Can't sign documents -- Sectigo signature does not get validated: "Invalid policy constraint"

Forum|Forum|6 years ago
September 15, 2019
3 replies
4717 views

Hi,

This has been discussed on one other post a month ago without solution but it is still a big problem, in Acrobat (and Reader) DC 2019 our valid signature is marked as invalid. The certificate path shows "Invalid policy constraint" for the issuing certificate paths and the signing certificate. The certificate is issued by Sectigo and AATL approved, this is generating a lot of inconveniences because we can not sign documents anymore ..

PS:
BTW It also display that the "Document has been altered or corrupted since it has been signed" just when it was generated ..
Really Adobe ???

Any hints out there ? A better piece of software perhaps ?
Cheers, Roland.

Security digital signatures and esignatures

J

JessicaHowe

Participant

The error comes up because the certificate you are using is not real one document signing certificate but a personal one, which Adobe doesn’t fully trust. To fix this, you need a proper AATL-approved document signing certificate so that Acrobat/Reader will validate it without errors. A good option is using a trusted provider Document Signing Certificates, which are made for signing PDFs and avoid these “invalid policy” issues. Hope it helps!

R

rolando_rerfAuthor

Participant

Hi,
I got a response from Sectigo (former Comodo) great costumer support
It seems that I need to purchase a new certificate with a new trusted chain 🙂

Hello,

Greetings from Sectigo Support!

Yes, the Personal Authentication Certificate which you've purchased will give a trusted identity error when you sign Adobe PDF files. Instead, it is recommended to purchase a new certificate specifically designed for document signing which comes with a new trusted chain " Sectigo RSA Document Signing CA” added into Adobe Approved Trust List (AATL).

Please do refer the following link for more details about Sectigo document signing certificate.

https://sectigo.com/ssl-certificates/document-signing-certificates

Please let us know if you need any further support.

Regards,
Sectigo - Technical Support

Jeff Dodge

Participant

Of course, this is what they tell you. This is insane, a once $15-$25 certificate is now $299, how is that a fix? Why does the new certificate cost so much more just to be valid in Adobe Acrobat? That's highway robbery!