Workshop record · SW-2026-257068 · digital certificate · checked today
Yenta Girl Canvas Print · SW-2026-257068 · commission print · made 24 Aug 2026
Every signature in the stored bundle checks out and the certificate is within its validity period. The register lists it as active — and anyone can confirm all of this offline, without trusting this server, using the commands at the foot of the page.
The chip setup for this item hasn’t been recorded.
An item chip is registered, but its attachment has not been confirmed.
The NFC chip is on the certificate. It checks the certificate’s signed record, not the item itself.
The NFC chip is on the keep card. Use it to open this item’s reorder page.
You can always open this record using its workshop serial.
A digital ID card for this one work. Sunlit Workshop’s own certificate authority issued it, and it names the serial, this public page, and a fingerprint that identifies the file. It proves the workshop issued an identity for this serial — it does not prove the physical piece in your hand. Open the item’s record to see its recorded physical marks and NFC setup.
The workshop stands behind this identity today, and every signature checks out.
The workshop withdrew it. The page stays up as history; don’t rely on the certificate.
Its dated window has passed. The record still stands; a successor can be issued.
A short code computed from the whole file. Matching fingerprint = same certificate, to the last byte.
| Subject — what is certified | CN=SW-2026-257068,O=Sunlit Bytes,C=US |
|---|---|
| Issuer — who signed it | CN=Sunlit Bytes Document CA 1,O=Sunlit Bytes,C=US |
| Certificate serial | 25:26:EC:B7:10:47:A0:36:4E:81:C3:FF:32:5A:37:39:39:EC:79:1BThe file's own number — not the work's serial, which is above. |
| Validity | 2026-08-25 → 2031-08-25The workshop issues a successor on this date, if it still stands. |
| Public key | ECDSA P-256 |
| Signature algorithm | ecdsa-with-SHA256 |
| Key usage | digitalSignature · basicConstraints CA:FALSE |
| Certificate policy | 1.3.6.1.4.1.66538.2.8 |
| Bound to — where it points | urn:sunlit:item:SW-2026-257068 |
93:EC:1A:51:31:24:4D:E7:E0:39:FA:43:0E:91:8E:9D:84:2D:31:60:36:EB:97:F7:3E:F3:E3:04:D1:E5:67:DBMatch this against the downloaded .pem — if even one character differs, it is not the same certificate.
9A:6E:87:20:98:C3:A9:B0:68:6E:FC:C5:D7:0A:D9:F9:86:26:71:18Each certificate signs the one below it; the chain ends at this work’s own certificate. The root is published openly, so the whole chain can be re-checked by anyone.
Finished and entered in the workshop records as SW-2026-257068.
Signed by Sunlit Bytes Document CA 1; validity runs to 2031-08-25.
Most recent pass for this method, from the register's scan log.
Most recent pass for this method, from the register's scan log.
Three commands, standard OpenSSL. They fetch the published roots and check every signature in the chain on your own machine.
$ curl -sO https://ca.sunlitbytes.com/ca/roots.pem$ curl -sO https://provenance.sunlitworkshop.com/dl/SW-2026-257068/item-cert.pem$ openssl verify -CAfile roots.pem -untrusted item-cert.pem item-cert.pem