Certificate Policy & Trust

GxPSign uses digital certificates to cryptographically sign PDF documents, ensuring authenticity and integrity.

Platform Signing Certificate

All documents signed through GxPSign are digitally signed using our platform certificate. This certificate is embedded in each signed PDF and can be verified by any PDF reader that supports digital signatures.

Certificate Details

Subject
CN=GxPSign Platform Signing Certificate,O=GxPSign,C=US
Issuer
CN=GxPSign Platform Signing Certificate,O=GxPSign,C=US
Serial Number
1C9BC0A64A68CEEF37A7A3B5B329E1EBFD1A608A
Valid From
October 11, 2026
Valid Until
October 08, 2036

Certificate Fingerprints

Use these fingerprints to verify the authenticity of our signing certificate.

SHA-256 Fingerprint
96:2A:90:20:0B:41:9A:C2:EA:35:DC:C6:94:DA:CF:78:57:61:1E:5A:45:7D:1B:63:79:4F:F4:E4:16:E7:B4:A5
SHA-1 Fingerprint
7F:63:25:5B:B4:E6:49:15:E7:69:92:42:3A:59:13:57:26:51:08:5C

Install Certificate

Installing our signing certificate in your trust store will cause signed PDFs to show as trusted in Adobe Acrobat, macOS Preview, and other PDF readers.

Download GxPSign Certificate (.crt)

After installing, confirm the SHA-256 fingerprint above matches what your OS shows for the imported certificate.

Windows
  1. Download the certificate file above.
  2. Double-click the .crt file — the Certificate dialog opens.
  3. Click Install Certificate…
  4. Choose Local Machine, then click Next.
  5. Select Place all certificates in the following store, click Browse, and choose Trusted Root Certification Authorities.
  6. Click Next, then Finish. Accept the security prompt.
macOS
  1. Download the certificate file above.
  2. Double-click the .crt file — Keychain Access opens.
  3. Select the System keychain (requires admin password), then click Add.
  4. In Keychain Access, find the GxPSign certificate under Certificates.
  5. Double-click it, expand Trust, and set When using this certificate to Always Trust.
  6. Close the dialog and enter your password to confirm.
Linux / Chrome / Firefox

Chrome / Chromium

  1. Go to Settings → Privacy and security → Security → Manage certificates.
  2. Click the Authorities tab, then Import.
  3. Select the downloaded .crt file.
  4. Check Trust this certificate for identifying websites and click OK.

Firefox

  1. Go to Settings → Privacy & Security → Certificates → View Certificates.
  2. Under Authorities, click Import.
  3. Select the .crt file and check Trust this CA to identify websites.

System-wide (Ubuntu/Debian)

