Verify a certificate
Paste a certificate below. Your browser fetches the published ruleset artefact, replays the input against it, recomputes every hash and checks the signature. None of the certificate's own numbers are taken on trust.
This page does the checking, not the API. The verifier is the same code the Worker runs at POST /v1/verify, compiled to a single file you can read at /verify.bundle.js. It asks the API for the ruleset, but the certificate carries that artefact's hash and this page recomputes it, so a substituted ruleset fails rather than passes.