How to open a P7S signature file and find its document
A .p7s file often contains a detached CAdES signature rather than the document itself. That is why opening it may show certificate or signature data but no readable contract, invoice or PDF.
Updated
If the document does not display as expected
Keep the original filename and check that the download is complete. Renaming XML, P7M or ASiC files to PDF does not convert them. If a signed container opens, check the type of its extracted payload: it may be an invoice, PDF or another format requiring its own reader.
For an invoice, compare the document identifier, supplier, currency, tax and total with the original fields. Report an unsupported format with its non-sensitive format/version details; avoid sending private documents unless you choose an appropriate support channel.
From difficult file to readable document.
- 01
Save the P7S and its companion
Download the signature and the original attachment from the same message or portal. Do not edit or resave the original document.
- 02
Inspect the signature
Open the P7S in EU Document Opener to view supported signature and certificate information. The app does not pair a detached P7S with its separate original file, so it cannot confirm that the signature matches that document.
- 03
Match it with the original
Use the associated source document for reading and an official validation service when you need to prove that its bytes match the detached signature.
P7S versus P7M
P7M commonly packages a payload inside the signature container. P7S is often detached, so the signed content remains a separate file.
The distinction explains why a P7S opener may expose technical signature information without producing a PDF or XML document.
The original bytes matter
Detached signatures are calculated for a specific byte sequence. Renaming is usually harmless, but modifying, exporting or regenerating the document can break a later match even when it looks identical.
Why a detached signature needs a separate check
For P7M files, P7S files that enclose their content and other supported signed formats, EU Document Opener checks signatures offline against the EU trusted lists bundled with the app. A detached P7S is different: without the original bytes the signature cannot be matched to the document, and the app does not pair the two files.
To check a detached signature, use a service that accepts the signature together with its original document. For legal purposes, use an official validation service such as the EU DSS validation service or the AgID verifier.
Authoritative references
Official specifications and public-sector documentation used to check the terminology in this guide.
Questions about this file type.
Does a P7S contain the signed PDF?
Often it does not. A detached P7S normally needs the separate original document.
Can I convert P7S to PDF?
Not when the PDF is not embedded. Locate the original document rather than treating the signature as a converter input.
Is P7S the same as P7M?
Both can use CAdES/CMS structures, but P7M commonly encapsulates a payload while P7S is often detached.