Offline Certificate Verifier

Paste a public key that you obtained from the organizer through a trusted channel. A key copied from a certificate or the same unverified server cannot establish organizer identity. This page uses local WebCrypto; save the key and this page for offline use.

Download this server's current public key and compare its SHA-256 key ID with an independently shared fingerprint. Keep older keys to verify records issued before rotation.

Trusted issuer public key (Ed25519 SPKI PEM) Signed certificate JSON Trusted correction key (leave blank if it is the issuer key above) Optional signed correction bundle JSON

The bundle can prove a listed revocation or supersession. An absent entry does not prove that no correction exists; get a current bundle from the organizer.

Awaiting certificate and trusted key.