A computer-based method implemented in a document certification computer system deployed through the internet network and which interacts with a public blockchain, said document certification computer system having hardware and software resources located in at least one computer server and which are accessible through said internet network, said document certification computer system communicating via electronic data messages with at least one document issuer computer system through which a document issuer manages issuances of certified documents and at least one validator computer system through which a validator manages access rights and resources allocated to a document issuer account of said document issuer, said computer-based method comprising: generating an issuer permanent master key which is assigned to said document issuer account and stored in a first key vault, certifying and publishing a document through an execution of a first process including generating a document persistence key which is assigned to said document and stored in a second key vault, rights to permanently erase said document persistence key being assigned to said document issuer account, encrypting document data with an encryption algorithm and an encryption key which is calculated by a key derivation function from said issuer permanent master key, said document persistence key and an intermediate key which is generated and assigned to said document, registering information including encrypted document data in said blockchain, and generating a document web address of a corresponding published certified document, said web address carrying recovery information of said document intermediate key and identification data of said published certified document, reading said published certified document through an execution of a second process which is accessible to said web address, said second process including recovering, from said identification data, said encrypted document data in said information registered in said blockchain and an access to said first and second key vaults, calculating said encryption key with said key derivation function from said issuer permanent master key, said document persistence key and said intermediate key recovered from said web address, decrypting said encrypted document data using said encryption key and displaying said certified document using said decrypted document data, and upon request from a legitimate holder of said published certified document, claiming a right to be forgotten, operating from said document issuer account a permanent erasure of said document persistence key, thereby rendering inoperative the execution of said second process and a display of said published certified document in said internet network. generating an issuer permanent master key which is assigned to said document issuer account and stored in a first key vault, certifying and publishing a document through an execution of a first process including generating a document persistence key which is assigned to said document and stored in a second key vault, rights to permanently erase said document persistence key being assigned to said document issuer account, encrypting document data with an encryption algorithm and an encryption key which is calculated by a key derivation function from said issuer permanent master key, said document persistence key and an intermediate key which is generated and assigned to said document, registering information including encrypted document data in said blockchain, and generating a document web address of a corresponding published certified document, said web address carrying recovery information of said document intermediate key and identification data of said published certified document, reading said published certified document through an execution of a second process which is accessible to said web address, said second process including recovering, from said identification data, said encrypted document data in said information registered in said blockchain and an access to said first and second key vaults, calculating said encryption key with said key derivation function from said issuer permanent master key, said document persistence key and said intermediate key recovered from said web address, decrypting said encrypted document data using said encryption key and displaying said certified document using said decrypted document data, and upon request from a legitimate holder of said published certified document, claiming a right to be forgotten, operating from said document issuer account a permanent erasure of said document persistence key, thereby rendering inoperative the execution of said second process and a display of said published certified document in said internet network.