How long the digital certificate takes and how to renew it

What it is actually for

The digital certificate is the file that identifies you online to the Spanish administration with the same validity as turning up in person. With it you can file taxes, read and respond to notifications from the Agencia Tributaria, request Social Security certificates, deal with the town hall, check your driving licence points at the DGT or sign documents electronically.

For a foreigner with interests in Spain — a property, a business, a company — it stops being a convenience the moment the first electronic notification arrives, because those notifications run deadlines whether or not you read them.

The three steps, and how long each takes

1. Requesting the code

This is done on the FNMT website by entering your NIF or NIE, your first surname and an email address. The system returns a request code immediately, by email. Real time: minutes.

One detail that causes a great many restarts: the request, the identity check and the download must all be done on the same computer and the same browser, without reformatting or switching machines in between, because the private key is generated on that device when you request the code.

2. Verifying your identity

With the request code you have to attend a registration office in person, with your passport or identity document and your NIE. The network of offices is wide: Agencia Tributaria branches, Social Security offices, many town halls and other public bodies.

This is the step that sets the overall timescale. The procedure itself takes a few minutes, but it depends on appointment availability, which varies a great deal by office and time of year. During the income tax campaign the diaries tighten noticeably.

3. Downloading

After the identity check you wait a short while — the FNMT states at least one hour — and download the certificate from the same site, using the request code, on the same machine. Real time: minutes.

If you are not in Spain

The identity check can be carried out at Spanish consular offices abroad, which avoids the trip. There are also remote routes in certain cases, such as verification with an electronic DNI or through video identification systems. Which one is open to you depends on your documents and your situation, so it is worth confirming before you start: beginning down the wrong route means starting again from scratch.

Make the backup the same day

Once it is installed, export the certificate to a password-protected .pfx or .p12 file and keep it somewhere safe. This is the step most people skip and the one that prevents the most grief: if you change computer, reformat or the machine breaks without that copy, the certificate cannot be recovered and you have to apply again from step one, appointment included.

How long it lasts and how to renew it

The certificate for an individual is valid for four years. The certificate for a company representative has a shorter life, so companies need to watch their calendar more often.

Renewal is straightforward if done in time: during the run-up to the expiry date — the FNMT opens a sixty-day window — it can be renewed online, without attending a registration office again, provided the certificate is still valid and installed on the machine. It is a matter of minutes.

If you let the date pass, that window closes: an expired certificate cannot be renewed, you have to request a new one and go through the in-person check again. Put another way, forgetting to renew does not cost you a few minutes, it costs you an appointment.

What happens when it expires

It stops being valid for identifying yourself and signing, and you lose access to the online platforms until you have a new one. The important part is that administrative deadlines do not stop: if you have electronic notifications switched on, they keep being deposited and keep running even though you cannot open them. That is the real risk of expiry, rather than the inconvenience of the paperwork. We also cover it in this frequently asked question.

Alternatives and limits

For many procedures Cl@ve exists as an alternative identification system, but it does not cover every case and does not replace the certificate where you are acting as a representative or signing certain documents. And although the certificate works for the vast majority of procedures, some specific ones still require you to appear in person or to hold a particular type of certificate.

At Asistenio we handle the request, accompany you to the identity check, install the certificate and make the backup with you, and warn you before it expires so it can be renewed in time. There is more detail on the digital certificate service page.