Getting a signing certificate and using it on a PDF
A digital signature is made with a certificate, a file that binds a private key to your name and is issued by someone the recipient's software already trusts. Get one from your employer, a certificate authority, or the signing function of a national ID card, finish every change to the PDF, then sign in software that handles certificates, such as Adobe Acrobat Reader. PDFGym prepares the file; it does not apply certificate signatures.
A report that has to arrive with a verifiable signer
Lena is a freelance structural engineer. Her inspection report for a warehouse extension,
inspection_report_14B.pdf, has to reach the building authority's portal by Friday, and the
portal's instructions say it must carry a certificate-based signature of the responsible engineer. A
scanned page with her handwriting will be rejected. She has a national ID card that she was told can
sign documents, but she has never used it for that, and the report still has two appendices to attach.
Her job breaks into three parts: pick a certificate the authority will trust, make the PDF final, and apply the signature last. Getting the order wrong is the most common reason a signature fails on the recipient's side.
Where your certificate can come from
The cryptography is the same whichever source you use. What changes is who vouches for the name inside the certificate, and therefore what the recipient's reader says when it checks.
| Source | Who vouches for your name | What a recipient usually sees | Good for |
|---|---|---|---|
| Self-made certificate | Nobody but you | Signer identity unknown, until they trust your certificate by hand | Testing, or teams where IT distributes it |
| Employer or organisation | Your IT department's own authority | Trusted on machines that IT has set up; unknown elsewhere | Internal approvals and sign-offs |
| Commercial certificate authority | The authority, after an identity check you pay for | Often trusted without setup, when the authority is on the reader's trust list | Contracts and filings with outside parties |
| National ID card or qualified provider | A government body or a qualified trust service | Typically trusted; in the EU this route can produce a qualified electronic signature | Official submissions that name a legal standard |
If the recipient names a standard or a list of accepted providers, that settles the choice. If they do not, ask before you buy anything; the comparison of electronic and digital signatures helps you read what they are asking for.
Make the PDF final first, in PDFGym
Everything that changes the file has to happen before the signature, because signing seals the file as it stands. PDFGym's tools do that preparation in the browser, without uploading the report.
- Join the report and its appendices in Merge PDF, in the order the authority expects.
- Open the merged file in Organize pages, drop any blank scanner pages and check the sequence page by page.
- If the portal caps the upload size, run the file through Compress PDF and type the cap as the target.
- Read the finished file once from start to end. A typo found after signing means signing again.
- Save it with a clear name, for example
inspection_report_14B_final.pdf, and only then move to your signing software.
One caution: if the authority sent you a form with an empty signature field, sign that form as it is. Merging and page tools copy pages one by one, and Merge PDF warns when a file has form or signature fields because they may not survive the trip.
Applying the signature in your signing software
Certificates arrive in one of two shapes: a protected file, usually ending in .pfx or .p12, that you import into your system or your PDF reader, or a smart card or token that needs a card reader and the issuer's software. A national ID card is the second kind, and its PIN is what releases the key.
Open the final file in a program that supports certificate signing. Adobe Acrobat Reader does, and
calls certificates digital IDs; LibreOffice can sign an existing PDF as well. Choose the certificate
signing command, draw the signature box or click the existing field, select your certificate, enter the
PIN or password, and save under a new name such as inspection_report_14B_signed.pdf. If the
software offers a timestamp from a timestamp server, accept it: it records the signing time from a
source other than your own computer's clock.
Then open the signed copy and look at the signature panel. It should name you, show the signing time, and state that the document has not changed since it was signed.
Mistakes that break or weaken the signature
- Compressing or merging after signing. Both write a new file, so the seal no longer matches. Make the change on the unsigned final copy and sign again.
- A warning that the signer cannot be verified. The recipient's reader does not trust your certificate's issuer. Use a certificate from a recognised authority, or agree with them how to trust yours.
- Signing with an expired certificate. Check the validity dates in the certificate details before the deadline week, not on the day.
- The key file sitting in a shared folder. Whoever has it, and its password, can sign as you. Ask the issuer to revoke it and get a new one.
- A drawn signature used instead. Sign PDF places a picture of your signature, which is fine for many documents but carries no certificate. It also warns before adding marks to a file with signature fields, since that can invalidate an existing signature.
When you can skip creating one
Most everyday paperwork does not ask for a certificate. A drawn or typed signature is accepted for plenty of agreements, and the guide to signing on any device covers that route. If the sender works through an e-signature platform, sign inside their link; the platform handles its own certificates and keeps the audit trail together.
At work, ask IT before making a certificate yourself, since many organisations already issue them. And when a filing carries legal consequences, the rules for which signature counts depend on the country and the procedure; the authority's instructions or a lawyer are the reliable source, not a general guide.
Certificate signing, short answers
- Can PDFGym create a digital signature for me?
- No. Sign PDF adds a visual signature to the page, with no certificate or trusted timestamp. Use PDFGym to merge, order and compress the file, then sign it in software that supports certificates.
- Is the visible signature box required?
- No. The signature lives in the file whether or not a box is drawn. Add one when the recipient expects to see a mark, or tell them to open the signature panel.
- What happens if someone edits the file after I sign?
- The reader reports that the document changed after signing. Changes the format allows, such as a further signature, are added in a way that keeps the earlier one intact.
- How long does a certificate stay valid?
- The issuer sets an expiry date, and it is printed in the certificate details. A timestamp applied at signing helps a reader confirm the signature was made while the certificate was still valid.
Signing guides and tools
- Every online PDF tool Find the merge, page and compression tools for getting a file ready to sign.
- Digital vs electronic signature Work out whether the request calls for a certificate or a drawn mark.
- How to sign a PDF Place a drawn or typed signature from a laptop or a phone.
- Sign a document All signing guides gathered on one page.