Sealing formats & file types
sealing formats, packaging and profiles available in our sealing solution
PAdES - PDF Advanced Electronic Signature
Packaging
Internally Detached
Profile
PAdES-BES → Basic signature, contains the signer’s certificate but no timestamp.
PAdES-T → PAdES-BES + a timestamp, proving when it was signed.
PAdES-Timestamp → Timestamp applied to the document without a signature (used for proving existence at a given time).
PAdES-LT → PAdES-T + OCSP/CRL info to verify the certificate’s validity at the time of signing. Ensures the document remains valid without requiring external verification.
PAdES-LTV → PAdES-LT + archive timestamps for full archival support.
File Types
.pdf
XAdES - XML Advanced Electronic Signatures
Packaging
Detached,
Enveloped,
Enveloping
Profile
XAdES-BES → Basic signature with signer’s certificate but no timestamp or additional validation data.
XAdES-EPES → XAdES-BES + a reference to a specific signature policy for validation.
XAdES-T → XAdES-BES + a timestamp, proving when the signature was created.
XAdES-C → XAdES-T + OCSP/CRL validation data to ensure that the certificate was valid at the time of signing.
XAdES-X → XAdES-C + a timestamp covering the entire signature structure, ensuring long-term validity.
XAdES-XL → XAdES-X + all necessary certificate and revocation data embedded, making the signature independently verifiable even without external servers.
XAdES-A → XAdES-XL + archival timestamps, periodically updated to extend the validity of the signature indefinitely.
File Types
.xml
any binary file (for Detached and Enveloping only)
CAdES - CMS Advanced Electronic Signature
Packaging
Detached,
Internally Detached,
Enveloped,
Enveloping
Profile
CAdES-BES → Basic signature with signer's certificate but no timestamp or additional validation data.
CAdES-T → CAdES-BES + a timestamp, proving when the signature was created.
File Types
any (including .tiff [type 7])
JAdES - JSON Advanced Electronic Signature
Packaging
Detached,
Enveloped
Profile
JADES-BES → Basic signature, contains signer’s certificate but no timestamp.
File Types
.json
ASiC - Associated Signature Containers
Packaging
Detached,
Enveloped
Profile
ASiC-BES → Basic signature with signer's certificate but no timestamp or additional validation data.
ASiC-T → ASiC-BES + a timestamp, proving when the signature was created.
ASiC-LT → ASiC-T + OCSP/CRL info to verify the certificate’s validity at the time of signing. Ensures the document remains valid without requiring external verification.
ASiC-LTA → ASiC-LT + archive timestamps for full archival support.
File Types
container with any file type
Authenticode - Microsoft code-signing
Digital signature format used to determine the origin and integrity of software binaries.
Packaging
Enveloped
Profile
BES → Basic signature with signer's certificate but no timestamp or additional validation data. (Standard Code Signing)
T → BES + a timestamp, proving when the signature was created. (Timestamped Code Signing)
File Types
.exe
.msi
.dll
.cab
.ocx
Last updated