MX · Expiry & renewal tracking
Don't let an expired CSD stop your invoicing
Mexico's digital seal certificate (CSD) for stamping CFDI e-invoices is issued by the SAT on a request signed with the e.firma and expires after four years (CFF, Articles 17-D and 29; sheet 41/CFF). Once expired a new one is needed; failing to issue CFDI is a fined offence (Articles 17-H, 83 and 84).
Taxpayers required to issue tax receipts in Mexico must issue them as digital documents (CFDI) through the SAT's website. To do so they must hold a valid e.firma certificate and obtain from the SAT the certificate for the use of digital seals (CSD). The digital seal proves the authorship of the CFDI and is subject to the rules on advanced electronic signatures; a company may use one CSD for all its establishments or one per establishment, and the request can only be made through an electronic form signed with the applicant's e.firma (Federal Tax Code, Article 29, sections I and II).
For tax purposes, certificates issued by the SAT are valid for at most four years from issue (Article 17-D) and state their start and end dates (Article 17-G, section V); digital seal certificates must also specify any limits on their use (Article 17-G, section I). Procedure sheet 41/CFF of Annex 2 of the 2026 Miscellaneous Tax Resolution (RMF) states that the CSD is valid for four years. The certificate ceases to have effect once its validity period has elapsed (Article 17-H, section VI).
The CSD is generated with the Certifica program, which produces two files (private key and generation request); the certificate is then requested on the SAT Portal with the taxpayer's e.firma. One certificate can be requested for the tax domicile and, at most, one for each branch or establishment; transport units use the CSD of the domicile, branch or establishment to which they are assigned. Certificates are downloaded and verified under "Recuperación de certificados" in CertiSAT Web (RMF 2026, rule 2.7.1.5). The procedure is immediate and free, and requires an e.firma and an enabled tax mailbox (buzón tributario) (Annex 2, sheet 41/CFF).
Anyone who receives a CFDI can check on the SAT portal whether the certificate backing the digital seal was valid and registered at the time of issue (Article 29, section VI, second paragraph). Apart from expiry, the SAT may temporarily restrict the use of the CSD, for example for failing to file the annual return or two or more provisional or definitive returns (Article 17-H Bis, section I); the taxpayer can file a clarification under sheet 42/CFF (RMF 2026, rule 2.2.15).
At a glance
| Issued by | The SAT, on a request signed with the taxpayer's e.firma (CFF, Article 29, section II; RMF 2026, rule 2.7.1.5) |
|---|---|
| Validity | Four years (Annex 2 RMF 2026, sheet 41/CFF); legal maximum of four years from issue (CFF, Article 17-D) |
| How many CSDs | One for the tax domicile and, at most, one for each branch or establishment (RMF 2026, rule 2.7.1.5) |
| How to obtain it | .sdg file generated with Certifica and submitted in CertiSAT Web; download under "Recuperación de certificados" (rule 2.7.1.5; sheet 41/CFF) |
| Conditions | Hold an e.firma and have the tax mailbox enabled (sheet 41/CFF) |
| Decision time | Immediate; no fee (sheet 41/CFF) |
| When it ceases to have effect | When its validity elapses, at the holder's request, or in the other cases of Article 17-H of the CFF, including exhaustion of the Article 17-H Bis procedure |
Who is responsible?
The taxpayer issuing CFDI, through the person who holds the e.firma: the CSD can only be requested through an electronic form signed with the applicant's e.firma (CFF, Article 29, section II) and the request on the SAT Portal must contain the taxpayer's e.firma (RMF 2026, rule 2.7.1.5). As certificate holder, the taxpayer must act diligently to prevent unauthorised use of the seal-creation data and request revocation if its privacy is at risk (CFF, Article 17-J).
