RFC 5280 separates the Certificate Policies extension, the path validation algorithm, and CRL checking into three independent pieces. An implementation can be RFC-compliant and skip two of the three.
Sep 18 2026 · 6′ · Tutorials · pki · firma-digital
CAdES and XAdES aren't interchangeable even though both are "advanced signatures." The choice depends on document type, trust profile, and what the CA actually expects to validate. A technical guide with DSS and Java to make the right call before you sign anything.
Aug 12 2026 · 9′ · Tutorials · seguridad · certificados
When a digital signature fails, the instinct is to look at cryptography. Most of the time the problem is format or validation policy. Here I separate the three layers so the next error doesn't cost you hours.
May 29 2026 · 10′ · Tutorials · seguridad · certificados
Architecture, real systems, product decisions and technical lessons. Everything reviewed with my own judgment before it ships.
239 articles published