NotaryRails Signing

NotaryRails Signing lets a commissioned electronic notary sign the notarial certificate during a remote online notarization on NotaryRails, using the digital certificate on their own USB token. How it works • NotaryRails sends this extension a hash of the notarial certificate — never the document itself. • The extension hands the hash to a small helper application on your computer, which talks to your token. • You enter your token PIN in the helper's own window, on your machine. The PIN is never seen by the browser or by NotaryRails. • Your token signs the hash. The extension returns only the signature and your public certificate to NotaryRails, which verifies them against your certificate authority's root and embeds the signature in the notarial certificate. Your private key never leaves your token. The extension cannot read it, export it, or use it for anything but the signature you approve. Who it is for Notaries commissioned in a state whose rules require the notary to digitally sign with an X.509 certificate from a trusted certificate authority. Today that is Virginia on NotaryRails. Notaries in other states do not need this extension. What it needs • A NotaryRails notary account. • A digital certificate on a USB token issued by a certificate authority on the Adobe Approved Trust List or the US Federal PKI. • The NotaryRails Signing helper installed on your computer (download and instructions at https://notaryrails.com/signing-extension). What it does not do • It never sends anything to any server other than notaryrails.com, and only when you are in a NotaryRails session. • It collects no analytics and has no telemetry. • It does not read your browsing, your documents, or any page other than notaryrails.com.