Verify an embedded timestamp

Drop a Provlyn certificate PDF below. We will extract the embedded RFC 3161 timestamp (.tsr) and show you the details — independently of Provlyn's servers.

Prefer the command line?

The full RFC 3161 cryptographic verification can be done with OpenSSL. This proves the timestamp was signed by freetsa.org, without trusting us.

1. Extract the .tsr attachment from the Provlyn PDF (most PDF readers can do this — right-click the attachment icon).
2. Download the freetsa.org CA certificate: https://freetsa.org/files/cacert.pem
3. Verify with OpenSSL:

openssl ts -verify \ -in timestamp.tsr \ -digest <your file's SHA-256 hex hash> \ -CAfile cacert.pem

A successful verification confirms the file's hash was timestamped by freetsa.org at the exact moment recorded. This is legally recognised under eIDAS (EU), the UK Electronic Communications Act, and US Federal Rules of Evidence.