Authorized representative approval delegation
For QWAC, QWAC PSD2, and PKIo Private Services Server certificates
DigiCert offers an automated delegation process in CertCentral Europe for streamlining certificate issuance for Qualified Website Authentication Certificates (QWAC), QWAC PSD2, and PKIo Private Services Server certificates.
The system eliminates repeated manual approvals while maintaining compliance. Organizations can request multiple certificates in CertCentral Europe or via the CertCentral Services API while maintaining compliance with authorization requirements.
Certificates are issued immediately when domain and organization validation are complete and payment service provider role confirmation (for QWAC PSD2).
How does the delegation process work?
DigiCert validates an authorized representative to approve specific types of certificate orders for your organization:
QWAC
QWAC PSD2
PKIo Private Services Server
Organizations can delegate approval authority for the types of certificates the authorized representative is authorized to approve.
From a user or service user details page in CertCentral Europe, submit a delegation request.
CertCentral sends the authorized representative an email titled: "Request to delegate authority for approving EU TLS orders."
The authorized representative completes a one-time approval action.
Track the request status (pending, approved, rejected) from the user or service user details page.
When approved, CertCentral automatically applies the delegated approval to certificate orders submitted by that user or service user. The authorized representative must be included in the order.
Delegation scope and eligible roles
Scope of approval
Delegated approvers are authorized to approve the same types of certificates the authorized representative is authorized to approve.
If the representative is authorized for PKIo Private Services Server certificates, the delegated approver cannot approve QWAC or QWAC PSD2 orders.
Eligible roles for delegation
Authorized representatives can delegate authority to:
Administrators
Managers
Service users
Authorized representatives can’t delegate authority to:
Finance Managers
Standard Users
Limited Users
Service users
Service users have API-only access to your CertCentral account. You must be administrator to create service users Service users inherit the administrator’s permissions. Learn more about adding a service user.
Order requirement
The delegated approver must include the authorized representative who delegated their approval authority to them in each order.
If that authorized representative isn’t included, the order follows the standard authorized representative approval process.