Trust · signed credentials

Verify a BPR credential

Each approved provider holds a W3C Verifiable Credential signed with the registry's Ed25519 key (did:web:registry.brainsait.de). This page checks the signature on your device — nothing you paste is uploaded. A live status check is a separate step.

Paste a credential (.jwt) or drop the file

Choose a file

How the check works

The credential is a compact JWS: header.payload.signature (VC-JOSE, alg EdDSA).
Its kid names a key in the registry's DID document — the same keys are embedded below, so this works offline.
Changing a single character of the name, dates or membership breaks the signature.
Every issued credential is also an entry in the public transparency log. Replay the log

/.well-known/did.json · [{"kty":"OKP","crv":"Ed25519","x":"r8PtEntq8q146yjDe4vLTKNvTmvkOgFjHsrXYZgoC00","kid":"did:web:registry.brainsait.de#key-1"}]

BrainSAIT Provider Registry · BPR workspace · GIVC · hello@brainsait.de · Privacy