Does my certificate work with firmar.ec?

If your .p12 certificate was issued by an ARCOTEL-accredited entity, the short answer is yes. This is the full list of issuers and the trust root we embed for each one.

Compatibility

We recognise 16 of the 17 ECIs accredited by ARCOTEL.

Compatible with certificates from Security Data, Banco Central del Ecuador (BCE), UANATACA, ANF AC, Consejo de la Judicatura (iCert-EC), ArgosData, Datil, Lazzate, Eclipsoft and the rest of the accredited entities. We embed their trust roots (TSL) directly in the app, each verified individually. If your .p12 certificate was issued by any of them, firmar.ec recognises and validates it offline.

16: ECIs with their own root
28: embedded roots
100%: effective coverage

Banco Central del Ecuador

Root: AC Raíz del Banco Central del Ecuador
How to sign
Security Data

Root: AC Raíz CA-2 Security Data
How to sign
ANFAC (ANF AC Ecuador)

Root: ANF High Assurance Ecuador Root CA
ArgosData

Root: ArgosData Root CA — SHA256
How to sign
Consejo de la Judicatura (iCert-EC)

Root: ICERT-EC Entidad de Certificación Raíz
How to sign
Uanataca Ecuador

Root: UANATACA Root 2016
How to sign
Eclipsoft

Root: ECLIPSOFT CA Root
Datil Media

Root: Datil Autoridad de Certificación
Lazzate

Root: Lazzate Root CA · CA1 · CA2
Alpha Technologies

Root: Alpha Technologies Root CA
AppFirmas

Root: APPFIRMAS Root C1
CorpNewBest

Root: AC Raíz CA-1EFN CorpNewBest
DarkCam

Root: DarkCam S.A. CA Root
FirmaSegura

Root: AC Raíz CA-1 FirmaSegura S.A.S.
LetMi Ecuador

Root: LETMI RSA Root C1
PrimeCoreLat

Root: Prime Core Root CA1

The 17th, the national Civil Registry, does not operate its own PKI root: its officials sign with BCE and Security Data certificates — already covered. Coverage is complete in practice.

TSL versioned and audited in packages/tsl-ec of the repository (v1.11.0). Every root is verified by SHA-256 fingerprint and refreshed by workflow.