Sealed certificate
This certificate exists and has not changed since it was sealed.- CERTIFICATE ID
- tkyd4vgm9xq38nqdn0z9
- SEALED
- 4 Nov 2026, 21:15:17 UTC
- PAGE DOMAIN
- acme-quotes.com
- RECORDED BY
- cValue (cvalue.ai)
Full details are available to the business that received this lead. This page shows no personal data.
Integrity
SHA-256 MANIFEST HASH
Signed bycValue · Ed25519 key cv-2026-09Sealed by cValue4 Nov 2026, 21:15:17 UTCMerkle root01d249fafce476ab…dcb78ea2 · batch 4 Nov 2026, 21:00:00 UTCOutside timestamp 1DigiCert TSA · 4 Nov 2026, 22:05:22 UTCOutside timestamp 2Sectigo TSA · 4 Nov 2026, 22:05:22 UTC
- Ask the business that received the lead for the evidence pack. It contains manifest.json, the exact bytes that were hashed.
- Hash the manifest and compare it with the hash above, then check cValue’s signature with the published public key.
- Check each timestamp token in the public proof against the authority’s certificate. The proof also holds the Merkle path from this certificate to the timestamped root.
# 1. The manifest must hash to the value above openssl dgst -sha256 manifest.json # 2. cValue's Ed25519 signature over that hash curl -s https://api.cvalue.ai/v1/keys # save public_key_pem as cvalue.pem curl -s https://api.cvalue.ai/v1/proofs/tkyd4vgm9xq38nqdn0z9 # signature, Merkle path, timestamp tokens echo b9af35d4447cc57e81b8fcf5d59688027fc1bcb0576779921fccb6caad54344c | xxd -r -p > hash.bin echo 'zruZkFVnuJ1rt+iYcQMbiEQ6cVRhM0SMd7FBFTn16bBwxUhJ6JYBergz78WHzinKXld0wuxuvrw0pyT3sp03DQ==' | base64 -d > sig.bin openssl pkeyutl -verify -pubin -inkey cvalue.pem -rawin -in hash.bin -sigfile sig.bin # 3. Each RFC 3161 token timestamps the hour's Merkle root echo '<merkle.timestamps[0].token>' | base64 -d > tsa1.tsr openssl ts -verify -digest 01d249fafce476ab97cdb2fc3f99dcb2d276f768c940b2a362b6e37cdcb78ea2 -in tsa1.tsr -CAfile tsa-root.pem