Manage eIDAS QWAC and PSD2 QWAC certificates at scale
Issue, automate, renew, and govern eIDAS Qualified Website Authentication Certificates (QWACs) and PSD2 certificates through a single certificate lifecycle management platform.
Every certificate in one place. Now including eIDAS.
Sectigo Certificate Manager (SCM) manages QWAC and PSD2 certificates through the same lifecycle as your SSL and private certificates. Issue, renew, and automate every certificate you own from one platform, with centralized visibility, unified reporting, and API-driven control built for enterprise scale.
eIDAS certificate lifecycle management within Sectigo Certificate Manager
Built for enterprise certificate operations
A certificate should behave the same way whatever type it is. SCM extends your existing SSL workflows to eIDAS compliant certificates, so your team issues, renews, replaces, and revokes QWAC and PSD2 certificates from an interface they already know. Track inventory, monitor usage, generate reports, and configure notifications across all of it within SCM from a single portal.
As inventories grow, Sectigo Orchestration Gateway, ACME, and REST APIs keep every certificate current through one automation model, so operations scale with no separate tooling to maintain.
Support for QWAC and PSD2 QWAC Certificates
Whether you secure public-facing digital services or support Open Banking, SCM gives you one place to manage both certificate types.
QWAC certificates: Trusted identity for websites and online services
A QWAC confirms the legal entity behind a website using validated organizational information, and provides TLS encryption for secure communication. Enterprises, public institutions, and regulated organizations across the EU use QWACs to prove who they are online.
Typical use cases
PSD2 QWAC Certificates: Trusted communication across banking and payment ecosystems
A PSD2 QWAC certificate carries everything a QWAC does, then adds what regulated payment service providers need. It is issued only to organizations authorized by a National Competent Authority (NCA).
Typical use cases
Understanding the difference
In short: A QWAC certificate verifies the organization behind a website. A PSD2 QWAC certificate verifies that organization and its authorization to operate in regulated payment ecosystems.
| PSD2 QWAC | QWAC | ||
|---|---|---|---|
| Website authentication | |||
| TLS encryption | |||
| Organization identity validation | |||
| Payment service provider validation | |||
| NCA authorization verification | |||
| Open Banking support | |||
Issued and managed by a Qualified Trust Service Provider
As a Qualified Trust Service Provider (QTSP) under eIDAS, Sectigo issues the qualified certificates behind secure digital signatures, seals, timestamps, and website authentication, then lets you manage them in SCM. You get qualified, compliant certificates and the automation, visibility, and governance to run them, all under one roof.
Why teams choose SCM
Consolidate certificate operations
Manage more certificate types from a single platform.
Automate across every environment
Extend proven automation to regulated certificates.
See everything in one view
Inventory, reporting, lifecycle status, and usage from one place.
Meet compliance with confidence
Certificate-specific validation handled through built-in workflows, backed by Sectigo's CA-grade governance and eIDAS standards leadership.
Scale without adding overhead
TLS/SSL, private PKI, and eIDAS certificates under one management framework.
Extend your certificate lifecycle strategy to eIDAS
Manage QWAC and PSD2 certificates with the same automation, visibility, and control you already trust in SCM.