Generate Your Certificate

 Generating the request for your Personal Authentication Certificate is super easy.

After purchasing the certificate, click Begin or Generate Cert Now to access the request form. (On your order dashboard, the Invitation Link button goes to the request form.)

On the certificate request page, simply fill out the user information for the certificate. If you have an Enterprise level certificate, you will also submit your organization’s details for verification.

Double-check all the information is correct, check the subscriber agreement box, and click Continue to submit the order.

Advanced Configurations

A few advanced options are available.

• Include Email Address in Certificate Subject Field – check this box if you need the certificate subject to show the user email address.
• Manually Submit my CSR – check this box if you want to upload your own Certificate Signing Request. Most users will not need to do this, so we recommend skipping it.
  • If you submit a CSR here, you will not receive a collection email when the certificate is issued. You must also manually convert the certificate to the proper PKCS#12 format to pair it with your private key.

Validation and Approval

For Basic and Pro level certificates, you should soon receive a verification email from noreply@sectigo.com. Follow the steps in this email to complete verification and issue your certificate.

If you have an Enterprise-level certificate, Sectigo will complete Organization Validation with you before issuing the certificate. You must also complete email verification. 

The Organization Validation process can take several business days and may require documentation.

When the certificate is ready to be collected, you will receive a collection link via email from Sectigo.

Collect Your Personal Authentication Certificate

Note: You will only have access to the collection site if you did not submit a CSR during generation.

1. On the Sectigo Certificate Application page, select “Generate CSR Automatically” and click REQUEST MY CERTIFICATE NOW.
2. On the next page, you will enter a new password for your certificate under “Generate Certificate bundle”. We recommend you save a copy of this password as you will need it when you install the certificate on your device.
3. Click DOWNLOAD BUNDLE to save your certificate. 
4. On Windows, you may be prompted to download and save 3 separate files: a PKCS#12 certificate and separate public and private keys. 
5. On Mac, you may only download 2 files: a PKCS#12 certificate and separate public key. The private key may not be included as a standalone file.
6. The PKCS#12 file can be installed on both Windows and Mac without any further conversion steps.