Assurance
Automated passing results are verified at the time shown. Owner disclosures are self-attested. Community feedback is separate. Presence evidence never proves legal compliance.
Evidence
Certificates that remain checkable
A stable public record can remain visible even when it is no longer active.
Verified checks, owner statements, and community opinions have distinct assurance levels. Preserve those labels in every integration.
Status
Active and active with warnings mean required checks passed. Failing, expired, revoked, and suspended records must be interpreted as inactive or degraded. Status history explains the reason.
Signatures
The JSON document is signed using Ed25519 JWS. Verify its signature against the issuer JWKS, compare the signed payload to displayed fields, and then check domain, freshness, expiry, and status.
Lifecycle
Validity is ninety days. Successful scans renew it. Owners can revoke records with a public reason, and administrators can suspend or revoke following review.
GET /api/v1/certs/example.com.json GET /.well-known/jwks.json
