A digital certificate is an electronic document issued by a Trusted Service Provider (TSP) or Certificate Authority (CA). It contains the public key for a digital signature and specifies the identity associated with the key such as the name of an individual or organization. The certificate is used to confirm that the public key belongs to the specific individual or organization. OneSpan Sign supports a broad range of local- and server-side digital certificates that adhere to global standards. This includes instant interoperability with X.509 PKI (digital certificate and signature technology) issued by TSPs and CAs, and digital certificates stored on U.S. government Common Access Cards (CAC) and PIV (Personal Identity Verification) cards. The result is a secure, tamper-evident e-signed PDF with a detailed audit trail embedded directly into the document. Local Digital Certificates E-Signing with local signing certificates can be completed by following these easy steps: Insert your local smart card into your laptop, mobile device, or smart card reader. Open the document that requires your e-signature. When the document is displayed and ready to be signed, click the signature block then confirm your signature. Select the appropriate certificate from the list. If prompted, enter the PIN code associated to the selected certificate. Once the PIN is confirmed, OneSpan Sign generates a hash of your information at the time of signing (e.g., name, date, time, IP address, and certificate used to sign the document), along with a unique hash of the document itself. Watch this video for more information on how to e-sign documents using a local signing certificate. Remote Digital Certificates E-Signing with cloud-based certificates issued by our TSP partners can be completed following these easy steps: Create an e-signature transaction in OneSpan Sign and select TSP as the signing method. Signers access the document via an embedded web or mobile experience or via email link. Upon successful signer identification, a consent to sign is prompted and an OTP (one-time passcode) is texted to the signer by OneSpan Sign. Once signed, OneSpan Sign generates a hash of the signer’s information at the time of signing (e.g., name, date, time, IP address, and certificate used to sign the document), along with a unique hash of the document itself. Here’s a sample workflow for both known signers (e.g., existing customers to whom your organization has already issued credentials) and unknown signers (e.g., new applicants whose identity has not been verified and who do not yet have credentials) in OneSpan Sign: , editor_rich_content