Attestation receipt

A digest signed on a Securosys Primus HSM. The signature is checked right here in your browser, against the public key below; the private half cannot leave the hardware.

⋯ verifying
⋯ checking the chain
Don't trust this page? Verify yourself: public key · receipts
openssl dgst -sha256 -verify XNAUT_ATTEST_KEY.pem -signature sig.bin signed.bin
where signed.bin is prev followed by digest, both hex decoded to bytes, and sig.bin the signature base64-decoded. Receipts written before the chain existed carry no prev; for those, signed.bin is the digest alone.