Certificates

VeriFactu · Certificates

Certificate Management

VeriFactu requires X.509 certificates issued by Spanish CAMs (CAs).

Supported Certificate Types

Type	Use Case	Issuer
FNMT Class 2	Individuals	FNMT-RCM
DNIe	Spanish citizens	DNIe
Camerfirma	Businesses	Camerfirma
Firmaprofesional	Professionals	Firmaprofesional

Uploading a Certificate

POST /verifactu/v1/certificates
Content-Type: multipart/form-data

file: certificate.pfx
password: your_pfx_password

Certificate Storage

Kreyo securely stores certificates:

• Encrypted at rest — AES-256 encryption
• Memory-only during signing — Never written to disk unencrypted
• Access controlled — Only your API key can use your certificates

Using Certificates

When submitting a record, reference your certificate by ID:

{
  "certificate_id": "cert_abc123",
  "invoice": { ... }
}

Certificate Renewal

1. Upload new certificate
2. Update your integrations with new certificate_id
3. Old records remain valid (signed with previous cert)

Security Considerations

• Use strong PFX passwords (12+ characters)
• Rotate certificates annually
• Revoke compromised certificates immediately