Loading Singpass root signing certificate

In order to verify if a Sign with Singpass signature is valid, see here.

From February 2025 onwards, some Singpass Signing Certificates will be issued by a new Root CA. Please ensure that you load both Root CA Certificates (Step 1a and 1b) in your Adobe Acrobat Reader in order to validate your documents.

Before that, the Singpass root signing certificates must be installed on your device. If you do not have the Singpass root signing certificates on your device, please follow the steps below.

For government agencies, this should already be automatically available on your GSIB. If it is not, please raise a ticket to AFM to push “GSSP_Acrobat Reader Digital Signature Fix_2.0” to the agency's GSIBs. For the rest of the agencies, you may follow the steps below or approach your IT department to push the certificates so that it applies across your agency.

1. There are 2 Singpass root signing certificates that you should download.

   1. Go to IMDA's website and download Root CA: Singapore National Root CA - G1 Certificate.

      

      In your folder that you have chosen, you should find the file SNRCA-G1.cer.

   2. Download the GovTech Root CA - B1 Certificate from NCA. In your folder that you have chosen, you should find the file RCA-B1.crt.

2. In your folder that you have chosen, you should find the files

   1. SNRCA-G1.cer.

   

   1. RCA-B1.crt

   

1. Open Adobe PDF reader. If you do not have this, you may download and install here.

1. Click "Acrobat Reader" on the top left.

1. Navigate to "Preferences"

1. Under Categories, find and click "Signatures".

1. Click "more" under Identities and Trusted Certificates.

1. Click on "Trusted Certificates"

1. Click Import

1. Under contacts, click "Browse" and choose the certificates you have downloaded in earlier step.

1. Under certificates, click on Singapore National Root CA - G1 and then click Trust

1. Check "Use this certificate as a trusted root" with a tick and press OK

1. Click on Import

You should now be able to see Singapore National Root CA - G1 under your Trusted Certificates.

Repeat the same steps for the 2nd root certificate. At the end of the steps, you should be able to see Singapore National Root CA - B1 under your Trusted Certificates

1. Enable certification revocation checking This can be found under preferences > signatures > verification

All done!