{"id":9722,"date":"2024-10-28T12:22:51","date_gmt":"2024-10-28T12:22:51","guid":{"rendered":"https:\/\/certillion.com\/videos\/"},"modified":"2025-09-24T12:31:26","modified_gmt":"2025-09-24T12:31:26","slug":"videotutorial","status":"publish","type":"page","link":"https:\/\/certillion.com\/en\/videotutorial\/","title":{"rendered":"V\u00eddeoTutorial"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t
\n
V\u00eddeoTutorial<\/h5>
<\/div><\/div>\n <\/section>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Check out the Certillion Tutorials, this video provides a complete step-by-step guide to the main features of Certillion, with a special focus on demonstrating how to use the API to perform digital signatures in a practical and efficient way.<\/p>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
<\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Support Material: How to Use the Certillion API<\/h4>\n
<\/div>\n1. Access Credentials<\/strong>\n\nTo access the Certillion platform, you need the credentials below. To learn how to obtain the credentials, visit the tutorials.<\/a> <\/span>\n\n\n\n
\n
\"client_id\": \".....\",<\/span>\n\n\"client_secret\": \"......\"\n<\/span><\/pre>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n2. Postman Collection<\/strong>\n\nAccess the Postman Collection at the bottom of this page. <\/span>It uses the environment variables CLIENT_ID and CLIENT_SECRET.<\/span>\n\nYou can:<\/span>\n
    \n \t
  1. \n
      \n \t
    1. Replace variables directly with the given values.<\/span><\/li>\n \t
    2. Or set the variables in the Postman environment.<\/span><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n3. Digital Signature Flow with OAuth2<\/strong>\n\nThe basic signing flow using Certillion is as follows:<\/span>\n
        \n \t
      1. \n
          \n \t
        1.  oauth\/client_token<\/span><\/li>\n \t
        2.  oauth\/document (document upload)<\/span><\/li>\n \t
        3.  oauth\/authorize<\/span><\/li>\n \t
        4.  oauth\/token<\/span><\/li>\n \t
        5.  oauth\/signature<\/span><\/li>\n \t
        6.  oauth\/document (download) (optional, only if uploaded)<\/span><\/li>\n<\/ol>\n<\/li>\n<\/ol>\nExtra:<\/strong>\n\nThe oauth\/find-psc-accounts endpoint can be used to find out which PSCs a CPF or CNPJ has a digital certificate available.<\/span>\n\n4. Generating Code Challenge and Code Verifier (PKCE)<\/strong>\n\nIn the calls to \/authorize and \/token, you will need a code_challenge and a code_verifier.<\/span>\n\nExample of generation in Node.js:<\/span>\n\n\n\n
          \n
          var crypto = require('crypto')<\/span>\nfunction base64URLEncode(str) {<\/span>\n    return str.toString('base64')<\/span>\n        .replace(\/\\+\/g, '-')<\/span>\n        .replace(\/\\\/\/g, '_')<\/span>\n        .replace(\/=\/g, '');<\/span>\n}<\/span>\nvar verifier = base64URLEncode(\n        crypto.randomBytes(32)\n);<\/span>\nconsole.log(\"verifier: \" + verifier);<\/span>\nfunction sha256(buffer) {<\/span>\n    return crypto\n        .createHash('sha256')\n        .update(buffer)\n        .digest();<\/span>\n}<\/span>\nvar challenge = base64URLEncode(\n        sha256(verifier)\n);<\/span>\nconsole.log(\"challenge: \" + challenge);<\/span><\/pre>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\nTip:<\/strong>\n\nYou can run this code online by clicking  here<\/a> <\/span>\n\n5. Running \/authorize<\/strong>\n\nIn Postman, fill in the required fields and copy the generated URL.<\/span>\n\nOpen this URL in your browser. You will be redirected to the PSC (e.g. VIDAAS) for authentication. <\/span>\n\nAfter authenticating, you will be redirected to a URL similar to: “https:\/\/esec.com.br\/callback?code=a9ef7f76-1118-4731-95b5-4ead66ec9457&state=123”<\/span>\n\n6. Important Settings<\/strong>\n\nIn the redirect_uri field of the \/authorize and \/token requests, use the base URL up to \/callback, for example: “https:\/\/esec.com.br\/callback”<\/span>\n\nThe code parameter obtained from the URL will be used in the oauth\/token call.<\/span>\n\n7. PSC and Endpoints<\/strong>\n\nThe psc field must be configured according to the PSC that will be used.<\/span>\n\nFor A1 or A3 certificates connected to the end user machine, use: CERTILLION_SIGNER<\/span>\n\nEndpoints:<\/span>\n
            \n \t
          1. \n
              \n \t
            1.  For CERTILLION_SIGNER: “https:\/\/cloud-ws.certillion.com”<\/span><\/li>\n \t
            2. For other PSCs: “https:\/\/cloud.certillion.com”<\/span><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n8. Official Documentation<\/strong>\n\nFull API documentation is available at certillion.com\/en\/api<\/a><\/span>\n\n9. CAdES Detached Signatures (File Hash)<\/strong>\n\nFor detached CAdES signatures, it is necessary to calculate the sha256 hash of the file and pass it in the hash field of the request.<\/span>\n\nExample in bash:<\/span>\n
              \n\n\n\n
              \n
              $ sha256sum.exe e-Sec_com_linha.jpg | awk '{ print $1}' | xxd -r -p | base64<\/span><\/pre>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n
              \nCommand explanation:<\/span>\n\n\n\n
              \n
