# Digital certificates ## Definition Soffid includes Digital certificate functionality as a security enhancement. You could add new Digital certificates, internal or external. If you select the external certificate, you could add a valid certificate to Soffid; If you select the internal certificate, Soffidl will generate a valid certificate. ## Screen Overview #### Internal [![image-1695885525346.png](https://bookstack.soffid.com/uploads/images/gallery/2023-09/scaled-1680-/image-1695885525346.png)](https://bookstack.soffid.com/uploads/images/gallery/2023-09/image-1695885525346.png) #### External [![image-1695885507434.png](https://bookstack.soffid.com/uploads/images/gallery/2023-09/scaled-1680-/image-1695885507434.png)](https://bookstack.soffid.com/uploads/images/gallery/2023-09/image-1695885507434.png) ## Standard attributes #### Internal - **Organization name** - **Expiration date**: referring to the root certificate. - **Device certificate**: Indicates if the certificate is for a device - **Certificate duration (months)**: Referring to users' certificates. #### External - **Certificate**: File .pk12 - **Organization name** - **Device certificate: Indicates if the certificate is for a device** - **Script to guess the certificate owner**: script to compute the user name. Can use the certificate and subject variables. Should return a valid user name. ## Actions #### Digital certificates query
**Add new**Allows you to add a new certificate. You can choose that option on the hamburger menu or click the add button (+). To add a new certificate it will be mandatory to fill in the required fields.
**Delete**Allows you to remove one or more certificates by selecting one or more records and next clicking the button with the subtraction symbol (-). To perform that action, Soffid will ask you for confirmation, you could confirm or cancel the operation.
**Download CSV file**Allows you to download a CSV file with the digital certificates data.
#### New token
**Next** Allows you to browse the wizard to create a new certificate.
**Apply changes** Allows you to save the data of a new certificate or to update the data of a specific certificate. To save the data it will be mandatory to fill in the required fields
**Undo** Allows you to quit without applying any changes.