Verification and trust
Cryptographic signing
Each certificate is signed, so a forged or altered certificate fails verification.
Every certificate is signed with an app-wide Ed25519 keypair at the moment it is issued. A SHA-256 fingerprint is taken of the certificate's immutable data, and both the fingerprint and the signature are shown on the verification page and independently checkable, without any wallet, NFT or blockchain. Tampering with any signed field breaks both the fingerprint and the signature.
Related articles