
Brazil E-Invoicing Digital Certificate (e-CNPJ): Setup & Requirements
Tax & Compliance Series
This guide is part of a comprehensive series. Explore all 202 topics:
What Is an e-CNPJ Digital Certificate?
The e-CNPJ (Cadastro Nacional da Pessoa Jurídica Eletrônico) is a digital identity certificate that:
The e-CNPJ (Cadastro Nacional da Pessoa Jurídica Eletrônico) is a digital identity certificate that:
- Authenticates the business's identity in electronic transactions
- Provides a legally binding digital signature for invoices
- Is required for access to SEFAZ web services (NF-e/NFC-e issuance)
- Enables access to Receita Federal online services (tax returns, consultations)
A1 vs A3 Certificates: Which Should You Choose?
A1 vs A3 Certificates: Which Should You Choose — Storage: Software file (. pfx/.
| Feature | A1 Certificate | A3 Certificate |
|---|---|---|
| Storage | Software file (.pfx/.p12) | Hardware token or smart card |
| Validity | 1 year | 1–3 years |
| Cost | R$150–300/year | R$200–500 + hardware |
| Portability | Can be installed on multiple systems | Physical device required |
| Security | Standard — private key exportable | Higher — private key never leaves hardware |
| Cloud invoicing | Easily uploaded to cloud platforms | Requires local proxy or API integration |
| Best for | Cloud-based invoicing, multi-location | High-security requirements, single location |
Which Providers Issue e-CNPJ Certificates?
ICP-Brasil accredited certificate authorities include:
ICP-Brasil accredited certificate authorities include:
- Serasa Experian: Largest provider, online and in-person validation
- Certisign: One of the oldest CAs, extensive retail network
- AC Valid (Soluti): Competitive pricing, video validation option
- Safeweb: Focus on small businesses, simplified process
How to Obtain an e-CNPJ Certificate (Step-by-Step)
Choose a certificate authority and certificate type (A1 or A3) Submit documentation online: CNPJ registration, company bylaws, legal representative ID
- Choose a certificate authority and certificate type (A1 or A3)
- Submit documentation online: CNPJ registration, company bylaws, legal representative ID
- Complete identity validation: In-person at an authorized location or via video conference (available from some CAs)
- Receive and install the certificate: A1 as a downloadable file; A3 as a physical token
- Configure your invoicing software with the certificate for SEFAZ authentication
What Happens When a Certificate Expires?
Immediate impact: All NF-e, NFS-e, and NFC-e issuance is blocked — SEFAZ rejects unsigned or invalidly-signed invoices Business disruption: Goods cannot be shipped (NF-e authorization required), retail sales cannot be receipted (NFC-e required)
- Immediate impact: All NF-e, NFS-e, and NFC-e issuance is blocked — SEFAZ rejects unsigned or invalidly-signed invoices
- Business disruption: Goods cannot be shipped (NF-e authorization required), retail sales cannot be receipted (NFC-e required)
- Renewal window: Start the renewal process at least 30 days before expiration
- No grace period: There is no grace period after expiration
Invoicemonk supports both A1 and A3 digital certificates with certificate expiration alerts, automated SEFAZ authentication, and seamless certificate renewal integration to prevent invoice issuance disruptions.
More in this series (202 articles)
From this series
Stay audit-ready and compliant with tax regulations across different regions.
Related Topics
Digital Marketing, SEO Specialist, Content Creator & Product Professional
Olayinka is a digital marketer, content creator, growth and SEO specialist with 10+ years helping businesses in Nigeria, the UK, the US, Australia, and Dubai achieve their goals online.




