Certificates in MitID Erhverv

MitID Erhverv offers user certificates and organisation certificates for organisations with specific needs.

By default, MitID Erhverv does not rely on certificates, and most organisations will not need to order and issue certificates. However, some organisations may still require certificates for specific purposes, such as secure email or system-to-system communication.

Therefore, MitID Erhverv offers 2 different types of certificates:

  • User certificates
  • Organisation certificates

User certificates

A user certificate is a digital identity proof that contains information about the user. The user can use the certificate to identify themselves.

When a user logs in or signs digitally with MitID Erhverv, a certificate is not required. However, there are some specific services that require the user to authenticate with a certificate when logging in or signing.

Certificates are also used for secure email. While MitID Erhverv does not actively support secure email, but it is possible to issue and retrieve certificates that can be used to send secure emails to, for example, partners and colleagues.

Note that using certificates for secure email requires separate software configuration, which is not supported by the Danish Agency for Digital Government.

Secure e-mail (bliver muligvis et afsnit på indeværende side - vær OBS herpå)

User administrators in your organisation are responsible for ordering certificates, while users can download them themselves. The certificate is valid for three years and must be renewed thereafter.

Manage user certificates

Organisation certificates

Organisation certificates are used to confirm the organisation's identity when accessing web services and other services from service providers.

They can also be used to encrypt data transmitted to and from these services. There are 2 different types of certificates that your organisation can use:

  • Organisation certificate: A type of certificate used to represent your organisation. It does not include personal names and typically contains only the organisation's name, CVR number, and an email address.
  • System certificate: A specialised form of an organisation certificate. It represents a specific system within your organisation. The system certificate is issued to the system and is used to identify itself to other systems and encrypt traffic between them.

The certificate is valid for 3 years and must be renewed thereafter.

Organisation certificates can be used for sealing. Seals created by organisations function similarly to signatures made by individuals, allowing MitID Erhverv users within your organisation to sign on behalf of the organisation without displaying their name.

Manage organisation certificates

Qualified certificates

The Danish Agency for Digital Government currently does not offer long-term qualified certificates.

The current signing solution includes a QSCD (Qualified Signature Creation Device). Certificates for this solution will have a short lifespan and will not be persisted. Therefore, they cannot be used in other contexts.

Test how to issue certificates in MitID Erhverv

Create a test organisation in the integration test environment to enable testing certificate issuance:

Create a test organisation in the integration test environment (find korrekt oversættelse, når søjle 4 er done)

Certificate lookup service

Look up publicly available certificates. To send and receive encrypted emails, you can use your recipient’s public OCES certificate. This can be done by searching for the certificate using the recipient’s email address.

You may need the recipient's public OCES certificate if you wish to encrypted the email or to verify the sender’s identity.

NemLog-in.dk: Search for certificate

Secure email

Secure email is not actively supported in MitID Erhverv. However, MitID Erhverv offer certificates that your organisation can use to send secure emails to partners and colleagues.

Please note that MitID Erhverv does not provide guides on how your organisation can set up and use secure email. MitID Erhverv Support, including both standard and advanced support, is also unable to assist with setting up secure email.

Related topics