{
  "experiment": "UK trusted list, fixed snapshot 2026-09-11",
  "verificationTime": "2026-09-11T00:00:00+00:00",
  "scope": "XMLDSig consistency and publisher-certificate comparison; not complete trusted-list or personal QES validation",
  "inputSha256": "5cb2aae46d4131ad68fdd9d27375c5942d4d7d22d09193138aa6e2006300b979",
  "publishedHashMatches": true,
  "embeddedCertificate": {
    "subject": "CN=TL Signing 01,O=Information Commissioner’s Office,C=UK",
    "sha256": "fab46546aabdad49c821bf168912504c3288378787b02aba366daa61bcadadcc",
    "sha1Identifier": "a3ad364f7fafd57bf70ce03de0f48933d71207a2",
    "publicKeySha256": "fbcfd70d178bb5a97fee48694073fe2a17ec94ed257ad254a97edaebc7215a31",
    "notBefore": "2022-09-23T13:38:16+00:00",
    "notAfter": "2028-09-23T13:38:16+00:00"
  },
  "embeddedKeyDiagnostic": "signature and both references verified; does not establish publisher trust",
  "opensslRsaDiagnostic": "Verified OK",
  "advertisedCertificateChecks": [
    {
      "file": "tlsigning_02.cer",
      "subject": "CN=TL Signing 02,O=Information Commissioner’s Office,C=GB",
      "sha256": "8ee6a3078230abe1af6b4516db30016ddf70185af055d51caadae70e4421e643",
      "sha1Identifier": "9d6a82058429b4d4b169045079e8dbec4431f986",
      "publicKeySha256": "3824e06e56fe602b118f0c182952d9c69eb7c462488580dca90f011349ec612d",
      "notBefore": "2026-02-18T10:14:52+00:00",
      "notAfter": "2032-02-17T10:14:52+00:00",
      "result": "InvalidSignature"
    },
    {
      "file": "tlsigning_03.cer",
      "subject": "CN=TL Signing 03,O=Information Commissioner’s Office,C=GB",
      "sha256": "d7333ae5d3f68c6c86ffb696cbb750ed3d1bce020d96efbbde9554618cbad37a",
      "sha1Identifier": "dce92ed8112977245d54a2f25bbf37d725db0849",
      "publicKeySha256": "aaaecf14e8dc9d1ecdeb7fddf67748f4bbf45cb400c4c2390efef2fa27a6e830",
      "notBefore": "2026-05-21T13:58:46+00:00",
      "notAfter": "2032-05-19T13:58:46+00:00",
      "result": "InvalidSignature"
    }
  ],
  "publisherAuthentication": "NOT_ESTABLISHED_WITH_CURRENT_GUIDE_CERTIFICATES",
  "modifiedPayloadResult": "InvalidDigest",
  "observationsFromSignatureConsistentPayload": {
    "sequence": "36",
    "issueDate": "2026-07-26T00:00:00Z",
    "nextUpdate": "2027-01-26T00:00:00Z",
    "withinStatedIntervalAtCheck": true,
    "claimedSigningTime": "2026-07-27T08:09:14Z",
    "providerEntries": 3,
    "serviceEntries": 18,
    "currentStatusCounts": {
      "http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/withdrawn": 18
    }
  },
  "limitations": [
    "No confirmation that the older embedded key remains an authorised publishing key.",
    "No revocation check or full ETSI trusted-list/XAdES conformance validation.",
    "The claimed SigningTime is not an independently verified time stamp.",
    "No global provider/brand conclusion or individual signature approval follows from these entries."
  ],
  "libraries": {
    "signxml": "5.1.0",
    "cryptography": "50.0.1",
    "lxml": "6.1.3"
  }
}