Verify the evidence
Authenticity is not a safety guarantee.
Check a downloaded or modified envelope
POST its JSON to /cert/api/verify. Example: curl -H 'Content-Type: application/json' --data-binary @certificate.json https://hariskeep.com/cert/api/verify. Changing a signed value must fail. See the offline verification protocol.