How certificate-based signing works
Public key infrastructure (PKI) uses digital certificates to associate an identity with a public key. A digital signature is created using the corresponding private key. A verifier uses the public key and certificate information to check the signature.
This is different from placing an image of a signature on a page. Cryptographic verification can detect changes to signed content; an image alone cannot provide that check.
Certificate authority backing
BCC-CA provides digital certificates and PKI services within Bangladesh’s certifying authority framework. A verifier should inspect the certificate chain, certificate status, and the signed document rather than relying only on a visible signature graphic.
Your authorisation matters
A QuickPass account is required to access QuickSign. Complete the prescribed identity and device registration steps, then review signing requests before authorising them on your registered phone.
- Approve only a signing request you initiated or expected.
- Keep your PIN and other authentication information private.
- Contact support if your registered phone is lost or replaced.
Verification after signing
Keep the original signed file. Converting it, printing and scanning it, or modifying signed content can affect what a recipient can verify. Use CCA’s digital signature verifier or another compatible tool to review the signature results.
A signature check should consider document integrity and the certificate’s validity or revocation status. The result depends on the verifier and the information available to it.
Bangladesh’s legal and regulatory framework
The ICT Act, 2006, its applicable amendments, and the Information Technology (Certifying Authority) Rules, 2010 form part of Bangladesh’s digital signature framework. Consult CCA’s legislation and published regulations for authoritative texts.
Recognition in a particular transaction depends on its legal and procedural requirements. Check those requirements with the receiving organisation. This site does not claim eIDAS qualification or equivalence.
Data handling
This informational website has no document upload, sign-in form, enquiry form, or analytics. Signing takes place on the separate QuickSign portal. QuickPass, the portal, app stores, and linked services have their own data handling practices.
A hosting provider may process routine request information when serving this site. For the signing service’s document retention, storage location, encryption, deletion, or access policies, request the current official terms from BCC-CA support before submitting sensitive material.
A digital signature protects verifiability; it does not by itself make the contents of a document confidential. Share documents only through channels appropriate for their content.
Sources: BCC-CA, BCC-CA policies and manuals, and CCA legislation and regulations linked above.