Hello,
I have a problem with validating document signed with PAdES signature including timestamp. I signed two documents (the same signing and timestamping mechanism - using standalone application for signing). One of them is validated properly (including timestamp) and second one shows that the signature contains timestamp which may by invalid. These two documents differs only in certificate of timestamping authority. Does anybody could help with this issue ? Why Adobe Reader presents timestamp made with second certificate as invalid while both certificates were created according to RFC 3161.
Certificate which signs valid timestamp:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Certificate which signs invalid timestamp:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
AdChoices