01
The document
The bytes in your hands are the bytes that were signed.
Public verification
Every check on this page is recomputed locally, in your browser, from public data: the signer's key, AIO's certificate and the transparency log. Nothing here rests on a server telling you it is valid.
Verify it offlineWhat gets checked
01
The bytes in your hands are the bytes that were signed.
02
Made with a private key AIO has never held. Signatures carry a classical and a post-quantum half, and both must hold.
03
A certificate signed by AIO binds that key to a person and to the permissions they held at the moment of signing.
04
Certificates are logged in an append-only Merkle tree, and its roots are timestamped outside AIO (by independent authorities), so the history cannot be rewritten, not even by us.