Public verification — independently confirm a certificate

GET 
/v2/certificates/:id/verify

No authentication required. Designed so a third party (auditor, regulator, another bank) can confirm a certificate handed to them by a fintech without trusting either party.

Returns whether the signature checks out, whether the cert has been revoked, and the issuer + signing key id. valid is true iff signature_valid AND !revoked.

For maximum trust, the verifier can fetch the full cert via GET /v2/certificates/{id} and re-verify the signature themselves against the JWKS at /.well-known/verification-key.json. See docs/CERTIFICATES.md for the independent-verification flow with a Python reference implementation.

Request

Responses

200

Verification verdict

404

Certificate not found