![\"Browser](\"https://www.pki.network/images/v5/1920/home-bss.png\")
\n\nCapricorn CA offers Browser Signing Solution that ensure the legitimacy of signers and the data integrity of electronic documents in a secure and easy-to-use manner. We offer all PKI solutions, you could design and manage the complete business workflow of PKI operations using our API Commands. Right from signing to encryption to authentication, our Browser Signing Solution will do it all.
\nThis solution allows for the most effective use of digital signatures & will provide you the benefit involving Streamlined Business Processes, Non - Repudiation & Security.
\nWindow 7 or above
\nVersion 4.5.2 of the .NET framework must be there
\n64-Bit or 32-Bit Architecture is Supported
\nBrowser Signing Solution Installer file. [ Download from website ]
\nWindow base PC [ With minimum requirements ]
\nFIPS 140 level 2-3 USB token with Digital signature certificate
\nDigital signature certificates all is issued under the X.509 standard
\nBrowser Signing Solution License key
\nWhitelisted Infra (CRL and Sub CA)
\nSigning
\nEncryption
\nSupporting files are [ TXT, XML, PDF, HASH ]
\nThis Application performs several operations related to Signing and Encryption, according to the specific requirement.
\nThere is no involvement of the established resources at the server's end, and the entire processes are carried out at the client's end local machine.
\nThere is no communication between the client’s machine and Capricorn's Infrastructure while completing the signing and encryption operation.
\nConnectivity is required when license key entered (https://www.pki.network/).
\nRequest Format Description:
\nTag Name | Data Type | Requirement | Description |
request | sub-tags | Mandatory | This tag includes his child tag of the request format. |
command | String | Mandatory | This is the actual command to help you perform operations using our applications. |
ts | Date (ISO format) | Optional | This is the request timestamp. The timestamp value must be 30 seconds before or after the current time. |
txn | String | Optional | A unique ID could be passed with each Signing Request, it would help Web Application to get the response and map it to correct request. |
certificate | sub-tags | Mandatory | This tag contains details about the user's certificate and the type of certificate. |
attribute name=\"CN\" | String | Optional | This field contains the certificate's Common name value from the certifcate subject. |
attribute name='O' | String | Optional | This field contains the certificate's Organigation value from the certifcate subject. |
attribute name=\"OU\" | String | Optional | This field contains the certificate's Organization Unit value from the certifcate subject. |
attribute name=\"T\" | String | Optional | This field contains the certificate's Title value from the certifcate subject. |
attribute name=\"E\" | String | Optional | This field contains the certificate's email value from the certifcate subject. |
attribute name=\"SN\" | String | Optional | This field contains the certificate's Serial number from the certificate. |
attribute name=\"CA\" | String | Optional | This field contains value Issuer of the certficate. |
attribute name=\"TC\" | String | Mandatory | This field specifies the type of certificate. allowed Value is [ SG, EN ] SG=Signing CertifcateEN=Encryption Certificate |
attribute name=\"AP\" | Number | Mandatory | This is for PKI Internal process. allowed value is 1. |
file | sub-tags | Mandatory | This tool contains info about file type and file path. |
name='inputfile' | String | Optional | Relative path of the file to be sign. |
name='outputfile' | String | Optional | Relative path for output of signe file. |
pdf | sub-tags | Mandatory | All about PDF signature configration. |
page | String | mandatory | Use any one keyword from the list or Specify page number to be signed. [all, last, first] Note: Zero is not allowed. |
cood | Number, Number | Mandatory | Specify coordination for signature box [ x, y ] Note: Zero is not allowed. |
size | Number, Number | Mandatory | This field define signature size in width and height. [ width, height ] Note: Zero is not allowed. |
enableltv | String | Mandatory | This field control Long term validation of the signature. Allowed value is [ YES, NO ] |
invisiblesign | String | Mandatory | This field control visibility of the signature. Allowed value is [ YES, NO ] |
enabletimestamp | String | Mandatory | This field control signture timestap in signature. Allowed value is [ YES, NO ] |
location | String | Optional | This field allow to include custom text in the signature appearence as location. e.g: Delhi. |
reason | String | Optional | This field allow to include custom text in the signature appearence as signing reason. e.g: Signed by _NAME_. |
dateformat | String | Optional | This field allow to format date appearence on the signature. Allowed value: dd-MMM-yyyy hh:mm tt |
customtext | String | Optional | This field allow to include custom text in the signature appearence as signing reason. |
data | String | Optional | This field contains actual PDF file data in base64 and url-encoded. |
Note: \"name='inputfile'\" and \"data\" One of these two fields is mandatory.
