IdenTrust Inc. Logo
Home | My Account | Contact Us  

FREQUENTLY ASKED QUESTIONS


  1. How can I pay for a certificate?
  2. What is a voucher number?
  3. Can my organization pay with a purchase order?
  4. What certificate type should I buy?
  5. What Organization name and contact information should I use?
  6. What Fully Qualified Domain Name (FQDN) should I use?
  7. Can I use my personal email in a FATCA Organization certificate?
  8. I don’t have a Global Intermediary Identification Number (GIIN), can I still buy a certificate?
  9. How long does it take to get a certificate?
  10. IDES requires my certificate file to have a “.pem” (Base64) or “.der” (Binary) file extension, how can I do that?
  11. Do I need to export the private key to provide to IDES?
  12. How do I backup my FATCA Organization certificate?
  13. What is revocation and how can I do it?
  14. When and how can I renew my certificate?
  15. How can we change information in the account?

    Payment

  1. How can I pay for a certificate?
    During the application process, you can pay with a credit card or a voucher number.

  2. What is a voucher number?
    A voucher is an alpha numeric sequence that is provided by IdenTrust as an alternative payment method to a credit card. You will provide the voucher number during the online registration as a method of payment.

    You can obtain a voucher number from IdenTrust using a purchase order or paying on the phone with a credit card. Use the "TrustID Certificates – Voucher Order Form" found here.

  3. Can my organization pay with a purchase order?
    Yes. After you have submitted a purchase order, IdenTrust will provide Voucher Numbers that you can distribute to the applicant(s) and can be used during the application process as proof of payment. The purchaser order number process requires that you also fill out the “TrustID Certificates – Voucher Order Form” found here.
    Back to top

    Certificate Types

  4. What certificate type should I buy?
    IdenTrust offers two certificate types, which IRS has approved to use within the FATCA program and are equivalent.

    IdenTrust recommends using the FATCA Organization certificates type since it was designed to provide an easier application and approval process. You should evaluate the information required for application and select the option that matches information you already have or can generate easily. Information about both options is available here.


  5. Certificate’s Information

  6. What Organization name and contact information should I use?
    For a FATCA Organization certificate, you should use the Organization name and headquarters’ address of the organization that you will be registering with the FATCA program.

    For a SSL certificate, you should use the Organization name and address of the organization that you will be registering with the FATCA program and that owns and controls the Fully Qualified Domain Name you provide in the application.

  7. What Fully Qualified Domain Name (FQDN) should I use?
    The FATCA program does not provide guidance on the FQDN you should use; therefore you may choose any Fully Qualified Domain name.

    IdenTrust requires that the FQDN is owned or controlled by your organization and that is not an internal name. You can choose a subdomain name from a domain name you own/control. For example, if you own the domain name “mydomain.com”, you could choose “fatca.mydomain.com”.

    You must not use an internal name such as: myorganization.internal, myorganization.localhost, myorganization.example.

  8. Can I use my personal email in a FATCA Organization certificate?
    You should not use your personal email in the FATCA Organization certificate. You should provide a business email during the application. Ideally, you will provide a generic email that is associated with the organization.

    Example of emails that will not be accepted include: jonh.doe@gmail.com, fatca@yahoo.com.

    Example of acceptable emails include: fatca@myorganizationname.com, finance_group@financialinstitution.com.

  9. Back to top

  10. I don’t have a Global Intermediary Identification Number (GIIN), can I still buy a certificate?
    Yes, it is not necessary to have a GIIN to buy a certificate.

    If you have a GIIN number, IdenTrust may use it to facilitate the approval process for your certificate.


  11. Certificate Purchase Process

  12. How long does it take to get a certificate?
    For a FATCA Organization certificate, after you have provided the application information online, the standard processing time takes 2 to 4 business days.

    For a SSL certificate, after you have provided the application information online, the standard processing time takes 2 to 4 business days.

    If during the validation phase IdenTrust requires additional information, the process will take longer.


  13. Certificate Management

  14. IDES requires my certificate file to have a “.pem” (Base64) or “.der” (Binary) file extension, how can I do that?
    You can identify a file with a certificate in PEM format when it has the string “-----BEGIN CERTIFICATE-----“ at the top of the sequence; and the string “-----END NEW CERTIFICATE REQUEST-----“ at the end.

    For a SSL certificate, at the time of initial installation certificate is already provided in PEM format and you can save it to a file with the “.pem” extension. Alternatively, you can access the IdenTrust Certificate Management Center here using your account number and password. Under the section “For this Certificate, Would You Like to”, select “View Your Certificate PEM” and click “Continue”. You will have access to the information in PEM and you can save it to a file with the “.pem” extension.

    For a FATCA Organization certificate, you will be able to export the certificate from your browser in the PEM format. The extension of this file will be “.cer”. For specific instructions for supported browsers, click here.
  15. Back to top

  16. Do I need to export the private key to provide to IDES?
    No. You must not provide the private key to IDES. Export only the certificate in accordance with the instructions here.


  17. Back to top

  18. How do I backup my FATCA Organization certificate?
    See the instructions on how to backup the private key here https://www.identrust.com/support/faq/genfaq5.html.

    To import the file in the other computer, follow the instructions here .

  19. What is revocation and how can I do it?
    Revocation is the action of making your certificate unusable. This is necessary when you have lost access to the private key. In those cases, the private key may be used to create digital signature on the organization’s name without authorization.
    • Accessing the Certificate Management Center here using your account number and password.
      • Under the section "For this Certificate, Would You Like to", select "Revoke Your Certificate" and click "Continue"
      • Select a revocation reason, click Next and the Finish
    • Accessing the Certificate Management Center here using your account number and password.

  20. When and how can I renew my certificate?
    You can renew a certificate within 90 days from expiration. The IdenTrust system will automatically notify you by email at 90, 60, 30, 14, 7 and 1 day prior to your certificate expiring.

    If you have not received renewal notification emails and you are within 90 days of expiration, go to the Certificate Management Center here. Access the system using either the certificate, or your account number and password. Under the section “For this Certificate, Would You Like to”, select “Renew Your Certificate” and click “Continue”. Follow the instructions.

    Please note that if you are planning to pay with a purchase order, you should obtain a voucher number for renewal prior to renewing. See the question about payment with purchase orders.

  21. How can we change information in the account?
    Go to the Certificate Management Center here, access it using either the certificate, or your account number and password. Under the section "Update Your Account Information", select “Update Your Account Information” and click “Continue”. Follow the instructions.

    Please note that you can only change information that is not in your certificate. You will not be able to change:

    For SSL certificate: Organization information or Fully Qualified Domain Name.

    For FATCA Certificate: the Organization information or email.

  22. Back to top



CUSTOMER SUPPORT
Helpdesk@IdenTrust.com
888.248.4447 (within the US)
801.384.3481 (outside the US)
Hours: M-F, 7am-11:59pm GMT

RELATED CONTENT
IRS – FATCA Program Page
IRS - FATCA Online Registration Guide
How to Export a Certificate
Help me Choose
IRS FATCA Home
IdenTrust, Inc. BBB Business Review WebTrust WebTrust Baseline EHNAC EHNAC GSA Schedule SOC
© IdenTrust, Inc. All Rights Reserved.    Home | Contact Us | Legal Policies