FAQ

FAQ for SSL Certificates

SSL (Secure Sockets Layer) is the standard security technology for establishing an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and integral. SSL is an industry standard and is used by millions of websites in the protection of their online transactions with their customers.

To be able to create an SSL connection a web server requires an SSL Certificate. When you choose to activate SSL on your web server you will be prompted to complete a number of questions about the identity of your website and your company. Your web server then creates two cryptographic keys - a Private Key and a Public Key.

You need a SSL Certificate:

  • To secure online credit card transactions
  • To secure system logins
  • To secure any sensitive information exchanged online, such as bank account,address, birth date, license, or ID number
  • To comply with privacy and security requirements
  • To secure webmail and applications like Outlook Web Access, Exchange and Office Communications Server
  • To secure the connection between an email client such as Microsoft Outlook and an email server such as Microsoft Exchange
  • To build trust on your website

Όταν έχετε εγκαταστήσει ένα ψηφιακό πιστοποιητικό ασφαλείας SSL, αυτομάτως η ιστοσελίδα σας εμφανίζει 3 χαρακτηριστικά με τα οποία θα αναγνωρίσουν οι υποψήφιοι πελάτες σας ότι είναι ασφαλές:

  • Ένα εικονίδιο με λουκέτο
  • Το πρόθεμα "https" αντί του "http"
  • Η πράσινη μπάρα (για τα Extended Validation)

Extended Validation

Extended Validation represents the best SSL Certificate and is the recommended SSL Certificate type. As the highest level of authentication using validation criteria defined by the CA/browser forum and audited annually by KPMG, EV triggers Web browsers to turn green in the address bar, and displays the organization’s name plus the name of the issuing CA. It also validates domain ownership and organizational information, along with the legal existence of the organization, and certifies its awareness and approval of the request. The result of opting for a higher value EV certificate is more security and more online trust, which leads to more transactions conducted online.

  • Ensures validation of domain control
  • Displays padlock image in the Web browser
  • Authenticates the organization as legitimate and in good standing
  • Receives proof of the applicant’s right to request certificate
  • Validates the applicant is in good standing with organization he/she is requesting the certificate for
  • Shows organization details in the certificate information
  • Displays organization name and Certificate Authority in the Web browser
  • Displays green address bar in the Web browser Browser green address bar 
Websites who benefit the most from EV include:

  • E-commerce Websites that collect credit card information
  • Websites that operate in a competitive environment where customer loyalty and brand protection is key
  • Websites collecting personal data
  • Websites with customer or employee login forms
  • Websites using 3rd party payment processing (i.e.PayPal)

Organizational Validation

Organizational Validation stands as a more advanced and better SSL Certificate because it has more validation requirements. OV authenticates domain ownership plus the organization’s information included in the certificate (name, city, state, and country). OV triggers Firefox Web browsers to turn blue in the address bar.

  • Ensures validation of domain control
  • Displays padlock image in the Web browser
  • Authenticates the organization as legitimate and in good standing
  • Receives proof of the applicant’s right to request certificate
  • Shows organization details in the certificate information
  • Displays blue address bar in the Web browser (Firefox browsers only
Domain Validation

Domain Validation represents the simplest “good” SSL certification. DV confirms that the domain is registered, and someone with administrative rights is aware of and approves the certificate request.

  • Ensures validation of domain control
  • Displays padlock image in the Web browser

Το ssl εκδίδεται για ένα συγκεκριμένο common name με dedicated IP για την εγκατάσταση του σε ένα server. Για κάθε επιπλέον server που εξυπηρετεί το ίδιο common name απαιτείται επιπλέον άδεια. Για την πιστοποίηση subdomains απαιτείται πιστοποιητικό τύπου wildcard ή Subject Alternative Name (SAN).

Certificates that use Subject Alternative Names (SAN) are powerful tools that are available to secure multiple domain names inexpensively and efficiently. SAN is often referred to as Unified Communications (UC) certificates and is most commonly used with Microsoft Exchange Server 2007, Microsoft Exchange Server 2010, and Microsoft Communications Server.

SAN provides a subject alternative name field that allows additional domain names to be protected with a single certificate. Instead of purchasing individual certificates for each domain name, you can add domain names in the SAN fields, so they can share the same certificate.

For example, a single certificate that supports SAN is capable of securing:

  • www.adacom.com
  • www.adacom.org
  • adacom.com
  • mail.adacom.com
  • www.adacom.net
The SAN feature enhancement is available with the Symantec, Thawte & GeoTrust brands.

