When trying to access the IMSS IDSE portal, many employers and legal representatives encounter the message “El certificado ha expirado” (The certificate has expired) or its English variant “Certificate has expired”. This error completely blocks access to the system and prevents critical employer procedures such as employee registrations, certificate issuance, and record queries. In this article we explain why it happens, how to check certificate validity, and what to do whether your certificate is about to expire or has already expired.

The Error

When the IDSE digital certificate has exceeded its validity period, one of these messages appears during authentication:

“El certificado ha expirado”

“Certificate has expired”

“El certificado seleccionado no es válido o ha caducado”

The error occurs at the moment of authentication, when the browser attempts to use the digital certificate stored in Windows to establish a secure connection with the IMSS server. In some cases, the browser simply does not display any available certificate for selection.

This issue affects both users on Internet Explorer in compatibility mode and those accessing through Microsoft Edge with IE mode enabled.

Root Cause

The IDSE digital certificate (also known as the employer e.firma or IMSS Digital Certificate) has a 4-year validity period from its date of issuance. Once that period elapses, the certificate expires automatically and the system rejects it.

The most common reasons users encounter this error are:

  • Failure to renew on time: The IMSS does not send automatic expiration reminders. If the employer does not track the date independently, the certificate expires without notice.
  • Confusion with the SAT e.firma: Many users believe that renewing their e.firma with the SAT also renews the IDSE certificate. These are completely independent certificates.
  • Inherited certificate: When an accounting firm changes staff or employer responsibility is transferred, the new person in charge may not know the expiration date.
  • Multiple employer registrations: Companies with several employer registrations can lose track of expiration dates for each certificate.

Difference Between SAT e.firma and IDSE Certificate

FeatureSAT e.firmaIMSS IDSE Certificate
IssuerSATIMSS
Validity4 years4 years
Primary useTax proceduresIMSS employer procedures
Online renewalYes (up to 1 year before)Only if not expired
Renewal officeSATIMSS subdelegación

Step-by-Step Solution

Step 1: Verify the Expiration Date

Before any procedure, confirm that the certificate is actually expired:

  1. Press Win + R, type certmgr.msc, and press Enter
  2. Navigate to Personal > Certificates
  3. Locate the certificate issued by the IMSS
  4. Double-click it and check the General tab
  5. Look for the “Valid from” and “Valid to” fields

If the “Valid to” date has already passed, the certificate is effectively expired.

Quick alternative: You can also check the validity by double-clicking the .cer file directly in Windows File Explorer.

Step 2: Renew BEFORE It Expires (Ideal Scenario)

If your certificate has not yet expired but is approaching its expiration date:

  1. Log in to the IDSE portal (https://idse.imss.gob.mx) with your current certificate
  2. Select the “Certificate Renewal” option (Renovación de Certificado Digital)
  3. The system will generate a request file (.req)
  4. Save the .req file to a USB drive
  5. Visit your IMSS subdelegación with the following documentation:
    • Valid official ID of the legal representative
    • Notarized power of attorney (copy and original)
    • Employer identification card
    • USB drive with the .req file
  6. IMSS staff will process the request and issue the new certificate (.cer)

Estimated time: The procedure at the subdelegación takes between 30 minutes and 2 hours depending on demand.

Step 3: Request a New Certificate If It Has Already Expired

If the certificate has already expired, you will not be able to start the renewal from the IDSE portal. The process is:

  1. Schedule an appointment on the IMSS appointment portal (https://citas.imss.gob.mx) for the “Digital Certificate for IDSE” procedure
  2. Visit the IMSS subdelegación that corresponds to your employer registration
  3. Bring the following documentation:
    • Valid official ID of the legal representative
    • Notarized power of attorney proving legal representation
    • Employer identification card (TIPAT)
    • Employer’s RFC
    • Formatted USB drive
  4. At the subdelegación, a new request will be generated and the new certificate will be issued
  5. You will receive the .cer file and installation instructions

Step 4: Install the New Certificate

Once you have the new .cer file:

  1. Open certmgr.msc as administrator
  2. Navigate to Personal > Certificates
  3. Delete the expired certificate (right-click > Delete)
  4. Right-click on Personal > Certificates > All Tasks > Import
  5. Follow the wizard and select the new .cer file
  6. Verify that the new certificate appears with an updated expiration date

Step 5: Test Access

  1. Close all browser windows
  2. Open the IDSE portal again
  3. Select the new certificate when the browser prompts you
  4. Verify that you can authenticate without errors

Alternative Solution

If you cannot schedule an appointment at your subdelegación immediately and need to perform urgent procedures:

  • IMSS walk-in window: Some procedures such as registrations, deregistrations, and salary modifications can be submitted directly at the subdelegación window using printed AFIL forms, without needing IDSE.
  • IMSS desde su Empresa (alternate IDSE): Check if your subdelegación offers alternative access for urgent procedures.
  • Authorized external firm: If you have an accountant or firm with their own valid certificate and your company’s legal representation, they can process the procedures for you.

Prevention

To prevent the certificate from expiring without notice:

  1. Record the expiration date in your calendar with alerts at 6 months, 3 months, and 1 month before expiration
  2. Track each employer registration if you have multiple registrations. Each one has its own certificate with a different date
  3. Do not confuse certificates: Keep separate folders for SAT files and IMSS files
  4. Renew early: Start the renewal process at least 2 months before expiration to avoid issues with appointments or missing documentation
  5. Back up your files: Store copies of the .cer, .key, and password in a secure location outside the main computer
  • “Access Denied” when renewing on the IDSE portal: If the portal shows “Access Control — Access Denied” when attempting renewal, this may be a browser permissions or configuration issue, not necessarily an expired certificate.
  • Error 0x8009030D when installing a certificate: This error indicates that Windows does not recognize the certificate credentials, usually due to incorrect import or certificate store corruption.
  • Browser does not show certificates: If the browser does not display any certificates for selection, verify that you are using the correct user’s Personal store and that the browser is compatible (IE or Edge IE mode).
  • Error 17 in digital services: Error 17 indicates an access denied issue at the IMSS digital services level, which may be related but has a different root cause than certificate expiration.

Summary

  • The IMSS IDSE digital certificate is valid for 4 years and does not renew automatically
  • If the certificate has not yet expired, you can start the renewal from the IDSE portal itself
  • If it has already expired, you must visit the IMSS subdelegación in person with a prior appointment
  • The IDSE certificate and the SAT e.firma are independent certificates; renewing one does not renew the other
  • Check the expiration date in certmgr.msc or by double-clicking the .cer file
  • Set alerts at 6, 3, and 1 month before expiration to avoid surprises
  • While processing the new certificate, you can use the walk-in window for urgent procedures