Issuing certificate chain
Trust Center / PKI
Certificate issuance, revocation, and real-time status checking — reused consistently across payslips, budget approvals, and third-party verification.
01
Capabilities
What the PKI layer does.
Certificate issuance for every organization on the platform
Revocation via Certificate Revocation Lists (CRL)
Real-time status checking via OCSP
Automated certificate renewal — no manual expiry tracking
Cryptographic document signing reused across every module
Third-party-verifiable documents — no need to contact the issuer
02
How It Works
From signing to verification.
1
A document — a payslip, a budget approval, a certificate — is generated within the platform
2
The platform signs the document using the organization's issued certificate
3
The signature and certificate chain are embedded with the document
4
A third party can verify the signature independently, without contacting the issuing organization
5
Certificate status is checked in real time via OCSP before any verification is trusted
// FINAL_CALL
See a document verified end to end.
A live demonstration signs and verifies a document using the platform's PKI in real time.