FAQ for Remote Sign

Regulation (EU) No 910/2014 (the eIDAS Regulation) went into force on 1 July, 2016 having ‘direct effect’—in other words, being mandatory and wholly adopted in all EU member states, with precedent over any conflicting national laws. It replaces the eSignature Directive (1999/93/EC) and establishes an EU-wide legal framework for electronic signatures and a range of newly defined electronic “trust services”.

A Qualified Electronic Signature (QeS) is the only electronic signature type to have special legal status in EU member states, being the legal equivalent of a hand written signature. It is a specific type of electronic signature that is based on a qualified certificate issued within a Qualified Signature Creation Device (QSCD) – usually a USB token or Smart Card by a Qualified – Trust Service Provider (QTSP), that is on the EU Trusted List (ETL) and certified by an EU member state. The QTP verifies the identity of the signer and vouches the authenticity of the resulting signature.

A remote QeS has the same characteristics and legal value as a QeS but is generated and stored on a Remote QSCD hosted and operated by a QTSP. Its main difference and competitive advantage are that the user is able to sign electronically on any device, any time without the need to carry with him a QSCD.  Access to the remote QeS requires user name, password and OTP.

Qualified Signature Creation Device means an electronic signature creation device that meets the requirements laid down in Annex II of eIDAS Regulation. This can be either a Local QSCD of a type of smart card or USB token or a Remote QSCD of a type of central server signing module.

Qualified Trust Service Provider (QTSP) means a Trust Service Provider who provides one or more qualified trust services and is granted the qualified status by the Supervisory Body.

The AQS Portal is a portal from which you can request and manage your certificate applications for Remote EU Qualified Certificates.

First you need to "Sign Up" and create an account to the ADACOM QUALIFIED SERVICES Portal. Then you can request a New Certificate Application according to the type of EU Qualified Certificate you want.

You can contact       or you can buy online through the

Depends on the certificate type you request.

If it is a Natural Person EU Qualified Certificate for electronic signatures you need to provide the following dully certified or notarized documents:

  • a signed Certificate Application for Natural Person
  • a copy of Natural Person ID or Passport

If it is a Natural Person associated with a Legal person EU Qualified Certificate for electronic signatures you need to provide the following dully certified or notarized documents:

  • a signed Certificate Application Form for Natural Person associated with Legal Person
  • a copy of Natural Person ID or Passport
  • a copy of authorized representative ID or Passport
  • a copy of representative’s authorization to represent the Legal Person
  • a copy of Organizational documents evidencing the official registration, the existence and operation of the Legal person

The following procedure explains a typical issuance of an EU Remote Qualified Certificate

  • Sign Up on the AQS Portal
  • Online Certificate Enrollment Application
  • Physical validation of the Natural Person and/or Legal Person representative identities
  • Fill in and sign the relevant Application Form
  • Organizations and Authorization documents in case of Legal Person
  • Delivery of the aforementioned documents to an ADACOM’s RA or an LRA’s authorized employee
  • Approval of Certificate Application
  • Online Certificate issuance

If you already have an EU Qualified Certificate for electronic signatures you can avoid the physical validation step and upload your relevant documents digitally signed with your EU Qualified Certificate.

Depends on the certificate type you request.

  • If it is a Natural Person EU Qualified Certificate for electronic signatures you can have only one.
  • If it is a Natural Person associated with Legal Person EU Qualified Certificate for electronic signatures you can have only one for each Legal Person association.

You can revoke your Remote EU Qualified Certificate directly through the Portal or by communicating with ADACOM RA representative. The revocation will automatically delete your QeS remote account.

Besides a smartphone there is no need to maintain any special Hardware or Software in order to issue and use your Remote QeS.

By using the portal you can sign any type of document: .doc, .docx, .pdf, .xls, .xlsx, .txt, and more. Word and Excel are automatically converted to PDF format.

ADACOM Remote EU Qualified signature is designed to be compatible with any browser.

