CERTIFICATION

Web PKI logo

> Information_

Work with certificates directly on the web without requiring Java. An easy and fast solution for your clients.

Lacuna Web PKI allows interaction with the user’s certificates in web pages and has extensions that enable local signing and RSA key generation. With an easy and fast installer, this solution is the easiest way to interact with digital certificates in your web application without requiring users to install Java. Web PKI is installed as a plug-in in the Browser and is compatible with Chrome, IE and Firefox. In addition, it accesses both software- and hardware-based certificates (stored on cryptographic devices).

> Characteristics_

Does not require Java

> Java support in browsers is being gradually abandoned.
> Compatible with Chrome, Edge, Internet Explorer and Firefox.

Extensive documentation

> The javascript module has extensive documentation.

Simple programming

> All access to the component is accomplished through an easy-to-use JavaScript library.
> Browser-dependent code is not required.

Available Extensions

> CAdES and PAdES subscriptions in the browser without SDK.
> Generating RSA keys in software or hardware using the browser.

Universal support for operating systems

> Compatible with Windows, Mac OS and Linux.

Does not require administrator privileges

> Any user can install the application (functionality not available in Internet Explorer).

> How it works_

Once installed in the browser, the functions of the Lacuna Web PKI are accessed through a Javascript module inserted in the web page_


1_ The user selects the digital certificate;
2_ A routine on the web server of your application is called to perform signature packaging;*
3_ The signed file can be stored on the server or sent to the user.

*: This step can be performed using an SDK from any vendor, as long as it has the capability to perform digital signatures asynchronously. If you do not have an SDK that applies, use the Lacuna PKI SDK.

> Code sample_

pki.listCertificates().success(function (certs) {
this.certificates = certs;
});

> Licensing and plans_

See our commercial for other licensing terms here.

> Information_

Fast, simple and inexpensive solution for certificate access on the server.

> Characteristics_

Reduce Time-to-Market

> Include ICP-Brazil support on your site quickly using real-life application examples.
> Faster and cheaper way to use digital certification.

Standards

> Libraries available in PHP, Java, .NET, NodeJS, Python and Ruby.
> Signing on CAdES, PAdES and XAdES.

Start at no cost

> 50 free digital signatures per month.
> Simple implementation.

Browser integration

> Add client-side support with Lacuna Web PKI.

In the cloud or own installation

> All functionality available as a cloud service.
> With options for own installation on Microsoft Azure or on a Windows server.

Support for private PKIs

> Customize the roots of trusted authorities and validate certificate signatures issued by them.

To whom it is intended

> Centralized signature service with account transaction management.
> For servers or Virtual Machine Windows.
> For other cases, please contact our sales team here.

> Services_

> Pades Signatures (PDF), CAdES Signatures (CML), XAdES Signatures (NFe)

  • Digitally sign data in browser using smart card or certificate_
  • Digital signature in browser without ActiveX/Java applet.
  • Support for digital signatures and authentication directly on the browser without Java.
  • Choose from a wide variety of signature policies according to your case.
  • Co-sign any existing CMS/P7S files, regardless of the application used previously.

> Print Version

  • Allows customization of the printable version, QR Code, Verification Code

> Digital Certificate Login

  • Authenticate with digital certificates (X.509)_

> Timestamp

  • Extra security layer
  • Signed documents can remain valid for long periods.

> Signature Validation

  • Using one of the standard PKIs or with one configured by the client

> API with RESTFul design

  • Support for single-root public key infrastructures (e.g. Brazilian PKI) and also TSL-based infrastructures (e.g. Italian PKI).
  • You can customize which root certification authorities are trusted when validating certificates and signatures.
  • Client libraries for PHP, Java, .NET, NodeJS and Python.
  • Extensive list of examples

> Signing in the Browser using WebPKI

> Signature with B-Stamp

  • When integrated with Rest PKI, B-Stamper records any documents processed in this service in Bitcoin's Blockchain. After storage, an audit document with time record and signed document information will be generated. This way, Bitcoin's Blockchain becomes a reliable time reference for signatures. The service is automatically provided to SaaS users and optional for REST PKI on premisses.
  • Ask for a quote

> Getting Started_

  • 1. Register;
  • 2. Generate an access token;
  • 3. Pick a language and use it.
Register Now

> Plans_

SaaS

US$
0,00

50 trans/month
  • > PAdES PDF Signatures.
  • > CAdES All formats.
  • > Timestamp Lacuna Generated.
  • > WebPKI No license required.
US$
0,14
/transaction
51 or more trans/month
  • > PAdES PDF Signatures.
  • > CAdES All formats.
  • > Timestamp Lacuna Generated.
  • > Timestamp Third Part Optional.
  • > WebPKI No license required.

