Sign in
ISOF Certification

ISOF certificates level 2

Sign your .isof files with a cryptographically verifiable identity, issued by IsoFind: your own, or your laboratory's.

Pricing

from €25 per year
  • Verification of your identity or your entity before issuance
  • X.509 ECDSA P-256 certificate signed by IsoFind
  • Public identifier in the IsoFind PKI
  • Works with Essential, Research or Pro
  • Ordered online, renewed at the same price

Personal certificate at €25, organization certificates priced by the size of the signing entity. Net prices, French VAT not applicable under article 293 B of the CGI.

Order a certificate
Level 1 - included

SHA-256 integrity

SHA-256 · local hash

The .isof file embeds a SHA-256 fingerprint computed at export. Any modification to the content is immediately detectable, without a network connection.

  • Detection of any content alteration
  • 100% offline verification
  • Does not authenticate the issuer
Level 2 - ISOF certificate

IsoFind PKI authenticity

ECDSA P-256 · X.509 certificate

The file is signed with your private key, bound to a certificate issued by the IsoFind Issuing CA. The certificate names a person, or a laboratory and its legal entity. Any third party can verify the signer's identity without a network connection.

  • Verifiable integrity and authenticity
  • Public identifier verifiable in the IsoFind PKI
  • ECDSA P-256 signature by IsoFind
  • Offline verification, no third party required
  • Legal and forensic standing
What level 2 guarantees

Four cryptographically provable properties

Each certificate is signed by the IsoFind Issuing CA and embedded in the .isof file. Verification depends on no external service.

Content integrity

The SHA-256 fingerprint of the canonical JSON representation is covered by the ECDSA signature. Any modification, even a single digit, invalidates the signature.

Holder identity

The X.509 certificate binds an ECDSA P-256 public key to an identity verified by IsoFind before issuance: a person, checked against an identity document, or a laboratory and its legal entity.

IsoFind trust chain

The certificate traces back to the IsoFind Root CA (RSA 4096, offline). Both the Root CA and the Issuing CA are embedded in the IsoFind binary.

Offline verification

Full verification (chain, validity, embedded CRL, ECDSA signature) works without a network connection, which matters for air-gapped environments.

IsoFind PKI infrastructure

CA
IsoFind Root CA

Top of the trust chain. Signs only the Issuing CA. Private key stored offline on an encrypted physical medium, never connected to any network.

RSA 4096valid until 2046offline
Signs
CA
IsoFind Issuing CA

Issues personal and laboratory certificates. Private key on a hardware HSM. Publishes a CRL for revocation. Embedded in the IsoFind binary for offline verification.

ECDSA P-256valid until 2031HSMCRL
Signs
ISOF
Personal or laboratory certificate

Bound to the private key generated locally within IsoFind. The private key never leaves the workstation. The certificate is renewable every year.

ECDSA P-2561 year, renewableAES-256-GCM local
Pricing and ordering

One personal certificate, four organization tiers

A personal certificate certifies your name only. An organization certificate also certifies the entity you sign for, and its tier depends on the legal entity named in the certificate, not on the group it belongs to.

CertificateAnnual price
Personal certificateYour first and last name, checked against an identity document. No affiliation.€25Order
Academic laboratory or public research bodyThe entity and the laboratory named in your order.€80Order
Company of up to 20 peopleHeadcount of the legal entity named in the certificate.€300Order
Company of 20 to 250 people€700Order
Company of more than 250 people€1,500Order
Regulator, accreditation body, defenceBy quoteWrite to us

An example. A researcher at a national laboratory who takes a personal certificate signs under her own name only: her files show who signed them, without committing her laboratory. If she signs with her laboratory's organization certificate, the signature also carries the laboratory's name, certified as well, and the laboratory stands behind it.

Each certificate is valid for one year and renews at the same price. It is independent of the software licence: it works with Essential, Research or Pro, and verifying ISOF files remains open to everyone. Net prices, French VAT not applicable under article 293 B of the CGI. By ordering, you accept the terms and conditions of sale.

Process

Obtaining your certificate

Four steps. Your private key never leaves your machine: only its public part reaches us, inside your request.

01

Order online

Choose your certificate above and pay by card. For an organization certificate, enter the exact name of the entity and of the laboratory.

02

Generate your request

In IsoFind, go to Certificates > New certificate. Your private key is created on your machine, encrypted with AES-256-GCM. Send the .csr file to colin.ferrari@isofind.tech, from the address used for your order.

03

Let us verify

Personal certificate: you receive a link to present an identity document, checked by Stripe. Organization certificate: we check the entity, and may ask you for a supporting document.

04

Import your certificate

You receive a .crt file. Import it via Certificates > Import: your .isof files can then be signed at level 2. If the verification fails, your order is refunded in full.

Questions about the certification process or the IsoFind PKI? colin.ferrari@isofind.tech