Electronic signature and digital certificate These are related but not equivalent concepts. An electronic signature is the general term that encompasses different ways of registering authorship and expressing intent electronically. A digital certificate, on the other hand, is an electronic credential that links an identity to a pair of cryptographic keys and can be used to produce a digital signature.
The difference is important because Not all electronic signatures require a digital certificate.In Brazil, Law No. 14.063/2020 classifies electronic signatures as simple, advanced, and qualified; only the qualified signature requires a digital certificate in accordance with ICP-Brasil standards.
The certification market continues to grow. (In the panel) ITI in NumbersAccording to data accessed in August 2026, there were approximately 16,9 million active ICP-Brasil certificatesAt the same time, the infrastructure is undergoing modernization that will change the types of certificates and their use by legal entities until 2029.
Summary
- Electronic signature is the broad concept; digital signature is a cryptographic modality; digital certificate is the credential used in this process.
- Simple and advanced electronic signatures do not necessarily require an ICP-Brasil certificate.
- A qualified signature uses an ICP-Brasil digital certificate and is governed by the legal framework established in Brazilian law.
- Digital certificates serve for identification and can also be used for authentication and access to systems, not just for signing documents.
- ITI is the Root Certification Authority of ICP-Brasil; CAs and RAs perform distinct functions in issuing certifications.
- ICP-Brasil is transitioning to a model where signature certificates are concentrated in the hands of individuals, and the Electronic Seal takes on a distinct role for legal entities.
Quick facts
- Three options: a Law No. 14.063 / 2020 It classifies electronic signatures as simple, advanced, and qualified; the qualified signature uses a digital certificate in accordance with ICP-Brasil standards.
- Digital ID: o ITI defines the ICP-Brasil certificate. as an electronic document that links a person or entity to a pair of cryptographic keys after identity verification.
- Change by 2029: as ICP-Brasil transition rules Current certificates will be maintained until March 2, 2029, and A3/A4 certificates will be introduced for individuals, Electronic Seals for legal entities, and Special Applications.
Electronic signature and digital certificate: what is the difference?
A electronic signature It is the electronic act or method used to identify the signatory and record their expression of will. Depending on the workflow, it may use email, token, biometrics, device authentication, certificate, or other evidence.
A digital signature It is a technical type of electronic signature based on asymmetric cryptography. It links a private key to the signed content and allows verification with the corresponding public key.
O digital certificateHowever, a public key is not a signature. It is an electronic credential that associates an identity with a public key and contains information that allows verification of the certificate holder and the issuing authority.
| Concept | What is | Do you need an ICP-Brasil certificate? | main function |
|---|---|---|---|
| Electronic signature | Broad category of electronic methods for registering authorship and expression of will. | Not necessarily | Formalize acts and documents through electronic means. |
| Digital signature | Cryptographic method of electronic signature | It depends on the model; the qualified one requires ICP-Brasil. | Link the signature to the content and enable cryptographic verification. |
| Electronic Certificates | Electronic credential linked to an identity and a public key. | Only when dealing with ICP-Brasil certificates. | Identify the account holder and enable cryptographic operations. |
| Qualified signature | Legal category foreseen in Law No. 14.063/2020 | Yes | Apply digital signature with ICP-Brasil certificate |
What is electronic signature?
Electronic signatures can be used in contracts, acceptances, proposals, internal documents, and various other acts. legal validity It doesn't depend solely on the existence of a certificate: the type of document, the evidence produced, the acceptance by the parties, and any legal formalities must also be considered.
In Brazil, Provisional Measure No. 2.200-2/2001 The Brazilian Public Key Infrastructure (ICP-Brasil) was created, and specific effects were established for documents produced with its certification. Article 10, § 2, also allows other means of proving authorship and integrity, including certificates not issued by ICP-Brasil, when accepted under the conditions stipulated in the regulation.
This explains why a digital contract It can be valid even without an ICP-Brasil certificate. The choice of method should be proportional to the risk and requirements of the act, rather than assuming that every signature needs the highest level of certification.
💡 Tip! Need a free electronic signature? Click here and create yours now!
What is digital certificate?
The ICP-Brasil digital certificate is an electronic identity issued and signed by a Certification Authority that is part of the national infrastructure. It can identify individuals, legal entities, systems, applications, or equipment, depending on the type of certificate.
When used for signing, the certificate allows verification of the association between the holder, the public key, and the signature produced with the corresponding private key. This helps demonstrate authorship and integrity, but does not automatically make the content confidential nor does it prevent any type of fraud on its own.
Designations such as e-CNPJ These are used commercially for certificates linked to legal entities. During the current transition of ICP-Brasil, A1 and A3 certificates remain present in the market, but the structure approved for 2029 significantly alters the use of signature certificates by companies.
What changes will occur with ICP-Brasil certificates by 2029?
Up to March 2th, 2029The currently existing types can continue to be used within the transition rules. From March 3, 2029, A1, A2 certificates and the old S categories will no longer be used in the new model.