ADACOM Remote EU Qualified signature provides you the following features:

  • Drag and resize the location of the signature on the page
  • Set signature’s appearance, such as graphical signature, name, title, date & time etc.
  • Add personal graphical signatures by sketching (fingers, mouse), typing (using a variety of fonts) or uploading (from local device/computer).
OTP stands for One Time Password. In order to ensure the access to your QeS private key our system requires in addition to username and password an additional layer of security that it is provided with the OTP mechanism.
AQS Portal password is used to access the portal for managing your QeS certificates and applications. QeS password is used along with an OTP for electronic signatures with the specific QeS. Every Remote QeS has its unique username and password which are different from the AQS Portal username and password.
For security and privacy issues AQS Portal does not allow restore of your AQS Portal password. In case of password forgotten you can contact ADACOM support.
For security and privacy issues AQS Portal does not allow restore of your QeS password. In case of password forgotten you must contact ADACOM support immediately to proceed with the revocation of your QeS and issue a new QeS.
For security and privacy issues AQS Portal does not allow restore of your OTP. In case you lost your smartphone you must contact ADACOM support immediately to proceed with the revocation of your QeS and issue a new QeS.
AQS Portal do not provide a document sharing mechanism. To share a document with other recipient you must do it with other means.

FAQ for Qualified Certificates

The key pair in the Public Key Infrastructure (PKI) terminology is the combination of public and private key, which are mathematically linked and offer asymmetric cryptography to each other.

The Public Key is used to verify the electronic signature. It is associated with the private key and can be made public.

The private key is used by the Subscriber to create the electronic signature. The private key is known only by the Subscriber.

Public Key Infrastructure (PKI) is a combination of programs, encryption technologies, processes and services which are used for creation, management, distribution, use and recall digital certificates. Specifically this is a way of matching public keys with users, each of public key has a specific role and a unique identity.

Certification Authority is a trusted authority that manages the issuance and the whole life of digital certificates.

Qualified Signature Creation Device is the device in which the Qualified Electronic Signature is created and stored with security. The device must meet the criteria that are set out in Annex II of European Regulation 910/2014. Such devices may be USB Token or Remote devices.

Using the USB token device is very simple. You need to insert it into a USB port at your computer. In order to use the qualified signature that is stored in the device, you will need to enter your personal PIN

Each time you digitally sign a document you will be asked to insert your personal PIN.
You can purchase the device either online through the ADACOM e-shop       or by contacting the ADACOM sales department at 2105193740.
The first step that you have to do is to install the Safenet Authentication client tool (the manufacturer of the QSCD) on your computer. Visit      to download the drivers file as well as follow the detailed instructions in this link.

The Safenet 5110cc is compatible with the following operating systems:
Windows: Vista, 7, 8, 8.1, 10
MAC OSX: 10.12.6 Sierra, 10.13.1 High Sierra, 10.14 Mojave , 10.2 Catalina
Linux: SAC_10.0_Linux_Post_GA

To issue and receive your certificate in USB TOKEN you need to use Internet Explorer and your computer's operating system must be Windows.

If you lose the USB Token you should immediately revoke your certificate for security reasons.

If you remember the challenge phrase you stated during the online application process, you can visit       and select "Revoke" in order to cancel the certificate.

Otherwise, contact ADACOM Customer Service at 2111000070 or        to learn more about the required steps.

Visit     to download the drivers file as well as to follow the detailed instructions that you will find in this link.
To change your PIN, you need to insert the USB Token on your computer.
Then you must select Start à SafeNet à “SafeNet Authentication Client Tools” and then once the Safenet Authentication Client program opens select the advanced view field and then the Change Digital Signature PIN icon.
To change the Token Password, select Start à SafeNet à “SafeNet Authentication Client Tools” and then once the Safenet Authentication Client program opens, select the “Change Token Password” field.
You need to insert the USB token into the port of your computer and then through the Safenet Authentication Client program select the Advanced View field and select "User Certificates" in the options on the left. Double-click on the result and you will see your certificate's validity.

Contact Adacom Technical Services at +30 210 9577255.

To sign a .pdf file please visit      and follow the steps described in the step-by-step guide.

Yes it can be signed by many users as long as you do not lock the document before inserting the signature into the file. Make sure the check box: “Lock document after signing” is unselected.

One (1) month before the expiration of your certificate, you will receive a notice of expiration.

The renewal of the electronic signature will require the re-identification of the Subscriber. If your electronic signature is valid and has not expired, you can email the following digitally signed identification documents to        :

  • Copy of Greek / Cypriot ID or passport digitally signed
  • Completed in all fields and digitally signed the application and agreement form which can be downloaded here

No. You can use the same Safenet 5110 cc device you own.