Present a credential

The claims that go on the paper come from a credential in your wallet, and only after it verifies here. Nothing can be typed in.

Seal with Certus

The claim values are hashed and only the hash goes to Certus. The batch is created, then activated, and the root is signed a moment later.

Verify

Two checks, answering different questions. Only the first decides whether the document is printed.

Certus QR

The claim values are hashed and replayed with the audit path against the Certus verifier, exactly as a scanner would. This is what proves the seal is real rather than merely present.

PDF signature

Whether the file itself carries a timestamp, and whether it still matches it. This covers the digital copy only: it says nothing about who awarded the diploma, and it does not survive printing.

The document

The QR carries the audit path from Certus and the claim values from here. Scan it in the verify flow to check it round trips.