Certificate authority and key registration center (KRC)
A ready-made solution for issuing digital signature keys and certificates: keys are generated and registered right in the browser, certificates are issued and checked via OCSP. It runs on our ICRYPTERCLI server module and deploys in the cloud or on your own infrastructure. Delivered to more than 10 clients, including UNICON.UZ and INFINBANK; also developed for ministries and government organizations of Uzbekistan.
Capabilities
Keys in the browser
Generate and register digital signature keys without installing heavy software on the operator’s side.
Certificate issuance and management
The full cycle of working with digital signature certificates and keys.
OCSP
A service for checking the current status of a certificate.
Signature verification
A service that verifies signature authenticity and signed-data integrity.
Operators and distributors
Manage operator and distributor accounts, with key generation limits for distributors.
Reports
Reports on registered keys.
License control
The center runs only on the client’s permitted servers and within a set number of key generations.
Cloud or self-hosted
Use the cloud solution or deploy the center on your own infrastructure.
Delivered projects
- UNICON.UZ and INFINBANK: the KRC is in production
- KRC development for ministries and government organizations of Uzbekistan
- Certificate authority delivered to more than 10 clients
Who it is for
O‘zMStBuilt on O‘zMSt algorithms
- Organizations that need their own certificate authority and key issuance
- Banks and financial organizations with a distributor network
- Government bodies that need their own key registration
- Developers who need OCSP and signature verification for their product
Frequently asked questions
What is included?
Key generation and registration in the browser, certificate issuance and management, an OCSP status service and a digital signature verification service.
Can the center run on our own servers?
Yes. Two options are available: cloud and self-hosted, meaning deployment on your infrastructure.
How does a user get a key?
Through the ISIGNER client application: it generates a key pair and sends a registration request to the KRC. ISIGNER works with E-kalit, IKEY and ePass tokens.
Can usage of the center be restricted?
Yes. The server module is license-protected: the center runs only on permitted servers and within a set key generation limit.
Need digital signatures or a secure system?
Tell us about the task: platform, scale, timeline. We will choose the right solution and show it working.
Or contact us directly
- info@intsoft.uz
- +998 93 171 22 88
- +998 97 742 17 70
- 25 Amir Temur St, Yunusabad District, Tashkent