Is the PDF uploaded to a server?

No. Attestto Verify runs 100% in your browser. Your PDF file never leaves your device. All signature verification, certificate chain validation, and integrity checks happen client-side using the Web Crypto API. No backend, no data transmission.

What digital signatures can Attestto Verify check?

Attestto Verify supports PAdES (PDF Advanced Electronic Signatures), CAdES, and standard PKCS#7 signatures. It validates against Costa Rica's Firma Digital PKI (BCCR/SINPE/MICITT) and can bridge to any national PKI via the did:pki resolver at resolver.attestto.com.

How does cross-border PKI verification work?

When you verify a document signed by a foreign PKI, Attestto derives a did:pki identifier from the certificate and resolves it via resolver.attestto.com. If the resolver knows that country's PKI, it returns the CA's public key and the verifier can validate the entire chain — no manual trust store configuration needed.

Is Attestto Verify free?

Yes, completely free and open source under the Apache 2.0 license. Document verification is a citizen right in the Attestto architecture — it will never have a paywall. Source code is available at github.com/Attestto-com/attestto-verify.

Can I verify Costa Rica Firma Digital documents?

Yes. Costa Rica's full BCCR PKI hierarchy is supported — including Persona Física, Persona Jurídica, and SINPE certificates. The verifier validates the certificate chain, checks document integrity, and shows the signer's certificate details. It works with any PDF signed using Firma Digital.

Verify Sign

Document Verification

Verify integrity and signatures — your file never leaves your device.

Technical Audit

What gets verified

Document integrity (SHA-256, ByteRange)
Digital signatures (PAdES, CAdES, PKCS#7)
PKI recognition (CR Firma Digital)
Security scan (JS, auto-actions, embeds)
Metadata analysis

Verification Levels

Detected Signature found

Parsed Cert chain extracted

Verified Crypto proof valid

Privacy

Your file never leaves your device. All verification runs 100% in the browser — no upload, no backend. Anonymous usage analytics only with your consent.

View source →

Signature Types

PAdESCAdESPKCS#7

Recognized PKI

🇨🇷 CR Firma Digital More via did:pki

Capabilities

Zero upload Client-side Open source X.509 ByteRange Forensic

Browsers

ChromeFirefoxSafariEdge

Network Transparency

All verification runs 100% in your browser. No document data is ever transmitted to any server. Network requests visible in DevTools (e.g. Cloudflare CDN, GitHub Pages) serve only the application code — never your files. Verify in the source code →

attestto.org Developers GitHub DID Resolver Standards

Open source under Apache 2.0 — attestto/verify · Your file never leaves your device.