Identify the signers
Signer and organisation details come from a verified certificate. The page lists its issuer and validity period. The public view masks part of the signer’s individual identification number
Check completion
The status shows how many assigned participants have signed. A result of 1 out of 2 means one signature is present but signing by all assigned parties is still incomplete
Match the original file
Compare the original file’s SHA-256 checksum with the value shown on the verification page. A match confirms the same file content. A checksum alone does not replace cryptographic signature verification
Keep the evidence together
The archive contains the original, CMS signature files and a PDF with signature details. Independent cryptographic verification requires the original, signatures and a compatible verification tool. The PDF does not replace the CMS signatures
What you need to know
Does the signature PDF replace the signed original?
No. Keep the original file and CMS signatures together. The PDF is a readable presentation of verification details
Is the displayed time always a trusted timestamp?
No. Server time and a trusted timestamp are different sources. NIIT identifies the source; a server-recorded time is not a trusted timestamp