Check the digital signatures in a PDF
Drop a signed PDF to see every signature: who signed, when, with which certificate chain, whether the document changed after signing, the timestamp, and whether long-term validation (LTV) data is embedded. Each problem is explained in plain words, including the reasons behind Adobe's warnings. The PDF never leaves your browser.
What you can do
- Lists every signature, approval and certification, in signing order
- Detects changes made after signing (incremental updates)
- Verifies the document hash and the signature against the signer's certificate
- Shows the signer's certificate chain and timestamp (RFC 3161)
- Reports PAdES level and long-term validation (LTV) data
Frequently asked questions
Why does Adobe say “the validity of the signature is unknown”?
Usually the signer's certificate does not chain to a root Adobe trusts, or revocation information is missing. PKIScope shows the chain and which link is missing.
Is my PDF uploaded?
No. The PDF is read and checked entirely in your browser.
What does LTV (long-term validation) mean?
The PDF embeds the certificates, revocation data (OCSP responses or CRLs) and timestamps needed to validate the signature later, even after the signer's certificate has expired.
Does PKIScope check revocation online?
No. It never contacts OCSP or CRL servers. It reports the revocation data embedded in the PDF and explains what is missing.
Related tools
- PKCS#7 / CMS — Open P7S, P7M and P7B files and verify signed data
- Code signature — Read the Authenticode signature of a Windows .exe, .dll or .sys
- Viewer — Inspect and debug certificates, PFX files, keys, CSRs and CRLs