Here's how much you would spend_

Total: {{priceCT + price | currency:"US$ ":2}}

Range Price per transaction Price per timestamp Use in range (Transaction) Use in range (Timestamps) Subtotal in range (Transaction) (US$ ) Subtotal in range (Timestamps) (US$ ) Subtotal in range (US$ )
Start End
1 50 {{price0 | currency:"":2}} {{priceCT0 | currency:"":2}} {{rest}} {{restCT}} {{rest * price0 | currency:"":2}} {{restCT * priceCT0 | currency:"":2}} {{restCT * priceCT0 + rest * price0 | currency:"":2}}
51 500 {{price50 | currency:"":2}} {{priceCT50 | currency:"":2}} {{rest50}} {{restCT50}} {{rest50 * price50 | currency:"":2}} {{restCT50 * priceCT50 | currency:"":2}} {{restCT50 * priceCT50 + rest50 * price50 | currency:"":2}}
501 5.000 {{price500 | currency:"":2}} {{priceCT500 | currency:"":2}} {{rest500}} {{restCT500}} {{rest500 * price500 | currency:"":2}} {{restCT500 * priceCT500 | currency:"":2}} {{restCT500 * priceCT500 + rest500 * price500 | currency:"":2}}
5.001 30.000 {{price5000 | currency:"":2}} {{priceCT5000 | currency:"":2}} {{rest5000}} {{restCT5000}} {{rest5000 * price5000 | currency:"":2}} {{restCT5000 * priceCT5000 | currency:"":2}} {{restCT5000 * priceCT5000 + rest5000 * price5000 | currency:"":2}}
30.001 {{price30000 | currency:"":2}} {{priceCT30000 | currency:"":2}} {{rest30000}} {{restCT30000}} {{rest30000 * price30000 | currency:"":2}} {{restCT30000 * priceCT30000 | currency:"":2}} {{restCT30000 * priceCT30000 + rest30000 * price30000 | currency:"":2}}
Total: {{price | currency:"":2}} {{priceCT | currency:"":2}} {{priceCT + price | currency:"":2}}

Licensing On Premises

See our commercial for other licensing terms here.

PKI SDK logo

> Information_

Software development kit for developing applications with Digital Certification.

PKI SDK Lacuna is our most advanced solution for using digital certification on the backend. Compatible with all .NET languages and fully compliant with ICP-Brasil, the solution allows developers to create digital certification solutions ensuring security and ease of programming. In addition, the PKI SDK works with certificates from PKIs from more than 10 countries, including Italy, Peru and Vietnam.

> Characteristics_

CAdES & PAdES

> Support for customizing certificate validation and creating and validating signatures.

Digital signature

> In the browser with public key certificates stored in the Windows repository.
> On server with certificates stored in PKCS # 12 or HSM.

Integration

> Integration with external providers and technologies: Microsoft Azure, Amazon Web Services, and Microsoft Entity Framework.

Differentials

> Implementation of Grace Period to obtain CSF.
> Support for ICP standards that use TSL (Trusted Service List) in addition to conventional chains.
> Multi-language (PT-BR and EN-US).

ICP-Brazil

> Compliance with ICP-BR's Signature Policies.
> Support for policies that require Time Stamps.

Documentation

> Technical and conceptual documentation with several functional examples.

> Features_

  • > X.509 Certificate Validation (public key and attribute)_
    • Revocation status validation by CRL with indirect CRL support.
    • Revocation status validation by OCSP.

  • > Advanced certificate chain construction using_
    • Windows intermediate CAs (registered in Windows certificate store).
    • Authority Information Access extension.
    • Artificial OCSP requests.
    • Custom stores (application database)_
      • Decoding of Brazilian and Italian PKI-specific certificate fields.

  • > CAdES signature creation and validation_
    • Asynchronous signature completion.
    • Deterministic signature compression, storing CRLs and certificates without redundancy.
    • Grace period honoring in creation and validation.

  • > PAdES signature creation and validation_
    • Visual representation.
    • LTV-enabled signatures (Long Term Validation).
    • Signature protection with document timestamp.

  • > Public key certificate authentication.

  • > Attribute certificate issuing_
    • Proprietary attribute encoding and decoding.

> Plans_

See our commercial for other licensing terms here.

Amplia logo

> Information_

System design to create private certification authorities. Amplia is a customizable system that manages the entire chain of issuing certificates.

> Characteristics_

Digital certification emission.

Full certificate life cycle management.

Software that allows the integration in yours company's system via WebAPI.

Available for Windows, Linux and Mac.

Emission of type A1 (in software) or A3 (in crypto device) certificates.

Customizable issue for customer identification needs.

> How it works_

1_ Generate Key Pair;
2_ Create a Certificate Signing Request (CSR);
3_ Import the certificate to your machine ou your crypto device.

> Plans_

Licensing On Premises

See our commercial for other licensing terms here.

SaaS

Per emited certificate
US$
3.3
/Certificate emission
Maintenance
US$
55
/Month
Amplia logo

> Information_

Development kit for development of applications in Linux or Windows environment with the use of Digital Certification. Lacuna's PKI Express is the complete solution for using digital certification on servers. Compatible with all major programming languages and fully compliant with ICP-Brasil, the solution allows developers to create solutions for the use of digital certification, ensuring security and ease when creating application. In addition, PKI Express works with certificates generated in PKIs from more than 10 countries, including Italy, Peru, and Vietnam.

> Characteristics_

CAdES & PAdES

> Support for customizing certificate validation and creating and validating signatures.

Digital signature

> In the browser with public key certificates stored in the Windows repository.
On the server with certificates stored in PKCS # 12 or in the server certificate repository.

Differentials

> Support for ICP standards that use TSL (Trusted Service List) in addition to conventional chains.
> Multi-language (PT-BR and EN-US).

ICP-Brazil

> Compliance with ICP-BR's Signature Policies.

Documentation

Documentation in a single portal, integrated with other digital certification solutions, with technical and conceptual articles.

To whom it is intended

> For Linux or Windows servers.
> All of the signature process happens inside the application server.
> For other cases, please contact our sales team here.

> Features_

  • > X.509 Certificate Validation (public key and attribute)_
    • Revocation status validation by CRL with indirect CRL support.
    • Revocation status validation by OCSP.

  • > Advanced certificate chain construction using_
    • Windows intermediate CAs (registered in Windows certificate store).
    • Authority Information Access extension.
    • Artificial OCSP requests.
    • Custom stores (application database)_
      • Decoding of Brazilian and Italian PKI-specific certificate fields.

  • > PAdES signature creation and validation_
    • Visual representation.
    • LTV-enabled signatures (Long Term Validation).

  • > Attribute certificate issuing_
    • Proprietary attribute encoding and decoding.

> Plans_

See our commercial for other licensing terms here.