Test certificate portal only issues EC (P-256) certificates; documentation states RSA is also supported

[MahogaWeerasinghe]

We are currently testing our implementation against the KSeF test environment. To do this, we used this portal to generate a dummy certificate and private key for authentication.

After downloading the certificate, we found that it uses an ECDSA P-256 key pair. However, the documentation states that RSA (2048-bit) keys are also supported for KSeF certificates, alongside EC.

1. Does the test certificate portal support generating RSA certificates, or is it currently EC-only?
2. Could you provide guidance, or a sample RSA certificate and private key — for testing purposes, so we can verify our integration handles RSA-based certificates correctly?

Note : We planning to use them to Authentication using XAdES signature

[Dzyszla]

1. No, EC only.
2. You can create it yourself by request POST certificates/enrollments or using any tool for create certificate with required properties - certificate for test environment can be self-signed.

[MahogaWeerasinghe]

Thanks @Dzyszla for your quick reply

[MahogaWeerasinghe]

Currently, I've implemented support for customers to use RSA keys. Will that be an issue in the future?

[Dzyszla]

Creating RSA is available only via API, and will never do via government web app.

BTW, RSA is very old algorithm with low security level. The future is ECDSA ;)

[MahogaWeerasinghe]

Thanks, @Dzyszla, I will extend the development use with ECDSA.