Introduction
cert.uz is an online platform operated by the Uzbekistani government that provides digital certificate services for individuals and organizations. The portal serves as a central hub for the issuance, renewal, and verification of electronic credentials, including educational diplomas, professional certifications, and digital signatures used for legal documents. By integrating with the national e-government infrastructure, cert.uz facilitates secure communication between citizens, businesses, and public institutions.
The service is designed to streamline the traditional paper‑based processes for certificate issuance and to support the broader digitization agenda pursued by the Ministry of Digital Development, Innovations and Aerospace Industry. It also plays a key role in ensuring compliance with international standards for electronic identification and electronic signatures, enabling Uzbek entities to participate in cross‑border electronic commerce and collaboration.
History and Background
Origins and Development
The foundation of cert.uz can be traced back to the early 2010s, when Uzbekistan initiated a national strategy for the digitization of public services. Early pilot projects focused on electronic voting and online tax filing, which highlighted the need for a robust system of electronic identification and certification. In 2015, the government formally approved the creation of a dedicated platform for electronic certificates, which eventually became cert.uz.
Initial development was undertaken by a consortium of local IT firms and government agencies. The platform was launched in beta form in 2016, offering a limited set of certificate types primarily for academic institutions. Feedback from pilot users indicated a demand for broader coverage, prompting an expansion of services in 2018 to include professional and corporate certificates.
By 2020, cert.uz had transitioned to a fully operational, production‑grade system. The platform underwent a major security overhaul to comply with the revised Electronic Identification Law adopted in 2021, incorporating advanced cryptographic protocols and a hardened public key infrastructure.
Relationship to Government Agencies
cert.uz is administered by the National Center for Electronic Certification (NCEC), a governmental body under the Ministry of Digital Development. The NCEC coordinates with several ministries, including Education, Health, and Finance, to define certificate standards and integration points.
In addition, the platform works closely with the State Register of Enterprises and Organizations to validate corporate identities before issuing business certificates. The cooperation with the State Inspectorate of Statistics ensures that the data collected by cert.uz remain consistent with national demographic and economic statistics.
Service Offerings
Types of Certificates
The platform offers three primary categories of certificates:
- Educational Certificates – Diplomas and transcripts issued by accredited universities and vocational schools.
- Professional Certifications – Credentials granted by professional bodies, including medical licensing, engineering approvals, and IT certifications.
- Digital Signatures – Cryptographic keys and associated electronic signatures used to authenticate digital documents and transactions.
Each certificate type follows a standardized format that includes a unique identifier, issuing authority metadata, and a verifiable electronic seal. The electronic seal is created using a private key that is stored in a secure hardware module within the NCEC’s data centers.
Online Application and Issuance Process
The user journey begins with the submission of an online application form. Applicants must provide personal identification data, supporting documents, and a proof of payment for applicable fees. The portal validates the authenticity of the documents using Optical Character Recognition (OCR) and machine learning algorithms to detect forgery.
Once approved, the certificate is digitally signed and stored in the NCEC’s secure database. The applicant receives an email confirmation with a unique QR code that links to a public verification page. The QR code can be scanned by third parties to confirm the certificate’s authenticity in real time.
Renewal of certificates follows a similar workflow, with an expedited verification process for previously issued certificates. The portal also supports bulk issuance for large educational institutions and corporations, allowing authorized administrators to upload batches of applicant data.
Technical Infrastructure
Domain and Hosting
cert.uz is hosted on a dedicated cluster of servers located in a government‑owned data center in Tashkent. The infrastructure is backed by redundant power supplies, 99.9% uptime SLA, and a geographically distributed failover system in Bukhara to ensure continuity of service during regional outages.
The domain registration is managed through a national registrar that applies the highest level of DNS security, employing DNSSEC to prevent domain hijacking.
Security Protocols
The platform implements the latest industry standards for web security:
- HTTPS with TLS 1.3 and forward‑secrecy enabled.
- Multi‑factor authentication for administrative accounts.
- Role‑based access control to restrict data visibility.
- Regular penetration testing conducted by external security auditors.
Data encryption at rest is achieved using AES‑256, while in‑transit encryption uses ECC‑P-256 key exchange combined with SHA‑384 hashing. The use of quantum‑resistant algorithms is under evaluation for future upgrades.
Digital Signature Technology
Digital signatures are based on the e‑signature framework defined by the ISO/IEC 27001 standard. Each certificate is signed using a private key that is stored in a Hardware Security Module (HSM) certified by the International Organization for Standardization. The public key associated with each private key is published in a national certificate authority (CA) database that can be queried by external systems.
Signature validation is performed on a per‑certificate basis, with a chain of trust that extends back to the root CA. The platform also supports time‑stamping of signatures, ensuring that the signature remains valid even after the certificate’s expiration date.
Regulatory and Legal Framework
Uzbek Law Regarding Certificates
The legal foundation for cert.uz is the 2021 Electronic Identification Law, which establishes the requirements for electronic signatures, digital certificates, and electronic identification documents. The law defines a digital signature as a method of identifying an individual or organization with cryptographic certainty.
Under the law, digital certificates issued through cert.uz are considered legally valid for the execution of contracts, the filing of tax returns, and the submission of academic records. The law also mandates the retention of digital records for a minimum of ten years, a requirement that is enforced through the platform’s archival system.
