In accordance with what is specified in the document "Profiles of Electronic Certificates" of the Dirección de Tecnologías de la Información y las Comunicaciones del Ministerio de Hacienda y Administraciones Públicas , which defines, among others, a qualified certificate profile for public workers with the aim of guaranteeing its interoperability with the applications of the Public Administrations at the state level, the CommonName field of these must contain both the full name of the worker and his ID.
To meet this requirement, the new profiles of qualified certificates for public workers offered by the AOC Consortium based on the adaptation of the certificates to the eIDAS regulations, the certificates include this change .
Two alternatives are explained below to prevent the ID of the certificate holder from being shown when signing the document:
If you want to hide the DNI when signing a PDF , you must also hide the name and surname, since they will now go in the same CN field (Name, Surname and Tax Identification Number). Likewise, the CN field can always be seen, as in all certificates prior to the application of this regulation, by consulting the properties of the document's signature. These steps only involve not showing in the visible signature field :
To hide the CN field, follow these steps:
- Go to the "All tools" section and select "Use a certificate":
- Make a box where you want to make the signature.
- Choose the certificate you want to sign with and click "Continue".
- A screen appears showing how the signature to be performed will be displayed. At this point click "Create" , to generate a new signature aspect.
- Next, mark as signature aspect “None” (it is only a recommendation for a better display of the signature) and uncheck the box that says “Name”, so we will uncheck the CommonName field where the ID appears in the certificates adapted to the eIDAS regulations.
- When you save the signature, it will look like the one below:
Another option so that the ID of the certificate holder is not shown when signing the document is not to publish the signed document, but an authentic copy of it, without the cryptographic signatures. In this way, the document will contain an electronic seal of the organization that made the copy and publishes it as a guarantee of authenticity.
This copy could also include a CSV that allows its validation against an electronic headquarters, but this would be optional.