Sign a PDF byte-range digest with PAdES

post

https://api/clickncert/v1/digest/pades/sign

Creates a detached CMS signature container for a client-prepared PAdES PDF byte-range digest. The original PDF is not sent to this endpoint, so B-LT and B-LTA are not exposed because they require updating the final PDF.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

Detached PAdES digest signing expects the digest of the PDF byte range prepared client-side. Provide either filename or reference_uri to bind the returned CMS container to the prepared PDF.

certificate_uid

uuid

required

UID of the HSM digital certificate used for signing.

totp

string | null

6-digit TOTP code. Required only when using a QCP-N-QSCD certificate.

digest_base64

string

required

Base64-encoded SHA-256 digest of the prepared PDF byte range.

filename

string | null

Business filename of the prepared PDF. Used to derive the returned CMS filename.

reference_uri

string | null

Client-side reference for the prepared PDF. Stored in response metadata.

signature_level

string

enum

Defaults to B-B

ETSI PAdES baseline level for digest signing. B-T adds a signature timestamp. B-LT and B-LTA require the full PDF document and are supported by the document endpoint.

Allowed:

packaging

string

enum

Defaults to detached

PAdES digest signing returns a detached CMS container to embed in a prepared PDF signature field.

Allowed:

digest_algorithm

string

enum

Defaults to sha256

Digest algorithm used to compute digest_base64.

Allowed:

Responses

401

Unauthenticated

Language

Credentials

Basic

base64

URL

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

200Detached CMS signature container to embed in the prepared PDF signature field

403Forbidden

422Validation error or unsupported PAdES digest option

500Digest signing error