What is an ASiC-E Container?

ASiC-E (Associated Signature Container Extended) is a standardized file format for packaging digital signatures together with one or more data files. Defined by the European Telecommunications Standards Institute (ETSI), ASiC-E containers are widely used across the European Union for legally binding electronic signatures, particularly in e-government services, business transactions, and legal document exchange.

An ASiC-E container is essentially a ZIP archive with a specific structure that contains:

  • Original documents – The files being signed (PDFs, images, text documents, etc.)
  • Digital signatures – XML-based signature files (typically XAdES format)
  • Manifest files – Metadata describing the container contents and their relationships

The .asice extension is the standard, though you may also encounter .sce or .bdoc (used in Baltic countries like Estonia) files that follow the same format.

How Do Digital Signatures in ASiC-E Work?

Digital signatures in ASiC-E containers use public key cryptography and X.509 certificates to ensure:

  1. Authenticity – The signature proves the identity of the signer through their certificate
  2. Integrity – Any modification to the signed files invalidates the signature
  3. Non-repudiation – The signer cannot deny having signed the document

The most common signature format inside ASiC-E containers is XAdES (XML Advanced Electronic Signatures), which embeds the signer's X.509 certificate containing their identity information, including name, organization, and the certificate authority that issued it.

Tool Description

The ASiC-E Signature Extractor is a browser-based tool that opens ASiC-E containers and extracts detailed information about the digital signatures and files contained within. It parses the XML signature files to display signer information extracted from embedded X.509 certificates, allowing you to verify who signed a document without needing specialized software.

All processing happens locally in your browser – no files are uploaded to any server, ensuring complete privacy for sensitive documents.

Features

  • Complete container analysis – Lists all files and signatures within the ASiC-E container
  • Signer identification – Extracts first name, last name, and other identity details from X.509 certificates
  • Certificate details – Displays full certificate information including issuer, validity period, and serial number
  • Multiple format support – Works with .asice, .sce, and .bdoc file extensions
  • File download – Download individual files or signature XMLs directly from the container

Use Cases

  • Verifying document signers – Before processing a signed contract, confirm the identity of all parties who signed it
  • Auditing signed archives – Review bulk ASiC-E containers to catalog signers and signed documents for compliance records
  • Troubleshooting signature issues – Inspect raw XML signature content and certificate details when signatures fail validation elsewhere
  • Legal document review – Extract signer information from court filings or notarized documents received in ASiC-E format
  • E-government document processing – Analyze digitally signed documents from government portals that use ASiC-E (common in EU member states)

Supported Formats

Extension Description
.asice Standard ASiC-E container
.sce Alternative ASiC-E extension
.bdoc Baltic states digital container (Estonia, Latvia, Lithuania)

Signature Types Detected

The tool identifies the following signature formats within containers:

  • XAdES – XML Advanced Electronic Signatures (most common)
  • CAdES – CMS Advanced Electronic Signatures
  • PAdES – PDF Advanced Electronic Signatures

Certificate Information Extracted

When parsing X.509 certificates embedded in signatures, the tool extracts:

  • Subject details (Common Name, Given Name, Surname, Organization)
  • Issuer information (Certificate Authority details)
  • Validity period (Not Before / Not After dates)
  • Serial number
  • Public key algorithm
  • Certificate extensions