\n","schema":"https://schema.getpostman.com/json/collection/v2.0.0/collection.json","toc":[],"owner":"30880543","collectionId":"f0c622ec-8476-47f2-81f0-e66c65e367b0","publishedId":"2sB34bKNug","public":true,"customColor":{"top-bar":"FFFFFF","right-sidebar":"303030","highlight":"FF6C37"},"publishDate":"2025-07-03T05:46:16.000Z"},"item":[{"name":"pkiNetworkSign","item":[{"name":"JSON","event":[{"listen":"prerequest","script":{"id":"95efdc02-366a-4f29-a429-ca0f8ad0f1a8","exec":["// URL of the PDF\r","const pdfUrl = \"https://mag.wcoomd.org/uploads/2018/05/blank.pdf\";\r","\r","// Fetch PDF as array buffer\r","pm.sendRequest({\r"," url: pdfUrl,\r"," method: 'GET',\r"," responseType: 'arraybuffer'\r","}, function (err, res) {\r"," if (err) {\r"," console.error(\"Error fetching PDF:\", err);\r"," } else {\r"," // Convert ArrayBuffer to Base64\r"," const buffer = res.stream;\r"," let binary = '';\r"," const bytes = new Uint8Array(buffer);\r"," const len = bytes.byteLength;\r","\r"," for (let i = 0; i < len; i++) {\r"," binary += String.fromCharCode(bytes[i]);\r"," }\r","\r"," const base64Pdf = btoa(binary);\r","\r"," // Save Base64 string in Postman environment variable\r"," pm.environment.set(\"pdf_base64\", base64Pdf);\r"," }\r","});\r",""],"type":"text/javascript","packages":{},"requests":{}}}],"id":"cb49010e-517e-4c43-ab80-d7d044238e09","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[],"body":{"mode":"raw","raw":"{\r\n \"request\": {\r\n \"command\": \"pkiNetworkSign\",\r\n \"ts\": \"2026-04-30T17:31:37.469Z\",\r\n \"txn\": \"\",\r\n \"certificate\": {\r\n \"attribute\": [\r\n \"AP=1\",\r\n \"CN=\",\r\n \"SN=\",\r\n \"TC=SG\"\r\n ]\r\n },\r\n \"file\": {\r\n \"attribute\": [\r\n \"type=pdf\"\r\n ]\r\n },\r\n \"pdf\": {\r\n \"cood\": \"295,111\",\r\n \"page\": \"1\",\r\n \"size\": \"260,358\",\r\n \"location\": \"Oak Park\",\r\n \"enableltv\": \"no\",\r\n \"enabletimestamp\": \"no\",\r\n \"greentick\": \"no\",\r\n \"invisiblesign\": \"no\",\r\n \"lock\": \"no\",\r\n \"reason\": \"Sign by Margarita Jenkins\",\r\n \"dateformat\": \"dd-MMM-yyyy hh:mm tt\",\r\n \"customtext\": \"InvoiceSign : Capricorn Test\"\r\n },\r\n \"data\": \"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\"\r\n }\r\n}","options":{"raw":{"language":"json"}}},"url":"http://127.0.0.1:1620","urlObject":{"protocol":"http","port":"1620","host":["127","0","0","1"],"query":[],"variable":[]}},"response":[{"id":"61dcbf7d-2439-44e9-8b17-098c02a8a35d","name":"JSON","originalRequest":{"method":"POST","header":[],"body":{"mode":"raw","raw":"This refers to digitally signing a document, message, or piece of data. When a document is signed, the signer's private key is used to create a unique signature that verifies the document was signed by the specific person or entity.
\nThis command is used to sign XML, JSON, TEXT, and PDF files, data has to be passed in Base64.
\nIn the signing application, the pkiNetworkSign command is used to sign documents. To sign a document, a certificate is required. You can provide the certificate in the request in two ways:
By passing the certificate’s serial number directly in the request.
\nIf the serial number is not provided, and multiple certificates are registered in the signing application, a popup will prompt the user to manually select a certificate. If only one certificate is registered, the application will automatically use the registered certificate.
\nA hash is a cryptographic fingerprint of a file or message. The hash is generated first (via a hashing algorithm) and then signed with the private key of the signer. This provides both the authenticity and integrity of the file.
\nIn a signing application, the pkiNetworkSignHash command is used to sign the hash of the data instead of signing the Base64-encoded data directly.
A sign hash involves signing the cryptographic hash of a message or file using a private key.
\nSteps in Signing a Hash:
\nInput Data: The user provides data (message, file, transaction) to be signed.
