PDF Signature Verifier
Check whether a digitally signed government PDF is genuine and who signed it.
- Whether the file carries a digital signature at all
- Whether a single byte has changed since signing
- Whether the signature really was made with that certificate's key
- Who the certificate names, and who issued it
- The date it was signed and the certificate's validity dates
- Whether anything was appended after the signed region
How to use it
- Choose the signed PDF — an Aadhaar download, an e-PAN, a caste or income certificate, a court order.
- The check runs immediately.
- Read the two things that matter: who signed it, and whether the page has been altered since.
Questions about this tool
What does "the document has not been altered" mean?
Signing takes a fingerprint of the exact bytes of the document. We recompute that fingerprint and compare. If they match, not one character has changed since it was signed — no edited name, no changed date, no swapped photograph.
Does a green result mean the certificate is genuine?
It means two things: the document still matches what was signed, and the signature really was made with the private key belonging to the certificate shown. It does not check that certificate against the Controller of Certifying Authorities chain — for that, open the file in Adobe Acrobat Reader, which ships with the Indian root certificates. Treat this as a fast first check, not a legal opinion.
It says "no signature found".
The PDF was never digitally signed, or it is a scan or photocopy of a signed one — printing and rescanning destroys the signature. Download the original from the issuing portal.
It found the signature but could not check it.
Some signatures use algorithms this tool does not implement, such as RSA-PSS or elliptic curve keys. That is not a sign of forgery — it means the check could not be attempted, and the page says so rather than guessing.
Whose certificates does it recognise?
It names the Certifying Authority that issued the signing certificate and, for the licensed Indian CAs — eMudhra, (n)Code, Capricorn, SafeScrypt, PantaSign, IDSign, VSign, XtraTrust, ProDigiSign, C-DAC, NIC and others — says so plainly. It still does not walk the full CCA trust chain; Adobe Acrobat Reader does that.
Is my document uploaded?
No. The whole check runs in your browser — the file never leaves your device.