Certificate validator

Validate a VARI certificate

Paste or drop a certificate. Its integrity hash is recomputed locally with WebCrypto and compared against the signed value. No network. No server. No dependency on VARI. Optionally provide the designated record to confirm the authority snapshot.

optional: the designated record file
Validation procedure v1

The integrity_sha256 field is removed, the remaining document is serialized as canonical JSON with keys sorted recursively and no whitespace, and its SHA-256 is compared to the signed value. The authority check hashes the provided record file and compares it to authority.snapshot_sha256. A match proves the certificate was issued against exactly that version of the record.

Certificates remain valid and verifiable regardless of the availability of Thirty Seven Inc. or any VARI system. This page loads no analytics. Validation runs in your browser with WebCrypto, and pasted certificates never leave it.