Verification steps

  1. Load ToneThread Root public key…
  2. Verify Tenant Site Certificate signature…
  3. Verify Post Certificate signature…
  4. Recompute ToneHash of post content…
  5. Compare recomputed hash to certificate…

Revision history

Originally published 2026-05-03, updated 2026-05-18; 12 revisions (this active certificate plus 11 prior).

IssuedSupersededContent hash
2026-05-03T10:03:49.955Z 2026-05-03 10:04:24 tth_v1_1e28fdfc96e4891a
2026-05-03T10:04:24.109Z 2026-05-03 10:04:55 tth_v1_1e28fdfc96e4891a
2026-05-03T10:04:55.959Z 2026-05-03 10:05:55 tth_v1_1e28fdfc96e4891a
2026-05-03T10:05:55.816Z 2026-05-05 01:57:03 tth_v1_f2e591b3401c7ee3
2026-05-05T01:57:03.929Z 2026-05-05 02:38:38 tth_v1_44476147fb49f6e7
2026-05-05T02:38:38.030Z 2026-05-05 02:40:08 tth_v1_44476147fb49f6e7
2026-05-05T02:40:07.998Z 2026-05-06 14:21:11 tth_v1_44476147fb49f6e7
2026-05-06T14:21:11.911Z 2026-05-07 16:55:47 tth_v1_1106c15d7ed2f92f
2026-05-07T16:55:47.013Z 2026-05-08 09:48:43 tth_v1_01f0eb1cd1b8dd3c
2026-05-08T09:48:43.091Z 2026-05-08 16:28:39 tth_v1_6cec5175ffe140a2
2026-05-08T16:28:39.093Z 2026-05-18 11:15:43 tth_v1_310097905617ed42
2026-05-18T11:15:43.947Z — active — tth_v1_ffb188e172ebaa25

What this page exposes

Verification runs on the server. The browser only sees the public summary in the sidebar and the step-by-step ok/fail result above — never the certificate's raw signature, the tenant's raw public key, the ToneHash salt, the per-axis tonal scores, or the compact fingerprint string. Those stay on the signing host.

The public JSON at /tonehash/cert/the-publishing-platform-that-proves-what-it-sounds-like mirrors the same surface. To independently audit a certificate's raw signed payload you must request an authenticated cert-bundle export from the operator — how to request access.