Connectivity to use the signer: https://signador.aoc.cat (default port 443) https://nativa.aoclocal.cat (ports 9090 to 9095) Optionally, if you are signing with time stamps, it would also be necessary to open connectivity to PSIS: http://psis.catcert.net (default port 80)