Trust

Signatures and fingerprints

Certificates store signed metadata and PDF fingerprints so public verification can detect status and integrity changes.

Certificate QR codes resolve to the canonical /v/{certificateId} route. Retired public keys remain available for historical verification.

Fixes after issue use reissue or revoke workflows, not silent mutation.