Redeal
Verification is free, forever

Check a certificate

Paste a certificate ID. We recompute the signature and the transparency-log inclusion proof and show you exactly what passed. No account, no cost, and the API gives the same answer as JSON.

No certificate at hand? See c_13458d82193a3bec, a real certificate from this deployment.

Verification result

…

Certificate

What was checked

The verification record, exactly as served 

        
This is the complete public verification record, served as JSON at . This page and the API never disagree.

      

    

  


  

    

      Don't take this page's word for it
      
The same check, without this website

      
$ curl -s https://api.redeal.dev/v1/verify/c_13458d82193a3bec
$ curl -s https://api.redeal.dev/v1/status   # the verifying pubkey

      
    
        
  1. The API recomputes the signature against the published key and replays the Merkle inclusion path against the signed tree head, on every request. Nothing is cached as "valid".
    2. 
        
  2. Certificates pin the algorithm and its version, so a result can never silently change meaning.
    3. 
        
  3. Full bit-for-bit re-execution of the algorithm from the published test vectors ships with the public source repo at launch; verification of signature and log inclusion already works today, from any machine, without us.
    4. 
      

      
Skepticism is a supported workflow.