Content integrity
The viewer uses the certificate’s public key to check the signature and digest of the CAdES contents. Success means the data matches the checked signature.
A self-signed certificate can also pass this check. Integrity alone does not establish certificate trust or signer identity.
Certificate dates and declared signing time
We show the certificate validity period and, when available, the signing time declared in the envelope. That time is not a verified timestamp.
Assessing a signature made with a certificate that has since expired needs additional evidence. The viewer does not make that assessment.
Checks not performed
We do not validate chains against official AgID/eIDAS lists, check revocation via OCSP or CRL or verify timestamps. These aspects are explicitly marked as not verified.
For full validation, use a dedicated validator that explicitly reports these checks.
Multiple signatures and nested envelopes
Signatures in an envelope are shown separately with their available information. Nested P7M envelopes are also supported within the viewer’s limits.
We do not analyze countersignatures in unsigned attributes or PAdES signatures embedded in PDFs. Keep the original P7M: the extracted document does not include the envelope’s signatures.