Trust
Signatures and fingerprints
Certificates store signed metadata and PDF fingerprints so public verification can detect status and integrity changes.
Certificate QR codes resolve to the canonical /v/{certificateId} route. Retired public keys remain available for historical verification.
Fixes after issue use reissue or revoke workflows, not silent mutation.