sudo cp gxpsign-signing-cert.crt /usr/local/share/ca-certificates/
sudo update-ca-certificates
Adobe Acrobat / Reader
  1. Open Acrobat and go to Edit → Preferences → Signatures → Identities & Trusted Certificates.
  2. Click More…, then select Trusted Certificates in the left panel.
  3. Click Import, browse to the downloaded .crt file, and click Open.
  4. Select the certificate in the list, click Trust, check Use this certificate as a trusted root, and click OK.
View raw PEM certificate 
-----BEGIN CERTIFICATE-----
MIIFajCCA1KgAwIBAgIUHJvApkpozu83p6O1synh6/0aYIowDQYJKoZIhvcNAQEL
BQAwTjELMAkGA1UEBhMCVVMxEDAOBgNVBAoMB0d4UFNpZ24xLTArBgNVBAMMJEd4
UFNpZ24gUGxhdGZvcm0gU2lnbmluZyBDZXJ0aWZpY2F0ZTAeFw0yNjEwMTExNjI0
MTJaFw0zNjEwMDgxNjI0MTJaME4xCzAJBgNVBAYTAlVTMRAwDgYDVQQKDAdHeFBT
aWduMS0wKwYDVQQDDCRHeFBTaWduIFBsYXRmb3JtIFNpZ25pbmcgQ2VydGlmaWNh
dGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCq1pqEd6Q1K23SfKnW
9HQ70Vxo0WYBiR5rAq5K7fMzmdfu1leWEwCVkVAdpJgedU73WyA1fzv+3GVIwtJ1
N1Md8yY/2NZy1bIqqbNhnxfdVqftwTaxTF+3MmVIq+aSAIz/BZ22/Yj+jEBNDiYY
rxq9jBDRTC4tsPaP41aLexOBwIpNYpxpAIeUHhwQgJ6t1rVFJCv8FI2Ae3bemJ70
D4rZE74MYi4kje/b7ZKAMlvHz9PM9MQqp71XSbAW1VeXbuqDvOn4MD1EoYqqQUnT
sSxjMUNZu824WJPf5ehwMYf879KpARJHhFx1PHykMpDwutbsuKiSvo/l+ukeGKBr
pfmQTu0+zQdK9ErMBZuvtS5WQEAZNGY3CIun5nMtZFbWRB5zSVIFTVe2g2/0Nryz
RvWBbFyj4tq3+wsgBU4K8AOZ7AxRfQNzSXPnJyaOJwTGv4SB3BJwGOQvgKg/koqK
8TCO345jEvFdXf24LBphQEshQFmaUDDxJL8ohXqJ5HlknWNfwlggTptAFMlmVpwo
EcxURQbn8mrO3zuzQa/B3HesogtA8nci0ZCBs0a+KZSMoNOdTIc/BITuw7OvfslZ
kyA9rDk5LxDrGaAevxkli1InRcYXdwO7jqpWdId9HXb1Wh0nd3SPGMjU88Cay7Er
1qbOEgWhWXEB9q11+RdihrStuQIDAQABo0AwPjAMBgNVHRMBAf8EAjAAMA4GA1Ud
DwEB/wQEAwIGwDAeBgNVHSUEFzAVBggrBgEFBQcDJAYJKoZIhvcvAQEFMA0GCSqG
SIb3DQEBCwUAA4ICAQBWSBRZ2MYRqO86jqCunxEKiZEc2Th87MmGoSKoC5DjF4Ue
dL38N8uOf9MZp+NOFfMQk4h8vdobs2Pba0d2XZEvNGUWqMXSjOQE0KxWTtt6qeWO
9IwCYY0yzSOtIb20OLYhQPoI/RZpCZeFy+8pFapMWiOKHwpety93stxyKTA5D/7O
lKuvE8hm/9iOhwhC7YMKm0veRCgsKOis3jFBsjj7hTM1NqFfhbOHhVBidPApBIL1
7zpN8g4wZb6CQ8XJYM5VaIlwMgAixJQHrPVgnhDH/s4eL77K2cXb2p7vVpOVupAA
8T0U0DDdpSVyv/HwlJ5yW5SubJOlGWSAitoTnZ2xAygjHZwuFCpj9Gk3+xJSxQwL
CljJhW0QRQ5QhgFPOkkn+LHYd1YeqXdwlsNa0Ml7gJvNNYOHZgZc/4AUx9PEUFw5
BY0z1/H67U4odGSuWQ820HO5Q6Bghn+yNs1inBg7caxWMDi5Jk7QwzFZhGP36zc3
dcsKkhK8qTHeFRaFnkqQ2MRutNAiGjQEYIzp86JUn9156faIhTp+wdjndr3o+kcw
eeEu6pDHRkdwxLKsSF6SlPoJXEV+kqbgviAFzG1BIEOiPo4wM1dr4vgCcyLjAnb3
5Ii8GP8+7c+iCL5/fZOYLwDn3/1t6DkgYXzUd9Ov7xoL941p1jL/z3UpxG7reg==
-----END CERTIFICATE-----

Signature Standards

PAdES (PDF Advanced Electronic Signatures)

Compliant with ETSI EN 319 142 for PDF digital signatures.

SHA-256 Hash Algorithm

Industry-standard cryptographic hash for document integrity.

RSA 4096-bit Keys

Strong asymmetric encryption for digital signatures.

Verifying Signatures

Documents signed by GxPSign can be verified using any PDF reader that supports digital signatures:

Adobe Acrobat / Reader

Open the PDF and click on the signature panel. Adobe will show the signature status and certificate chain.

Preview (macOS)

Open the PDF and go to Tools > Show Inspector > Signatures to view signature details.

Command Line (OpenSSL)

Use pdfsig from poppler-utils to verify signatures programmatically.

Questions about our certificates?

Contact our security team for certificate-related inquiries.

Contact Security Team