Verification After Signing

Objective

Every system that integrates with the PKI service must offer a way to verify a document after it has been signed.

Guidelines

At a minimum, the verification must confirm:

1. The digital signature is cryptographically valid.
2. The document has not been changed since it was signed.
3. The signing certificate is trusted.
4. The certificate was valid at the time of signing.