Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

When sending an invoice in PDF format, it is useful (in some countries obligatory) to sign this PDF digitally.

Of course, I could create a self-signed certificate via OpenSSL, but a warning "could not verify certificate" in the PDF rather reduces trust than increases it. Of course, this is absolutely correct as anyone could create self-signed certificates in any name.

No problem, I thought. I have an SSL certificate signed by RapidSSL, signed by CACert and OpenSSL allows me to convert this to a PKCS#12 certificate file http://support.citrix.com/article/CTX106630.

Probably it is bold to expect that the same instance valid for signing SSL certificates would also be valid for my PDF documents. So Adobe Acrobat shows the same message again that it cannot verify the certificate.

Well, then someone probably sells certificates that are signed by some authority that is trusted by Adobe Acrobat by default. However, I simply can't find the right search term in Google to locate appropriate offers.

Therefore my question: Did I think completely wrong in one point or another? And: What must I watch for at the certificate vendors when I need a certificate that Adobe Acrobat likes?

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

This is mostly a link only answer, however I do know that if the signing CA isn't marked as trusted by the app (Acrobat in this case) then it won't be marked as trusted. That being said, this link talks about exactly what your asking: http://helpx.adobe.com/acrobat/kb/approved-trust-list2.html

share|improve this answer
    
Thank you. This link is actually very helpful! When my SSL certificate expires I should probably buy the new one from an CA listed in the Adobe Approved Trust List... Let's see if this SSL can then be misused for PDFs ;) Actually some of the CAs whose websites I have yet visited, do not tell so much about which one to buy for PDF signing. Would probably be too easy... –  BurninLeo Jan 11 '13 at 20:21
    
It's certainly possible if your certificate is signed by a CA on that list. Hey if this answered your question let everyone know :-) –  BigHomie Jan 11 '13 at 20:26
    
My (extra-cheap RapidSSL-)certificate roots to GeoTrust which is not on the list :( Btw. The prices for "explicit" PDF certificates (e.g. globalsign.com/pdf-signing) are about $400. I could get a large bunch of standard SSL certificates for that... –  BurninLeo Jan 11 '13 at 20:28
1  
Yeah it's a racket alright, we had to get a cert for use with Intel vPro and it was $500 USD. –  BigHomie Jan 11 '13 at 20:29
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.