              sha256sum.exe e-Sec_com_linha.jpg: generates the sha256 hash of the file.<\/span><\/pre>\n
              awk '{ print $1}': captures only the hexadecimal value of the hash.<\/span><\/pre>\nxxd -r -p: convert hexadecimal hash to binary.<\/span>\n\nbase64: transforms the binary hash into base64.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\nThe result in base64 will be the value to be used in the hash field of the signature request.<\/span>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
              \n\t\t\t\t
              \n\t\t\t\t\t
              \n\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tDownload Postman Collection<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"
              V\u00eddeoTutorial Check out the Certillion Tutorials, this video provides a complete step-by-step guide to the main features of Certillion, with a special focus on demonstrating how to use the API to perform digital signatures in a practical and efficient way. https:\/\/youtu.be\/wMMa9L00Kgg Support Material: How to Use the Certillion API 1. Access Credentials To access the Certillion platform, you need the credentials below. To learn how to obtain the credentials, visit the tutorials. “client_id”: “…..”, “client_secret”: “……” 2. Postman Collection Access the Postman Collection at the bottom of this page. It uses the environment variables CLIENT_ID and CLIENT_SECRET. You can: Replace variables directly with the given values. Or set the variables in the Postman environment. 3. Digital Signature Flow with OAuth2 The basic signing flow using Certillion is as follows: oauth\/client_token oauth\/document (document upload) oauth\/authorize oauth\/token oauth\/signature oauth\/document (download) (optional, only if uploaded) Extra: The oauth\/find-psc-accounts endpoint can be used to find out which PSCs a CPF or CNPJ has a digital certificate available. 4. Generating Code Challenge and Code Verifier (PKCE) In the calls to \/authorize and \/token, you will need a code_challenge and a code_verifier. Example of generation in Node.js: var crypto = require(‘crypto’) function base64URLEncode(str) { return str.toString(‘base64’) .replace(\/+\/g, ‘-‘) .replace(\/\/\/g, ‘_’) .replace(\/=\/g, ”); } var verifier = base64URLEncode( crypto.randomBytes(32) ); console.log(“verifier: ” + verifier); function sha256(buffer) { return crypto .createHash(‘sha256’) .update(buffer) .digest(); } var challenge = base64URLEncode( sha256(verifier) ); console.log(“challenge: ” + challenge); Tip: You can run this code online by clicking here 5. Running \/authorize In Postman, fill in the required fields and copy the generated URL. Open this URL in your browser. You will be redirected to the PSC (e.g. VIDAAS) for authentication. After authenticating, you will be redirected to a URL similar to: “https:\/\/esec.com.br\/callback?code=a9ef7f76-1118-4731-95b5-4ead66ec9457&state=123” 6. Important Settings In the redirect_uri field of the \/authorize and \/token requests, use the base URL up to \/callback, for example: “https:\/\/esec.com.br\/callback” The code parameter obtained from the URL will be used in the oauth\/token call. 7. PSC and Endpoints The psc field must be configured according to the PSC that will be used. For A1 or A3 certificates connected to the end user machine, use: CERTILLION_SIGNER Endpoints: For CERTILLION_SIGNER: “https:\/\/cloud-ws.certillion.com” For other PSCs: “https:\/\/cloud.certillion.com” 8. Official Documentation Full API documentation is available at certillion.com\/en\/api 9. CAdES Detached Signatures (File Hash) For detached CAdES signatures, it is necessary to calculate the sha256 hash of the file and pass it in the hash field of the request. Example in bash: $ sha256sum.exe e-Sec_com_linha.jpg | awk ‘{ print $1}’ | xxd -r -p | base64 Command explanation: sha256sum.exe e-Sec_com_linha.jpg: generates the sha256 hash of the file. awk ‘{ print $1}’: captures only the hexadecimal value of the hash. xxd -r -p: convert hexadecimal hash to binary. base64: transforms the binary hash into base64. The result in base64 will be the value to be used in the hash field of the signature request. Download Postman Collection<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-9722","page","type-page","status-publish","hentry"],"yoast_head":"\nV\u00eddeoTutorial - Certillion<\/title>\n<meta name=\"description\" content=\"Discover Certillion Tutorials and how to perform digital signatures in a practical and secure way, with support for users and developers.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/certillion.com\/api-certillion\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"V\u00eddeoTutorial\" \/>\n<meta property=\"og:description\" content=\"Discover Certillion Tutorials and how to perform digital signatures in a practical and secure way, with support for users and developers.