If you need to check if your certificate is working, if it is correctly installed or simply if it is still valid, below you have different tools available to perform checks.

Check correct installation - Functional test

Important note: This website is not accessible in Firefox.

To verify the correct installation of a certificate, follow these steps:

  1. Have the operating certificate:
    • If it is software, you will have it installed in your internet browser (Chrome, Edge... etc.)
    • If it is on a device (card or USB memory), you will have it connected to your computer.
  2. Once step 1 has been confirmed, access, with the browser where you have T-CAT installed, the website https://scd.aoc.cat/test/certificat/ . Keep in mind that the URL calls the certificate directly, so if you do not have the certificate available in the browser where you are taking the test, the page will give you an error.
  3. If you have more than one certificate, you will be asked to select the one you want to verify.
  4. When the page loads, you will be shown information regarding the certificate.

Viewing the results page confirms that the certificate and the software to use it, if applicable, are working properly. In addition, on the page you can see the basic information about it (pay special attention to the final date of validity).

test_certificate__1_.png

Signature test with VALid - Signador - SignaSuite

From the SignaSuite tool you can perform a test by signing a pdf document.

Access SignaSuite .

Certificate validation test - SignaSuite

In SignaSuite you can also check if a certificate is valid (that is, that it is not expired, suspended or revoked).

You need to download the public key of your certificate and select the "Certificate" option in the validation options.

Access SignaSuite - Validate Certificate

signature.PNG

sig4.PNG

Online Certificate Status Protocol (OCSP)

The OCSP protocol (Online Certificate Status Protocol (RFC 2560) allows you to validate the status of a digital certificate more efficiently than through the verification of Certificate Revocation Lists (CRLs).

All certificates issued by the AOC Consortium include a reference to the OCSP validation service. This allows automated validation of the certificate status through this protocol.

Certificates that sign OCSP responses

In the case of simple validations, that is, validations of a single certificate, the OCSP validation response is signed by the OCSP response certificate corresponding to the hierarchy to which the certificate to be validated belongs.

In the case of multiple validations, validations of multiple certificates at the same time, the OCSP validation response is signed by the OCSP response certificate corresponding to the root of the hierarchy.

For more information, you can consult the following link: Certification hierarchy of Catalan public administrations.

List of revoked certificates

From this page you can consult all those certificates that have been cancelled for different reasons.

Consult the list of revoked certificates in the Certification Hierarchy of Catalan Public Administrations .