Public keys allow you to verify that the certificates that arrive on your computer have been issued by a certification authority in the AOC Consortium hierarchy. Although some browsers already include these keys by default, in some cases you will need to install them manually.
Pre-verification of public keys
Before proceeding with the manual installation, you can check if the public keys are already installed:
- Windows : Control Panel > Internet Options > Content > Certificates
- Mozilla Firefox : Tools > Options > Advanced > Encryption > View certificates
Options for installing public keys:
Option 1. Single file for all public keys (Recommended installation)
First, you need to download the file with all the public keys to your device:
Below we explain how to install the keys according to your operating system:
- For Edge and Google Chrome (Windows) :
- Save the file you downloaded to a location on your computer (for example, on your desktop).
- Right-click on the file and select "Install Certificate".
- Follow the instructions and press "Next" until the message appears: "Import completed successfully."
- For Mozilla Firefox (Windows, Linux or Mac) :
- Save the file you downloaded to your hard drive.
- In Firefox, go to Options > Advanced > Certificates > View Certificates > "Entities" tab > Import > Select file.
- For Safari and Google Chrome (Mac) :
- Save the file you downloaded to your hard drive.
- Double-click on the file and accept the installation in the certificate store.
Option 2. Installation of specific public keys
If you only need the keys for a specific entity, download and install only those that correspond to the required certification entity.
The current certification hierarchy of the AOC Consortium includes two certification bodies:
- EC-SectorPublic : issues certificates for the public sector in Catalonia.
- EC-Citizenship : issues digital certificates for citizens.
From 2025, the certification hierarchy of the AOC Consortium will be expanded with a new hierarchy, called third generation (G3), formed by the following subordinate Certification Bodies and a root Certification Body:
- CA CONSORCI AOC (G3) ROOT-A : the new root certification entity
- SubCA SECTOR PUBLIC Q (G3) A.1 : for the issuance of qualified electronic certificates for the public sector of Catalonia, replacing the EC-SECTORPUBLIC.
- SubCA CIUTADANIA Q (G3) A.2 : for the issuance of qualified electronic certificates for citizenship, replacing the EC-CIUTADANIA.
Citizenship
Download and install the following keys:
1. Root CA key of the Consortium AOC (EC-ACC)
2. Citizen certification entity key (EC-Citizenship)
3. Root CA key of the Consortium AOC CA CONSORCI AOC (G3) ROOT-A (new)
4. Key of the citizen certification entity SubCA CIUTADANIA Q (G3) A.2 (new)
Public Sector
Download and install the following keys:
1. Root Certification Authority Key of the Consortium AOC (EC-ACC)
2. Public Sector Certification Entity Key (EC- Public Sector)
3. Consortium Root Certification Authority Key AOC CA CONSORCI AOC (G3) ROOT-A (new)
4. Public Sector Certification Authority Key SubCA PUBLIC SECTOR Q (G3) A.1 (new)
All public keys since the creation of the Consortium hierarchy AOC
You can download all Certification Authority public keys (including old ones)
This file contains all the public keys of certification authorities since the creation of the AOC Consortium hierarchy .
You might be interested in: