Verify a signed document

Drop any signed PDF below to verify its cryptographic signatures, certificate chain, trusted timestamps, and audit log integrity. No account required.

Drop a PDF here, or click to choose

How verification works

The PDF's /Sig dictionaries are parsed and each PKCS#7 CMS blob is extracted.
Each signer's X.509 certificate chain is validated against the pinned BVRAI eSign root.
The SHA-256 digest of the document outside /Contents is recomputed and compared.
RFC3161 trusted timestamps and embedded LTV revocation info are checked.
If signed by BVRAI eSign, the audit log Merkle root in the DocTimeStamp is matched against our public audit endpoint.

The same signatures verify in Adobe Reader after installing the BVRAI eSign root certificate to your trust store.