Verification steps

  1. Load ToneThread Root public key…
  2. Verify Tenant Site Certificate signature…
  3. Verify Post Certificate signature…
  4. Recompute ToneHash of post content…
  5. Compare recomputed hash to certificate…

Revision history

Originally published 2026-05-05, updated 2026-05-18; 12 revisions (this active certificate plus 11 prior).

IssuedSupersededContent hash
2026-05-05T01:53:35.795Z 2026-05-05 01:57:55 tth_v1_4191fab995fe11ac
2026-05-05T01:57:55.560Z 2026-05-05 02:03:13 tth_v1_4191fab995fe11ac
2026-05-05T02:03:13.109Z 2026-05-05 02:04:29 tth_v1_90b129033aa5f927
2026-05-05T02:04:29.357Z 2026-05-05 02:22:02 tth_v1_7ab17de432509f31
2026-05-05T02:22:02.111Z 2026-05-05 02:32:58 tth_v1_441eecd662352bf6
2026-05-05T02:32:58.584Z 2026-05-05 02:37:07 tth_v1_6bbe72eb9ad1343c
2026-05-05T02:37:07.109Z 2026-05-05 02:37:16 tth_v1_6bbe72eb9ad1343c
2026-05-05T02:37:16.242Z 2026-05-05 02:38:42 tth_v1_6bbe72eb9ad1343c
2026-05-05T02:38:42.665Z 2026-05-05 02:40:12 tth_v1_6bbe72eb9ad1343c
2026-05-05T02:40:12.572Z 2026-05-07 16:56:48 tth_v1_6bbe72eb9ad1343c
2026-05-07T16:56:48.940Z 2026-05-18 11:18:00 tth_v1_33e8ee7efc3deb3b
2026-05-18T11:18:00.516Z — active — tth_v1_2919bc638961eb84

What this page exposes

Verification runs on the server. The browser only sees the public summary in the sidebar and the step-by-step ok/fail result above — never the certificate's raw signature, the tenant's raw public key, the ToneHash salt, the per-axis tonal scores, or the compact fingerprint string. Those stay on the signing host.

The public JSON at /tonehash/cert/single-persona-now-twelve-later mirrors the same surface. To independently audit a certificate's raw signed payload you must request an authenticated cert-bundle export from the operator — how to request access.