> For the complete documentation index, see [llms.txt](https://docs.emudhradigital.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.emudhradigital.com/help-center/faqs/certificates-and-validation.md).

# Certificates and Validation

<details>

<summary>Adobe shows "Signature validity is unknown". Is the signature invalid?</summary>

Usually not. Adobe needs to trust the issuing root. eMudhra's emSign roots are on the Adobe Approved Trust List, so signatures from emSign hierarchies validate automatically. For certificates chaining to the Root CA of India, add the RCAI root to Adobe's trusted certificates, or use the eMudhra Validation Tool.

</details>

<details>

<summary>The certificate shows it expired 30 minutes after signing. Is the document still valid?</summary>

Yes. The signature was created while the certificate was valid. Signatures returned as PKCS7pdf include a trusted timestamp and revocation data, so they remain verifiable long after the certificate expires (long-term validation).

</details>

<details>

<summary>Why does the signer name look different from my application?</summary>

The certificate carries the name exactly as returned by the eKYC source (Aadhaar or your eKYC account). The pseudonym field carries a unique response code for the transaction.

</details>

<details>

<summary>How do I verify a signed document?</summary>

Open it in Adobe Acrobat Reader and check the signature panel, or upload it to the eMudhra Signature Validation Tool for a full report covering integrity, certificate chain, revocation and timestamp.

</details>

<details>

<summary>The document shows "modified after signing".</summary>

Any change to the signed bytes invalidates the signature. Allowed changes (such as filling designated form fields) are reported separately. Re-sign the final version of the document.

</details>

<details>

<summary>Can I get a long-term certificate without a USB token?</summary>

Yes — Remote Key Storage issues a long-term certificate (default 2 years) whose key is held in an eMudhra HSM and unlocked with your AuthPIN.

</details>