# Verify a certificate — Redeal

Paste a certificate ID at https://redeal.dev/verify. Redeal recomputes the
signature and the transparency-log inclusion proof and shows exactly
what passed. Verification is free, public, and needs no account.

## What gets checked

- **signature** — against the current public key (or a published legacy key)
  at `GET /v1/status`.
- **log inclusion** — the certificate's Merkle path, replayed against the
  signed tree head at `GET /v1/log/tree-head`.
- **input root** — well-formedness; inputs themselves never appear in a
  certificate.
- **outcome** — `COMPUTED` or `VOID` (a VOID certificate names the parties
  who flaked).

## Without this website

```sh
curl -s https://api.redeal.dev/v1/verify/c_13458d82193a3bec
curl -s https://api.redeal.dev/v1/status   # the verifying pubkey
```

The API recomputes everything on every request; nothing is cached as "valid".
The page and the API never disagree.

Full bit-for-bit re-execution of the algorithm from the published test vectors
ships with the public source repo at launch; signature and log-inclusion
verification already works today, from any machine, without Redeal.