A C2PA signing certificate is used by a product, service or device to sign C2PA manifests — and to help validators evaluate who signed them.
A C2PA signing certificate is a certificate used by a product, service or device to sign C2PA manifests.
When a Content Credential is created, the signing system produces a cryptographic signature over the C2PA Manifest. This signature helps future validators detect whether the manifest was modified and whether the signer’s credential can be trusted.
A C2PA signing certificate helps answer one central question:
Who, or what system, signed this C2PA Manifest?
It can also help validators determine whether the signature was created during the certificate’s validity period, whether the certificate chain is valid, and whether the signing credential is trusted by the validator’s policy.
A signing certificate is not a general proof that the content is true. It is part of a provenance system. It helps prove that a specific manifest was signed by a specific credential and that the manifest can be checked cryptographically.
A test certificate shows that the signing flow works. A trusted certificate is what lets validators recognise the signer.
For developers and product teams, test signing is often the first step. A local test certificate can be enough to confirm that the signing flow works, that the manifest is embedded correctly, and that verification tools can read the result.
Trusted signing is different. A production signing certificate should be issued according to the relevant C2PA certificate policy and the rules of the C2PA Trust List. This is what allows compatible validators to distinguish between a local demo signature and a publicly trusted Content Credential.
You may need a C2PA signing certificate if you are building:
ProvSeal lets users test local signing workflows and inspect signed results directly in Chrome. This makes it useful for demos, validation and early integration work before a team moves to a production signing certificate and public trust workflow. Explore the demo, the Conformance Program context and the enterprise options.
The ProvSeal extension reads the Content Credentials of an image, a video or a PDF right in your browser. No file is uploaded.
