below are instructions for Internet Explorer
1551 - How I can export a certificate in Internet Explorer?
To export personal certificates in Internet Explorer must follow the following steps:

Get the Tools, Internet Options. Once there, select the "Content" tab. In the Certificates section press the button "Certificates" and once in the window will press the "Personal" tab. Here we are shown a screen with the list of personal certificates installed in your browser. We choose what we want to export and click the "Export" button.

From this point we will guide a wizard of Windows.

We can choose to export the private key or not (see FAQ 1063) depending on the use we want to make of the certificate.

Export Certificate with Private Key
We will leave the options as shown we default and click "Next"

We arrived to a screen where you must assign a password and validation to protect the file that contains the exported certificate. Then introduce and click the "Next" button.

The following dialogue box will indicate the path and file name you want to contain the exported certificate, press the "Next" button

Then we are shown a window with the characteristics of the exported certificate, press the button "Finish" and appears to us a warning message saying that the private key will be exported, click "OK" if the operation was successful are we display a informing us that the certificate has been successfully exported table.

Exporting the Public Key Certificates
Do not select the option to export the private key and click "Next"

We will mark the "DER encoded binary X.509 (. CER)" option and click "Next"

Enter the path and name of the file that will contain the exported certificate

Then we are shown a screen with the properties of the exported certificate, press "Finish" and if the operation is successful we have the correct certificate export a message appears confirming

NOTE: Make a backup disk of your certificate with the private key and store it in a safe place. Never give a copy of your private key anyone under any circumstances.

1552 - How I can import a certificate in Internet Explorer?
To import a certificate in Internet Explorer must perform the following steps:

Access the menu Tools - Internet Options - Content - Certificates. The "Personal" tab (default) displays a screen with the list of personal certificates installed in your browser.

Press the "Import" button, a wizard that will guide us throughout the certificate import appear. Press the "Next" button and select the path and examine the file name of the certificate you want to import and click "Next."

In the next window we are asked the password to the protected file, we introduce and mark the box "Mark the private key as exportable" so we can re-export the certificate with its private key and "Enable strong protection .. . ". Press "Next".

Then tells us where we can place the imported certificate, leave the default option and press "Next" and "Finish" and if we want to set a password to our certificate click "Security Level" to post it up. We assign a password and confirmation. Press end and will ask the password again that we introduced. We close the wizard.

If everything is correct a message appears informing us that the certificate has been successfully imported.

This contribution to the FAQ was prepared and submitted by Chrissiehope.

The following notes are thanks to Enrique who has renewed his Digital Signatures in March 2015.

Firefox 36.0.4

Installed the signTextJS 0.7.2 Extension as per the instructions below: ... es-previas

My main stumbling block was the FNMT Clase 2 CA - FNMT in the Authorities tab of the Certificates , had to Edit Trust and tick all the boxes.

Came across the above on page 16 of the following........ ... rmaSRX.pdf

The Palemoon version dosen't need the signTextJS
Again on Palemoon the FNMT Clase 2 CA FNMT had to be edited.

The Certificates now expire in 2019 so Four Years life.

On both Firefox and Palemoon I set a Master Password.

Thanks again to Enrique for this update.

Certificates are now renewed for four years but if the date of accreditation of your identity was more than five years ago you will not be able to renew it online. You will need to make a new application and re-accredit your identity.

Who is online

Users browsing this forum: No registered users and 1 guest