\nHashing the Data: The signing tool creates a cryptographic hash (e.g., SHA-256) of the input data.
\nSigning the Hash: The tool signs the hash using the user’s private key, producing a digital signature.
\nOutput: The tool outputs the digital signature, which is unique to both the message and the private key.
\nVerification: The recipient can verify the signature by hashing the original data and using the sender's public key to confirm the integrity.
\nThe response usually contains only the certificate details, such as the issuer, subject, and validity period, rather than the signed hash. This ensures the authenticity of the signer and confirms that the certificate used for signing is valid and trusted.
\nIn a signing application, the pkiNetworkFileSign command allows the user to select a file from their computer, convert it into Base64 format, and then encrypt it with a private key to generate a secure digital signature.
File Signing Process:
\nThe command is executed to sign a file directly from the client machine.
\nFile Browser window: When the command is triggered, it opens a File Browser window on the user's device.
\nSelect the file: The user selects the file they want to sign from their local system.
\nBase64 Conversion: Once the file is selected, it is converted into Base64. Base64 encoding transforms the file into a text-based format, which is easier to handle for digital processing (like encryption).
\nEncryption: After conversion, the file (in Base64 format) is encrypted using a private key, generating a secure digital signature.
\nIn a signing application, the pkiNetworkVerSign command is used to verify that the digital signature attached to a document (whether it's in text, PDF, XML, JSON, or another format) is valid, meaning the document is authentic, unaltered, and signed by the correct individual or entity.
The verification process involves checking the document's integrity and comparing the decrypted signature with the document's contents using cryptographic methods.
\nExtract the Signature from the Document
\nThe document contains a digital signature, usually in the form of a hash value.
\nThe signature is paired with metadata that contains information like the public key used for verification, the signer's identity, the signing time, etc.
\nCheck the Integrity of the Document
\nWhen you pass the document through the signature verification process, the system checks if the content of the document has been modified since it was signed.
\nThis is done by comparing the hash value of the document before and after the signature was applied.
\nIf they match, the document has not been tampered with.
\nUse the Public Key to Verify the Signature
\nThe system will use the public key of the signer to decrypt the digital signature.
\nThe decrypted value is compared with the hash of the document. If they match, the signature is valid, and the document has been verified as authentic.
\nValidate the Signer's Identity and Trustworthiness
\nWhat Happens If Verification Fails?
\nSignature Mismatch: If the calculated hash of the document does not match the decrypted signature's hash, it indicates that the document has been tampered with or is not the original version.
\nInvalid Public Key: If the public key does not correspond to the claimed signer (or is revoked), the signature verification will fail.
\nTrust Issues: If the certificate or public key is not trusted or expired, the verification process may fail, even if the signature itself is correct.
\nIn a signing application, the pkiNetworkCertExt command is used to extract detailed information from a digital certificate, such as the issuer, subject, validity dates, and public key, and returns this data in an XML format.
No extra attributes or inputs are needed for the command to work, simplifying the process of getting certificate details.
\nThis command allows you to retrieve important details from a certificate, which can be helpful for Validating the certificate's authenticity, troubleshooting issues and Security audits.
\nWhat Does This Command Do?
\nWhen you run this command, it extracts all the details from the digital certificate and returns them in XML format. Here’s what happens:
\nNo Input Required: You don’t need to provide any extra details or attributes with the command (like the certificate's location or file type). The system will automatically locate and read the certificate.
\nExtracting Certificate Information: The system looks at the certificate and extracts all the relevant information such as:
\nIssuer details (who issued the certificate).
\nSubject details (who the certificate is for).
\nValidity period (start and end date).
\nSerial number.
\nPublic key information.
\nSignature algorithm.
\nOther metadata about the certificate.
\nIn a signing application, the pkiNetworkCertAuth command is used to validate the data and the certificate details associated with a digitally signed document or message. The system checks if:
The data is complete and unchanged (it hasn’t been altered).
\nThe certificate used to sign the data is trusted, valid, and hasn’t expired or been revoked.
\nIt then responds with either \"Valid\" or \"Not Valid\" based on whether everything checks out. You can pass any additional attributes (certificate details, signed data, etc.) as needed for the validation.
\nCertificate Authenticate Process:
\nYou Pass the Data and Certificate Details
\nData Validation
\nThe command checks if the data has been altered.
\nIt compares the hash of the current data to the hash that was used when the data was originally signed.
\nIf they match, the data is considered intact and not tampered with.
\nCertificate Validation
\nIt checks whether the certificate is trusted (whether it's issued by a valid Certificate Authority).
