Sign a digest with CAdES

Creates a detached ETSI CAdES signature from a base64-encoded SHA-256 digest. The original document is not sent to this endpoint.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params

Detached CAdES digest signing requires either filename or reference_uri so clients can bind the returned signature to the original data object.

uuid
required

UID of the HSM digital certificate used for signing.

string | null

6-digit TOTP code. Required only when using a QCP-N-QSCD certificate.

string
required

Base64-encoded SHA-256 digest of the original data object.

string | null

Business filename of the original data object. Used to derive the returned signature filename.

string | null

Client-side reference for the original data object. Stored in response metadata.

string
enum
Defaults to B-B

ETSI CAdES baseline level. B-T adds a signature timestamp; B-LT also embeds certificate and revocation evidence.

Allowed:
string
enum
Defaults to detached

CAdES digest signing currently supports detached packaging only.

Allowed:
string
enum
Defaults to sha256

Digest algorithm used to compute digest_base64.

Allowed:
Responses

401

Unauthenticated

Language
Credentials
Basic
base64
:
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json