What is the difference between a recognised and a qualified signature

Modified on Tue, 11 Jun at 1:55 PM

The method of signing with a certificate is possible when using a so-called qualified certificate issued by an independent certification authority. From a legal point of view, 2 levels of signatures can be provided - recognized and qualified.

How do they are different and how do we distinguish them?

Qualified certificate stored outside the qualified resource = recognized signature

Qualified certificate stored on a qualified resource = qualified signature

Legal view

Recognised signature required to act "towards the public administration" i.e. how a natural person or a representative of a legal entity must sign when communicating with the public administration

Legal view

a qualified signature is required for "public administration" actions i.e. how a public administration representative must sign

More detailed definition

A recognized electronic signature is created based on a qualified certificate stored on a "non-QSCD" device (i.e., a non-certified device), typically any PC or Mac.
If a given qualified certificate for an electronic signature has not been issued to a QSCD resource, it has in its properties a Policy Identifier OID 0.4.0.194112.1.0

More detailed definition

A qualified electronic signature is created only on the basis of a qualified certificate stored on a QSCD device, typically in the form of a card or USB
If a given qualified certificate for electronic signature has been issued to a QSCD resource, it has in its properties the Policy Identifier OID 0.4.0.194112.1.2.

View certificate properties on a computer

Available for clicking the certificate in the Windows store - Certmgr.

View certificate properties on a computer

Available for clicking the certificate in the Windows store - Certmgr.

Display in Adobe Reader

Available when the Signature Panel is displayed

Display in Adobe Reader

Available when the Signature Panel is displayed

From a legal perspective, there are also signatures at the guaranteed/advanced and simple/basic levels. Documents with them can also have embedded certificates, but these will show up as unverified. Which doesn't mean they aren't valid, it just means the signatures aren't recognized or qualified.