Verification steps

  1. Load ToneThread Root public key…
  2. Verify Tenant Site Certificate signature…
  3. Verify Post Certificate signature…
  4. Recompute ToneHash of post content…
  5. Compare recomputed hash to certificate…

Revision history

Originally published 2026-08-10, updated 2026-08-10; 6 revisions (this active certificate plus 5 prior).

IssuedSupersededContent hash
2026-08-10T09:54:38.116Z 2026-08-10 10:39:57 tth_v1_1d4b671f63997917
2026-08-10T10:39:57.707Z 2026-08-10 17:03:09 tth_v1_e06b0c3301fc955a
2026-08-10T17:03:09.637Z 2026-08-10 17:43:13 tth_v1_0c188e70de6ec5b6
2026-08-10T17:43:13.368Z 2026-08-10 17:48:09 tth_v1_64b405e234d9d6d4
2026-08-10T17:48:09.619Z 2026-08-10 17:48:48 tth_v1_a0484feb116b4aae
2026-08-10T17:48:48.721Z — active — tth_v1_d8fbe8b1e376af54

What this page exposes

Verification runs on the server. The browser only sees the public summary in the sidebar and the step-by-step ok/fail result above — never the certificate's raw signature, the tenant's raw public key, the ToneHash salt, the per-axis tonal scores, or the compact fingerprint string. Those stay on the signing host.

The public JSON at /tonehash/cert/adhd-in-autistic-adults-a-life-ruled-by-audhd mirrors the same surface. To independently audit a certificate's raw signed payload you must request an authenticated cert-bundle export from the operator — how to request access.