Data Privacy Compliance
Data protection on cert.uz is governed by the 2020 Personal Data Protection Act. The platform adheres to the principles of data minimization, purpose limitation, and data subject rights. Users are provided with a privacy dashboard where they can review, download, or request the deletion of their personal data.
Cross‑border data transfers are conducted under the oversight of the State Data Protection Agency, ensuring that any export of personal data complies with the relevant international agreements.
Usage and Impact
Statistics of Users
Since its full launch in 2020, cert.uz has processed over 1.2 million certificate requests. Approximately 80% of these are educational certificates, while the remaining 20% are professional or digital signatures. The platform experiences peak traffic during graduation periods and professional certification exams.
Monthly active users average 300,000, with a user base that spans all 12 regions of Uzbekistan. The platform also serves a growing number of foreign students and expatriates seeking recognition of their credentials in Uzbekistan.
Impact on Education and Industry
cert.uz has streamlined the verification process for employers, reducing the time required to confirm educational credentials from several weeks to a few minutes. This acceleration has contributed to a higher rate of job placement for recent graduates.
In the professional sector, digital signatures issued through cert.uz have replaced handwritten signatures on contracts, invoices, and official correspondence. The adoption of digital signatures has lowered operational costs for small and medium enterprises by an estimated 15%.
Moreover, the platform’s integration with the national e‑government portal has enabled citizens to apply for passports, visas, and other official documents without the need to visit a government office physically.
Integration with Other Systems
Government e‑Services
cert.uz is tightly integrated with the Unified State Service Platform (UGSD), which consolidates government services such as tax filing, business registration, and social security benefits. When a user submits a certificate request, the UGSD automatically verifies the user’s identity through cert.uz’s API, ensuring a seamless user experience.
In addition, the platform offers a RESTful API that allows other government ministries to retrieve certificate status in real time. This API is secured with OAuth 2.0 and requires mutual TLS authentication.
Academic Institutions
Universities and vocational schools use cert.uz’s bulk upload feature to submit graduate lists and transcripts. The platform automatically verifies the credentials against the national education database, ensuring consistency and reducing manual data entry errors.
Academic institutions also use cert.uz’s verification portal to allow employers and foreign universities to authenticate transcripts before accepting applications for study or employment.
Employers
Companies employ the platform’s QR code scanning feature to verify the authenticity of candidate certificates during the hiring process. Some multinational firms in Uzbekistan have integrated cert.uz’s verification API into their applicant tracking systems.
Large state-owned enterprises utilize cert.uz’s bulk verification service to certify the credentials of all new hires, which is a requirement under the 2022 State Employment Regulation.
Security and Trust
Public Key Infrastructure
cert.uz operates as a certified public key infrastructure (PKI) service provider. The root certificate is trusted by major operating systems and browsers through an inclusion in the global trust store. The platform’s CA hierarchy consists of three layers: root, intermediate, and end‑entity certificates, each with defined lifespans and revocation procedures.
The PKI also includes a Certificate Revocation List (CRL) and an Online Certificate Status Protocol (OCSP) responder, ensuring that revoked certificates can be identified in real time by relying parties.
Certificate Revocation
Revocation is managed through a multi‑step process. When a certificate is reported as compromised, the issuer submits a revocation request to the NCEC. After verification, the certificate is added to the CRL and the OCSP responder updates its status. The revocation process is logged and auditable, with each event timestamped and signed by the system administrator’s private key.
Audits
cert.uz undergoes annual independent audits to verify compliance with ISO/IEC 27001, GDPR‑like privacy regulations, and the national Electronic Identification Law. The audits assess physical security, access controls, incident response plans, and data integrity. Findings from these audits are published on the NCEC’s annual report.
Challenges and Criticisms
Accessibility Issues
While the platform offers a mobile‑friendly interface, some users report difficulties accessing the portal in regions with limited broadband connectivity. Efforts are underway to provide an offline verification mode that can be used by government officials in remote areas.
Language support remains a concern; the portal is primarily available in Uzbek and Russian, with limited English support. This has been cited as a barrier for foreign students and international employers.
Security Incidents
In early 2022, a phishing campaign targeted cert.uz users, attempting to harvest login credentials. The incident prompted the implementation of additional security measures, including a mandatory password rotation policy and a real‑time login monitoring system.
Although no private keys were compromised, the incident highlighted the need for stronger user education on phishing detection and safe password practices.
Regulatory Lag
Rapid changes in digital signature standards, such as the upcoming transition to quantum‑safe algorithms, have outpaced the platform’s update schedule. The NCEC has pledged to upgrade the PKI within 18 months, but resource constraints have delayed the rollout.
Future Developments
Planned Features
cert.uz is slated to introduce a new module for blockchain‑based certificate verification. This initiative aims to enhance tamper resistance and provide an immutable audit trail. The platform will also expand its API to support integration with international credential verification systems.
Another upcoming feature is the introduction of a digital credential wallet, allowing users to store multiple certificates in a secure, mobile‑friendly environment. The wallet will use decentralized identifiers (DIDs) to enable cross‑border credential verification without the need for centralized databases.
International Cooperation
The platform is in discussions with the European Union’s Digital Education Action Plan to align its educational certificate standards with the European Higher Education Area. Cooperation with the Commonwealth of Independent States (CIS) is also underway to harmonize professional certification recognition across member countries.
cert.uz is also participating in a global consortium focused on establishing open standards for digital identities, contributing to the development of interoperable identity frameworks that can be adopted by other nations.
No comments yet. Be the first to comment!