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/certillion.com\/api-certillion\/\" \/>\n<meta property=\"og:site_name\" content=\"Certillion\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/certillion\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-24T12:31:26+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/certillion.com\/api-certillion\/\",\"url\":\"https:\/\/certillion.com\/api-certillion\/\",\"name\":\"V\u00eddeoTutorial - Certillion\",\"isPartOf\":{\"@id\":\"https:\/\/certillion.com\/#website\"},\"datePublished\":\"2024-10-28T12:22:51+00:00\",\"dateModified\":\"2025-09-24T12:31:26+00:00\",\"description\":\"Discover Certillion Tutorials and how to perform digital signatures in a practical and secure way, with support for users and developers.\",\"breadcrumb\":{\"@id\":\"https:\/\/certillion.com\/api-certillion\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/certillion.com\/api-certillion\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/certillion.com\/api-certillion\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"In\u00edcio\",\"item\":\"https:\/\/certillion.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"V\u00eddeoTutorial\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/certillion.com\/#website\",\"url\":\"https:\/\/certillion.com\/\",\"name\":\"Certillion - Certifica\u00e7\u00e3o Digital\",\"description\":\"Simples, R\u00e1pido e Seguro\",\"publisher\":{\"@id\":\"https:\/\/certillion.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/certillion.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/certillion.com\/#organization\",\"name\":\"E-sec Seguran\u00e7a Digital\",\"url\":\"https:\/\/certillion.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/certillion.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/certillion.com\/wp-content\/uploads\/2021\/07\/Certillion-Dark.svg\",\"contentUrl\":\"https:\/\/certillion.com\/wp-content\/uploads\/2021\/07\/Certillion-Dark.svg\",\"width\":218,\"height\":62,\"caption\":\"E-sec Seguran\u00e7a Digital\"},\"image\":{\"@id\":\"https:\/\/certillion.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/certillion\",\"https:\/\/www.linkedin.com\/company\/certillion\/\",\"https:\/\/www.instagram.com\/certillion\/\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"V\u00eddeoTutorial - Certillion","description":"Discover Certillion Tutorials and how to perform digital signatures in a practical and secure way, with support for users and developers.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/certillion.com\/api-certillion\/","og_locale":"en_US","og_type":"article","og_title":"V\u00eddeoTutorial","og_description":"Discover Certillion Tutorials and how to perform digital signatures in a practical and secure way, with support for users and developers.","og_url":"https:\/\/certillion.com\/api-certillion\/","og_site_name":"Certillion","article_publisher":"https:\/\/www.facebook.com\/certillion","article_modified_time":"2025-09-24T12:31:26+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/certillion.com\/api-certillion\/","url":"https:\/\/certillion.com\/api-certillion\/","name":"V\u00eddeoTutorial - Certillion","isPartOf":{"@id":"https:\/\/certillion.com\/#website"},"datePublished":"2024-10-28T12:22:51+00:00","dateModified":"2025-09-24T12:31:26+00:00","description":"Discover Certillion Tutorials and how to perform digital signatures in a practical and secure way, with support for users and developers.","breadcrumb":{"@id":"https:\/\/certillion.com\/api-certillion\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/certillion.com\/api-certillion\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/certillion.com\/api-certillion\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"In\u00edcio","item":"https:\/\/certillion.com\/en\/"},{"@type":"ListItem","position":2,"name":"V\u00eddeoTutorial"}]},{"@type":"WebSite","@id":"https:\/\/certillion.com\/#website","url":"https:\/\/certillion.com\/","name":"Certillion - Certifica\u00e7\u00e3o Digital","description":"Simples, R\u00e1pido e Seguro","publisher":{"@id":"https:\/\/certillion.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/certillion.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/certillion.com\/#organization","name":"E-sec Seguran\u00e7a Digital","url":"https:\/\/certillion.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/certillion.com\/#\/schema\/logo\/image\/","url":"https:\/\/certillion.com\/wp-content\/uploads\/2021\/07\/Certillion-Dark.svg","contentUrl":"https:\/\/certillion.com\/wp-content\/uploads\/2021\/07\/Certillion-Dark.svg","width":218,"height":62,"caption":"E-sec Seguran\u00e7a Digital"},"image":{"@id":"https:\/\/certillion.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/certillion","https:\/\/www.linkedin.com\/company\/certillion\/","https:\/\/www.instagram.com\/certillion\/"]}]}},"_links":{"self":[{"href":"https:\/\/certillion.com\/en\/wp-json\/wp\/v2\/pages\/9722","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/certillion.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/certillion.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/certillion.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/certillion.com\/en\/wp-json\/wp\/v2\/comments?post=9722"}],"version-history":[{"count":0,"href":"https:\/\/certillion.com\/en\/wp-json\/wp\/v2\/pages\/9722\/revisions"}],"wp:attachment":[{"href":"https:\/\/certillion.com\/en\/wp-json\/wp\/v2\/media?parent=9722"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}