If the deadline passes
Once the validity period has elapsed the certificate ceases to have effect (CFF, Article 17-H, section VI), and any recipient can check on the SAT portal whether the seal was valid when the CFDI was issued (Article 29, section VI). To keep invoicing, a new CSD must be obtained under sheet 41/CFF, which requires an e.firma (sheet 41/CFF). Failing to issue the CFDI required by tax law, or issuing them without meeting the Code's requirements, is an infraction (Article 83, section VII) punishable by a fine and, for repeat offences, possible preventive closure of the establishment (Article 84, section IV).
e.firma first, then the CSD
The CSD request is signed with the taxpayer's e.firma (CFF, Article 29, section II), so an expired e.firma also blocks obtaining a new CSD. Track both dates: the e.firma certificate and each CSD.
Tracking it with ExpirySuite
- Add your company as a record (one per CSD if you hold certificates per branch) and enter the end-of-validity date shown in the CSD's .cer file: four years from issue.
- Email reminders arrive 60, 30, 14, 7 and 1 day before expiry and on the day, so you can generate the .sdg file in Certifica and request the new CSD in CertiSAT Web before the seal expires.
- The person who keeps the certificates can upload the new CSD and the submission receipt through a secure link that is valid for 14 days and needs no account.
- Assign a responsible person, such as invoicing or the tax team; if the CSD expires without replacement, managers get further reminders 3, 7 and 14 days later.
Frequently asked questions
- How long is the CSD valid?
- Sheet 41/CFF of Annex 2 of the RMF 2026 states a validity of four years, matching the legal maximum of four years from issue for certificates issued by the SAT (CFF, Article 17-D). The exact end date is stated in the certificate itself (Article 17-G, section V).
- Can I have several CSDs?
- Yes. The law allows one or more digital seal certificates, either one for all establishments or one per establishment (CFF, Article 29, section II). On the SAT Portal you can request one certificate for the tax domicile and, at most, one for each branch or establishment (RMF 2026, rule 2.7.1.5).
- What do I need to obtain a new CSD?
- Generate the private key and the CSD generation request (.sdg file) with Certifica, submit it in CertiSAT Web with the taxpayer's e.firma and download the certificate (RMF 2026, rule 2.7.1.5). You must hold an e.firma and have the tax mailbox enabled; the procedure is immediate and free (Annex 2, sheet 41/CFF).
- Why might it cease to have effect before four years?
- Among other cases, at the signer's request, by court or administrative order, on dissolution of the company, or when the Article 17-H Bis procedure is exhausted without remedying the irregularities (CFF, Article 17-H). The SAT may temporarily restrict the CSD, for example for failing to file the annual return or two or more provisional or definitive returns (Article 17-H Bis, section I); the clarification is filed under sheet 42/CFF (RMF 2026, rule 2.2.15).
Sources
- Código Fiscal de la Federación (Federal Tax Code), Articles 17-D, 17-G, 17-H, 17-H Bis, 17-J, 29, 83 and 84 (Chamber of Deputies, current text, last amended DOF 09-04-2026, in Spanish)
- Resolución Miscelánea Fiscal para 2026, rules 2.2.15 and 2.7.1.5 (SAT, DOF 28/12/2025, in Spanish)
- Anexo 2 of the Resolución Miscelánea Fiscal para 2026, procedure sheet 41/CFF "Solicitud del Certificado de sello digital" (SAT, DOF 29/12/2025, evening edition, in Spanish)
Last checked: Oct 7, 2026 · This page summarises official sources for general information and is not legal advice. Check the linked sources for current rules and fees.
Made for digital seal certificate for e-invoicing (CSD, CFDI) (Mexico)
A ready template for digital seal certificate for e-invoicing (CSD, CFDI) (Mexico) with sensible validity defaults, so you enter less and track more.
Reminders on time
Email alerts at 60, 30, 14, 7 and 1 day before each digital seal certificate for e-invoicing (CSD, CFDI) (Mexico) expires, plus overdue escalation to managers.
Assign an owner
Give each digital seal certificate for e-invoicing (CSD, CFDI) (Mexico) an owner and let employees update their own via a secure link — no login needed.