Verification steps

  1. Load ToneThread Root public key…
  2. Verify Tenant Site Certificate signature…
  3. Verify Post Certificate signature…
  4. Recompute ToneHash of post content…
  5. Compare recomputed hash to certificate…

Revision history

Originally published 2026-05-01, updated 2026-05-18; 14 revisions (this active certificate plus 13 prior).

IssuedSupersededContent hash
2026-05-01T15:38:17.253Z 2026-05-01 15:51:24 tth_v1_caccdfffcf34a184
2026-05-01T15:51:24.809Z 2026-05-01 15:51:46 tth_v1_eb106d5e1775b95c
2026-05-01T15:51:46.830Z 2026-05-01 15:59:31 tth_v1_c59f6ff753fdfc2b
2026-05-01T15:59:31.231Z 2026-05-02 08:17:23 tth_v1_c59f6ff753fdfc2b
2026-05-02T08:17:23.676Z 2026-05-03 09:09:54 tth_v1_c59f6ff753fdfc2b
2026-05-03T09:09:54.439Z 2026-05-03 09:49:03 tth_v1_c59f6ff753fdfc2b
2026-05-03T09:49:03.864Z 2026-05-04 09:53:13 tth_v1_c59f6ff753fdfc2b
2026-05-04T09:53:13.233Z 2026-05-05 01:54:43 tth_v1_c59f6ff753fdfc2b
2026-05-05T01:54:43.377Z 2026-05-05 02:38:22 tth_v1_807895f38c8fc679
2026-05-05T02:38:22.624Z 2026-05-05 02:39:54 tth_v1_807895f38c8fc679
2026-05-05T02:39:54.380Z 2026-05-06 14:17:46 tth_v1_807895f38c8fc679
2026-05-06T14:17:46.473Z 2026-05-07 16:53:14 tth_v1_8b9c815815683b12
2026-05-07T16:53:14.213Z 2026-05-18 11:11:52 tth_v1_1e4593325b94a390
2026-05-18T11:11:52.519Z — active — tth_v1_aba5b7d9148fb5d0

What this page exposes

Verification runs on the server. The browser only sees the public summary in the sidebar and the step-by-step ok/fail result above — never the certificate's raw signature, the tenant's raw public key, the ToneHash salt, the per-axis tonal scores, or the compact fingerprint string. Those stay on the signing host.

The public JSON at /tonehash/cert/the-r2-cohort-when-the-empire-mistook-signal-for-noise mirrors the same surface. To independently audit a certificate's raw signed payload you must request an authenticated cert-bundle export from the operator — how to request access.