Certificate signing

Every Goaliano certificate PDF carries an embedded digital signature. This page publishes the identity of the key that signs them, so you can confirm a certificate came from us and has not been altered — without needing this website at all.

Signing certificate fingerprint (SHA-256)

19:C0:E1:45:6D:A7:CD:EC40:9B:11:7C:1C:1A:9F:DD3F:95:91:31:10:D1:F8:5524:80:2C:D3:5B:27:CA:ED

Issued to
C = GB, O = K&K Innovation Solutions Ltd, OU = Goaliano, CN = Goaliano Certificate Signing
Valid until
2036-08-20

How to check a certificate

  1. Open the certificate PDF in any standard PDF reader. It will report that the document is signed and name the signer.
  2. Compare the signer fingerprint your reader shows with the value above. If they match, the file is exactly as we issued it.
  3. Your reader may say the signer is “not trusted”. That is expected: our certificate is self-signed rather than bought from a commercial authority. It does not weaken the check — the fingerprint is what identifies us.

What a signature proves, and what it does not

A valid signature proves the file has not been edited since we produced it. It does not prove the certificate is still valid: a revoked certificate keeps a perfectly good signature for ever. To check whether a certificate still stands, look it up by its serial.

Check a certificate

Read this fingerprint somewhere other than here as well

This page is served from the same website as the certificates, so anyone who could tamper with one could tamper with the other. K&K also publishes this fingerprint through a channel independent of this site. If the two ever disagree, trust neither and contact us.

Questions about a certificate: [email protected]

Goaliano news, straight to your inbox

Product updates, new features and stories from players. No spam, and you can unsubscribe from any email. Privacy Policy