Verify a signed PDF.
Right here, offline.
Drop a PDF signed with esig-suite (or any PKCS#7 / CAdES signer) to check its integrity, authenticity, and trusted timestamp. Everything runs in your browser — your file never leaves your device, no API calls, no uploads.
Drop a signed PDF here
or click to choose a file · .pdf · processed locally with the same verifier that ships in @e-sig/core
What this checks
The exact same static-verification logic that ships in @e-sig/core, compiled for the browser.
| Check | What it proves |
|---|---|
| Byte-range coverage | The signature's /ByteRange tiles the whole file — nothing was appended or patched around the signed region. |
| Integrity (SHA-256) | The signed messageDigest attribute matches the hash of the covered bytes — the document was not modified after signing. |
| Authenticity (RSA) | The RSA signature verifies against the embedded signer certificate over the signed attributes. |
| RFC 3161 timestamp | If present (CAdES-T), the timestamp token's messageImprint binds to the signature — proving when it was signed. |
What this does not check: whether you should trust the signer certificate itself. esig-suite issues self-signed, per-tenant certs, so trust is established out-of-band (compare the cert fingerprint against the issuer's audit log — see verifyPdfSignature in the repo). Structural and cryptographic verification here is exact.