Check what a signature actually proves.
Verify a signed PDF, XML or JSON against the CCA India roots. You get the whole story: what was confirmed, and what could not be established.
The check runs inside your browser. Your document is never uploaded, and there is no copy of your document on our servers to delete, because one was never made.
The verifier is compiled with no network client in it at all, so it cannot send your document anywhere even in principle. Your file is read in this tab and never uploaded.
Where a signature leaves out the authorities that issued it, the page does fetch public lists of certifying authorities to fill the gap: Indian ones, European ones, and the same list Adobe Acrobat uses. Those are lists of public certificates, requested without anything that identifies you, and each is checked before it is believed – the first two against fingerprints built into the verifier, and Adobe’s against Adobe’s own signature on it.
Verified signatures and yellow warnings
A green result means the signature verified. Yellow warnings explain what could not be established, such as a signing time without a trusted timestamp. We check revocation evidence embedded in the document and automatically request current public certificate revocation lists through our backend. Only public list URLs are sent, not your document, certificate contents, or certificate serial numbers. The lists are authenticated on your device. If a list cannot be reached or validated, the result retains a warning.
Need timestamping, batch signing, or to sign with your own DSC token? Novel Signer for desktop does that.