Qualified electronic signatures use digital certificates, which are issued by accredited certification authorities. The certtificate and key are stored securely, usually on a smart card. To access the data on the smart card, the user must autenticate himself or herself, usually with a password or piece of biometric data. The certification authority also checked that the user is who he pretends to be, usually cross-checking with an official, state-issued document.