Countersignature or second signature? A practical guide for PAdES/XAdES

With PDF (PAdES), you'll usually add a second signature, but with XAdES/CAdES sometimes a counter-signature is better. See how to choose the right variant, how to set up proCertum SmartSign (Certum Mini / SimplySign) and how to add a timestamp to preserve LTV.
Countersignature in a qualified signature - what it is, when it is useful and how to do it in proCertum SmartSign
5-minute read Updated: August 18, 2026

Countersignature in a qualified signature - what it is, when it is useful and how to do it in proCertum SmartSign (Certum Mini / SimplySign)

Bottom line: countersignature is a signature made on an already existing signature. This is not a simple „second signature to the document” (co-signature), but a acknowledgement of someone else's signature - For example, when a supervisor, legal counsel or CFO formally approves the signature of an employee or board member.

In corporate circulation, more often than not, a simple co-signature under the document, but where the procedure requires a „signature on the signature,” you use the countersignatures.

When does countersignature make sense?

  • Acceptance of someone else's signature (compliance, audit): You are confirming a specific signature action by a particular person.
  • Formal and legal control: lawyer/finance (CFO) countersign the director's signature on a key document.
  • Internal Policies: when the instructions say „validate X's signature,” not „sign the document together with X.”.

     

If the company's articles of incorporation simply refer to joint representation (two signatures), in the PDFs (PAdES) is usually used second independent signature. Countersignature is sometimes a natural choice when XAdES/CAdES (external signatures) and specific confirmation procedures.

Certum Mini or SimplySign? Both work

  • Certum Mini (card + USB reader): allows you to sign offline (without Internet) - useful in environments with higher security regimes.
  • SimplySign (mobile/cloud signature): convenience and speed, works online (along with SimplySign Desktop on the computer).

proCertum SmartSign supports both solutions - you can countersign regardless of whether you use a card (Certum Mini) or a mobile signature (SimplySign). 

 

How to make a countersignature in proCertum SmartSign - step by step

The diagram below is according to the official instructions Certum.

  1. Prepare your tools

     

    • Insert card Certum Mini or log on to SimplySign Desktop.
    • Make sure you have current proCertum SmartSign (Check the version on the home screen; download the latest one from the site Certum).
Countersignature or second signature? A practical guide for PAdES/XAdES
2. determine the type of previous signature
    • If the document has external signature (separate signature file) - go straight to the signing stage.
    • If the document has internal signature (content and signature in one file), use the option „Save Content”.”, to extract the signed content - if the button is active.

 

3. initiate countersignature
    • In SmartSign, go to Signing → Add file → Sign.
    • Select your certificate (from a card or SimplySign).
    • The program detects that the document was already signed and prompts for an action - select „Counter-sign.”.
    • Point to specific signature, which you want to countersign, enter the PIN and confirm. After a while, you will see a success message. 
Countersignature or second signature? A practical guide for PAdES/XAdES

Practical note: in PDF (PAdES) business you usually use second signature under the document (co-signature), because it is more legible in the signature panel.

Counter-signature is more often used in XAdES/CAdES (external signatures).

Countersignature or second signature? A practical guide for PAdES/XAdES

Countersignature vs. timestamping and archiving - what to do to make a document „survive” years

Qualified signature by itself does not guarantee perpetual verifiability. The certificate will expire (usually after 1-3 years), and verification sources are not maintained indefinitely. Therefore, for a long retention period, the key qualified time stamp. He is the one who confirms, that specific document existed at the time and was not altered - Even when the signer's certificate has already expired.

How to put it together in practice (according to our „offline” guide)

Our guide here

  • Rule 1: Add a qualified timestamp to any valid document. In SimplySign and Certum Mini, you can include it automatically when signing either add later (when you have access to the Internet).
  • Rule 2: „Simply tacking” a tag onto a finished file does not exist - technically you add another signature containing a timestamp, or (for an external signature) you replace the existing signature with a version with a marker or you add a countersignature with a marker. 
  • Rule 3: Archive locally (offline) According to the procedure: format PDF/PAdES as the default „on the shelf,” store external files (XAdES/CAdES) together with the signature file, maintain metadata (signature, date, type, hash) and backups.

Best practices from the podpisano.pl experience

  1. Verify before countersignature. In SmartSign, you have the ability to verify signatures „in plain sight” - before you add another layer, check that the previous one is correct.
  2. Always turn on the time stamp With documents that are supposed to live longer than the certificate. This is the easiest way to LTV (long-term validation).
  3. Offline/online without conflicts. Certum Mini: you can sign offline, and add the marker later as another signature or countersignature (for external signature). SimplySign: works online - you attach the tag „on the spot”.
  4. Readability for the recipient. In PDFs, usually choose second signature (co-signature) - the recipient sees „two signers”. A countersignature makes sense when you want to clearly show the approval of someone else's signature (e.g., formal compliance).
  5. Settings in SmartSign under control. W Settings → Signature you can indicate the type (internal/external.), set PAdES for PDF and display the reason for the signature - it's worth configuring this once, according to company policy.

FAQ

Does the countersignature require another certificate?

No. You use of the same qualified certificate - on Certum Mini either in SimplySign. SmartSign itself will recognize the previous signature and propose an action „Counter-sign.”.

Is it necessary to do a countersignature in PDF (PAdES)?

In business practice - rarely. Most often you add second signature Under the document (co-signature). Counter-signature is more common in XAdES/CAdES (external signature) and where the policy requires proof of specific signature. 

How to add a time stamp after signing?

For the signature internal (e.g., PAdES) – add another signature With a timestamp.
For external (XAdES/CAdES) - you can replace signature version with a marker, add another signature with a marker or countersigned by containing the tag. Podpisano.pl

Is it possible to sign and archive „fully offline”?

Yes - alone signature you can submit offline (Certum Mini + SmartSign). Timestamp requires an Internet connection - you can add it later, as another operation. Podpisano.pl

Qualified signatures SimplySign and Certum Mini

If you have any concerns or questions, please contact us

+48 22 417 05 55

We'll answer your questions, find a time that works for you, and match you with an advisor at one of our locations throughout Poland.

You can also write an email from us [email protected]. 

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.

Check also:

Do you need help?

Find what you're looking for