Logius introduces a new generation of PKIoverheid certificates

PKIoverheid introduces G4 and G3+ certificates, which improves security for transactions and signatures for government, citizens and businesses. By 2028 all users will need to be transitioned to these new certificates.  The new generation of certificates affects Logius products and facilities such as Digipoort, and other government services and organisations such as municipalities and water boards. 

Why G4 and G3+?

Regulations and security frameworks regarding the safe and reliable exchange of data of citizens and companies are constantly being updated and made more stringent. To keep up with the latest technological developments and to replace the current G3 certificates, the next generation of certificates G3+ and G4 have been developed. The current G3(+) and G1 Private certificates expire in November 2028 at the latest. 

Why do you need (PKIoverheid) certificates?

A PKIoverheid certificate ensures that only authorised parties have access to confidential data and it prevents misuse by malicious parties. The certificate aims to ensure confidentiality, integrity and authenticity of electronic communications and transactions between government agencies, companies and citizens. 

What does this mean for your organisation?

With G4 certificates, each certificate can only be used for a single purpose, and certificate types are organised into hierarchies, each with its own distinctive regulations. This may affect the number of certificates your organisation needs. Use the table ‘What type of certificate do I need?’ published on the Logius website, to determine which G4 certificates you will need. To fully understand the impact of this transition it is important to determine which types of G3  certificates you have currently deployed.

Gradual roll-out

The first root certificates of the new generation of PKIoverheid certificates were published in the Government Gazette on 28 November 2024. You can find the publication in the Government Gazette here. The G3+ and G4 certificates will be rolled out gradually among the various Trust Service Providers. 

Start preparations early

It takes time to deploy and use these new certificates. The earlier your organisation decides to transition to G4, the more time your organisation will have to take all the necessary steps. This will ensure a smooth transition to the G4 certificates. By November 2028, all organisations must be transitioned to use G4 certificates. Your Trust Service Provider can provide more information about acquiring the new generation of PKI government certificates. 

Need more information? 

Find out more about the G4 and G3+ certificates, what this means for you and what actions are needed for a good transition read the factsheet.