\nIt confirms if the certificate is still valid (i.e., not expired).
\nIt checks if the certificate has been revoked or if it’s still valid for signing data.
\nResponse
\n\"Valid\": If the data is complete and unchanged (it hasn’t been altered). and the certificate is genuine, trusted, and valid.
\n\"Not Valid\": If either the data has been tampered with, or the certificate is invalid (expired, revoked, or untrusted).
\nThis refers to the process of transforming readable data (plaintext) into an unreadable format (ciphertext) using an encryption algorithm.
\nOnly those who have the correct decryption key can convert the data back to its original form.
\nEncryption ensures the confidentiality of data and prevents unauthorized access during transmission.
\nTo encrypting a document, message, or piece of data. When a document is encrypted, the recipient's public key is used to convert the document into a secure format that can only be decrypted by the specific recipient with their private key.
\nThis command is used to encrypt XML, JSON, TEXT, and PDF files, with data being passed in Base64.
\nIn the encryption process, the pkiNetworkEnc command is used to encrypt documents. To encrypt a document, a certificate is required. You can provide the certificate in the request in two ways:
By passing the certificate’s serial number directly in the request.
\nIf the serial number is not provided, and multiple certificates are registered in the encryption application, a popup will prompt the user to manually select a certificate. If only one certificate is registered, the application will automatically use the registered certificate.
\nIn the encryption signing process, the pkiNetworkEncSign command is used to encrypt a block of data within a Text file. The data is first transformed into an unreadable format using the recipient’s public key (encryption).
Once the data is encrypted, it is then signed using a Digital Signature Certificate (DSC). The signing process involves applying a unique signature to the encrypted data using the signer’s private key.
\nSo, the process follows these steps:
\nEncryption: A specific block of the text file is encrypted using the recipient's public key, ensuring that only the recipient with the matching private key can decrypt and read the data.
\nDigital Signing: After the encryption, the encrypted data is signed with the selected DSC using the signer’s private key to ensure data integrity and authenticity.
\nThis combined action guarantees that the data is both confidential (due to encryption) and tamper-proof (due to the digital signature).
\nIn an encryption process, the pkiNetworkFileEnc command allows the user to select a file from their computer, convert it into Base64 format, and then encrypt it with a recipient's public key to ensure the confidentiality of the file.
File Encryption Process:
\nThe command is executed to encrypt a file directly from the client machine.
\nFile Browser window: When the command is triggered, it opens a File Browser window on the user's device.
\nSelect the file: The user selects the file they want to encrypt from their local system.
\nBase64 Conversion: Once the file is selected, it is converted into Base64. Base64 encoding transforms the file into a text-based format, which is easier to handle for encryption.
\nEncryption: After conversion, the file (in Base64 format) is encrypted using the recipient's public key, generating a secure, unreadable version of the file that can only be decrypted by the recipient with their private key.
\nIn an encryption and signing process, the pkiNetworkFileEncSign command allows the user to select a file from their computer, convert it into Base64 format, encrypt it with a recipient's public key to ensure confidentiality, and then sign it with the user's private key to ensure authenticity and integrity.
The pkiNetworkFileEncSign command ensures that the file is both confidential (through encryption using the recipient's public key) and trustworthy (through signing using the signer's private key). This combined approach guarantees the file is secure during transmission and authentic when received by the recipient.
File Encryption and Signing Process:
\nCommand Execution: The command is executed to encrypt and sign a file directly from the client machine.
\nFile Browser window: When the command is triggered, it opens a File Browser window on the user's device.
\nSelect the file: The user selects the file they want to encrypt and sign from their local system.
\nBase64 Conversion: Once the file is selected, it is converted into Base64. Base64 encoding transforms the file into a text-based format, which is easier to handle for both encryption and signing.
\nEncryption: After conversion, the file (in Base64 format) is encrypted using the recipient's public key. This ensures that only the recipient with the matching private key can decrypt and read the file.
\nSigning: After encryption, the file (now in Base64 encrypted format) is signed using the signer's private key. This generates a secure digital signature for the encrypted file, ensuring the file’s authenticity (proving it came from the signer) and integrity (confirming that the file has not been tampered with).
\nIn a signing application, the pkiNetworkVerSign2.0 command is used to verify that the digital signature attached to a document (whether it's in text, PDF, XML, JSON, or another format) is valid, meaning the document is authentic, unaltered, and signed by the correct individual or entity.
\nThe verification process involves checking the document's integrity and comparing the decrypted signature with the document's contents using cryptographic methods.
\n