For signing purposes, the new structure focuses on A3 and A4 certificates for individuals. Legal entities will now use... Electronic Seal To demonstrate the origin and integrity of documents and automated processes, without implying a personal expression of will. Specific applications will also have their own certificates.
![[Banner] Legal validity of digital and electronic signatures: definitive guide with expert analysis](https://blog.zapsign.com.br/wp-content/uploads/2024/10/Banners-para-blog-whitepaper-reducao-de-custos.png "[Banner] How electronic signatures are redefining efficiency and cost reduction in Brazilian companies")
This requires attention from companies that currently rely on A1 or A3 corporate tax IDs in ERPs, tax filing systems, robots, and integrations. The migration must be planned according to the systems used and the technical rules applicable to each operation.
⚠️ Also check out these related articles 👇
➡️ What is electronic signature API and how it benefits the management of a company
➡️ What are the advantages of hiring an electronic signature platform?
➡️ Why You Need to Enter the Age of Electronic Documents Today
How is a digital certificate obtained?
To obtain a certificate ICP-BrazilChoose an accredited Certification Authority and request the product that best suits your needs. Issuance involves identity verification and may occur through in-person validation or via video conference, when the CA's procedure allows.
A Provisional Measure No. 2.200-2/2001 The structure forms the trust chain of ICP-Brasil. Certification Authorities They issue, manage, and revoke certificates according to authorized policies, while different Types of digital certificates for different purposes and environments.
Registration Authorities act as the interface for identifying and registering applicants. Our guide on Certification Authority and Registration Authority It details these functions.
At the top of the chain is the National Institute of Information Technology (ITI), which acts as the Root Certification Authority of ICP-Brasil. The institute accredits, supervises, and audits the other participants; structure of ICP-Brasil It brings these different agents together.
When is a digital certificate necessary?
A certificate is required when the law, the agency, the system, or the organization's policy demands a qualified electronic signature or certificate-based authentication. Law No. 14.063/2020 provides for specific instances where the use of a qualified signature is mandatory, and other sectors may establish their own requirements.
In private relationships, however, an ICP-Brasil certificate is not a general requirement for every contract. Depending on the risk and the document, an advanced electronic signature may provide sufficient evidence of authorship and integrity. The key is to choose the appropriate level before designing the workflow.
At ZapSign, this distinction is important because a digital certificate is an authentication option, not a mandatory requirement for every document. When a qualified signature is required, the sender can configure a digital certificate for the signatory; in other scenarios, different methods of identification and evidence can be used.
In 2026, ZapSign also began operating as an accredited Certification Authority within ICP-Brasil. This expands the company's scope in digital certification, but does not change the basic rule: the signature method must be chosen according to the document, the need for proof, and the required formality.
What technical guarantees does the subscription offer?
It is not correct to attribute exactly the same properties to every electronic signature. The level of evidence depends on the method used. In a certificate-based digital signature, cryptography allows verification of the association between the signature and the content, as well as detection of incompatible alterations.
- Authorship: Evidence helps to attribute the signature to the signatory;
- integrity: Relevant subsequent changes can be detected during validation;
- chain of trust: In ICP-Brasil certificates, it is possible to verify the relationship between the certificate holder's certificate, the issuing CA, and the Root CA;
- evidence of dispute: The signature and records of the process can strengthen the proof of authorship, without making any challenge legally impossible.
Confidentiality is a different property. A digital signature does not necessarily encrypt the content to prevent third parties from reading it. When the document contains sensitive information, access control, storage and transmission encryption, and other security measures need to be evaluated separately.
It is also incorrect to say that a signature absolutely prevents fraud or cyberattacks. It is a layer of security and proof within a larger process that includes private key protection, authentication, devices, permissions, and governance.
Now that you understand the difference between electronic signature, digital signature, and digital certificate, it's easier to choose the appropriate level for each document and avoid both insufficient controls and unnecessary requirements.
To learn about a solution that combines different signature and authentication methods, Just click here to learn more about ZapSign..
Frequently Asked Questions (FAQ)
Electronic signature is the broad category of electronic methods for recording authorship and expression of will. A digital certificate is an electronic credential that links an identity to a public key and can be used to produce a digital signature.
Not always. Simple and advanced signatures can use other methods of identification and proof. The ICP-Brasil certificate is required for qualified electronic signatures and also when a standard, system, or procedure requires certificate-based authentication.
No. A digital signature is the result of a cryptographic operation applied to the document. The digital certificate is the credential that associates the holder's identity with the public key used to verify that signature.
The ICP-Brasil certificate integrates an official chain of trust and allows the production of qualified electronic signatures with the effects foreseen in the legislation. The legal effect of the document also depends on the act performed and any formalities that may be required.
Yes, within the new ICP-Brasil structure. Current A1 certificates can be used until March 2, 2029. From March 3, 2029, this category will no longer be used according to the current transition rules.
Getúlio Santos is the CEO of ZapSign, a lawyer, technology enthusiast, and entrepreneur.
