> For the complete documentation index, see [llms.txt](https://docs.emudhradigital.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.emudhradigital.com/documentation/digital-signature-validation-tool/using-the-validation-tool.md).

# Using the Validation Tool

## Web tool

1. Open the eMudhra Signature Validation portal.
2. Upload the signed file (PDF, XML, or detached `.p7s` with the original file).
3. Optionally choose the validation time ("now" or "at signing time") and trust list profile.
4. Click **Validate**.
5. Review the summary — one card per signature with status, signer, signing time, certificate issuer and timestamp.
6. Expand a signature for the detailed check list, or **Download report** (PDF, digitally signed by eMudhra).

{% hint style="info" %}
Documents uploaded to the web tool are processed in memory and are not retained after validation. For bulk or sensitive workloads, use the API or on-premises deployment.
{% endhint %}

## Reading the report

| Section          | Content                                                                              |
| ---------------- | ------------------------------------------------------------------------------------ |
| Document summary | File name, hash, number of signatures, overall result                                |
| Per signature    | Status, signer name, organisation, signing time, reason/location, auth class (eSign) |
| Certificate      | Subject, issuer, serial, validity, policy, chain                                     |
| Revocation       | Source (embedded / live), OCSP/CRL result and time                                   |
| Timestamp        | TSA name, time, token validity                                                       |
| Modifications    | Changes detected after each signature                                                |

## Validating in Adobe Acrobat

emSign roots are on the Adobe Approved Trust List, so eMudhra signatures show as valid in Acrobat Reader by default. For other Indian CAs, the RCAI root may need to be added to Acrobat's trusted certificates.