Questions and answers about signature certificates
Here are some answers on frequently asked questions about signature certificates.
Web service Certifikatbeställning
How can I get access to the web service to administer the signature certificates?
It is only persons with a Swedish personal identity number and a Swedish electronic identification (eID, currently only Swedish BankID) that may access our web service Certifikatbeställning, following an application to Swedish Customs.
Why do I get an email notification about an expiration date for our signature certificate?
The message is a reminder that you need to order a new Company Signature Certificate. If you have not already done so you should order a new signature certificate before the old expires, otherwise your company’s transaction flow both for test and production will be disrupted.
When you are registered as a contact person for signature certificates we send a message to you eight weeks before your Company Signature Certificate expires. This certificate is valid for 14 months and must be renewed. You order the certificate as described on EDI – Order the Company Signature Certificate.
Why do I get an email about “New Swedish Customs Signature Certificate for electronic data interchange (EDI)”?
This email means that your company must download a new Swedish Customs Signature Certificate in order to continue to receive EDI messages from Swedish Customs.
The certificate is valid for 14 months and must be regularly renewed. We inform all contact persons when we will replace the certificate. The new certificate can be downloaded from our website as described on EDI – signature certificates and registration of contact person and registration of contact person.
Why have I not received an email notification regarding the expiration of our signature certificates?
When you are registered as a contact person for signature certificates your email address is also registered. If your email address has changed for example due to marriage or if the company changed its name you should report the changed email address to Swedish Customs. You use the form TV 404.36 (or TV 404.35 in Swedish). If you have access to the web service Certifikatbeställning you may change your email address there.
Contact person authorised to administer signature certificates
What are the responsibilities of a contact person for signature certificates?
Only person(s) appointed by the company have the authority to order and handle signature certificates on a company’s behalf. It is not necessary that the contact person is employed by your company. However, they must have a power of attorney to act on behalf of the company in questions regarding signature certificates.
The contact persons are registered by Swedish Customs and will receive email notifications from us regarding the certificates. It is only the appointed contact persons who may order the certificates either by email and regular mail, or through our web service Certifikatbeställning.
Who should we appoint as contact person
It is up to the company to choose contact person for signature certificates. It is however an advantage if the contact person has IT knowledge. It is not necessary that the contact person(s) is employed by your company but they must have a power of attorney to act on your behalf when contacting Swedish Customs.
Should we have one or more contact person(s)?
It is an advantage to have more than one contact person to handle signature certificates, considering sickness absence, holidays etc.
How do we change contact persons?
You change contact person(s) for signature certificates using the form TV 404.36 (or TV 404.35 in Swedish). Remember to apply to withdraw the contact person who should no longer have this role.
As a contact person how do I change my email address?
In case your email has changed due to marriage or because your company has changed name you should report the change of address to us so that you can continue to receive the email notifications. For this you use the form TV 404.36 (or TV 404.35 in Swedish). If you have access to the web service Certifikatbeställning you can change your name and address there.
CSR file and certificate
How do I order the Company Signature Certificate?
The Company Signature Certificate is ordered from Swedish Customs via mail and email by the company's appointed contact person for signature certificates as described on EDI – Order the Company Signature Certificate.
Only persons who have a Swedish electronic identification (eID, currently only Swedish BankID) may order the certificate via our web service Certifikatbeställning, following an application to Swedish Customs.
I have emailed the CSR file but have still not received the certificate, why?
To receive the certificate, you must send the CSR file to us both by email and by mail. The printed document should be signed by the contact person authorised to administer signature certificates and state the company name and EORI number.
Did you send the document to the correct postal address?
The correct address is:
Swedish Customs IT department
Aurorum 3, SE-977 75 Luleå, Sweden
When the CSR file is approved we will send a confirmation to the contact person's registered email. The confirmation contains a specified code. You should email this code back to firstname.lastname@example.org.
Do we need to order a new certificate when we change system provider?
Yes, in general and in most cases, it is the easiest way. If the CSR file, i.e. the public/private key pair, is created in another system than which is used to sign the electronic documents, the certificate and the private key may be transferred to the signature system, but that must be done in a secure way.
When do we have to order a new certificate?
When you receive a certificate from Customs, the last date of validity is shown, for example 2013-05-
10T11:19:49. Order a new certificate well in advance so you have time to install the new certificate
before the old one expires.
Can we have more than one certificate?
Yes, one company can have more than one certificate.
How do we generate a CSR file?
When we have registered your appointed contact person(s) for signature certificates we send them instructions on how to generate a CSR file. If you do not have enough knowledge to create a CSR file, we advise you to contact your system vendor.
Outlook blocks the file. Can you zip the file?
No, we do not zip the file. It is sent in two different formats with the same content. Try “save as” and rename the file with the extension .crt. If that doesn’t work, please contact the email administrator at your company.
Why are several types of certificates needed?
This is to ensure the security of the content in the electronic messages your company submits to Swedish Customs. Most companies need two types of signature certificates:
- Company Signature Certificate – to sign messages to be sent to Swedish Customs.
- Swedish Customs Signature Certificate – to verify messages received from Swedish Customs.
If you do not have valid certificates your company’s transaction flow both for test and production will be disrupted.