IsoFind PKI

Verify the authenticity of your .isof files

Check the integrity and cryptographic signature of any ISOF file directly in your browser, with no data transmitted to any external server.

100 % local, no data transmittedLevels 1 and 2 supportedWeb Crypto API, no external dependency
ISOF Verifier
ECDSA P-256IsoFind X.509 chainSHA-256 level 1Air-gap compatible
Process

How it works

Verification runs entirely in your browser via the Web Crypto API. Your data never leaves your machine.

01

File loading

Drop or select an .isof file. It is read locally by the browser, with no network request.

02

Signature analysis

The signature level (1 or 2) is detected and the signing block is extracted from the JSON to reconstruct the payload.

03

Cryptographic verification

For level 2, the X.509 chain is verified up to the hard-coded IsoFind Root CA. The ECDSA P-256 signature is validated against the canonical payload.

04

Trust report

The result displays the status, file metadata, signing certificate details and any warnings.

IsoFind PKI

The two signature levels

The ISOF format defines two levels of cryptographic protection, graduated according to traceability and authenticity requirements.

Level 1 — Integrity

SHA-256 hash verification. Guarantees that the content has not been altered since signing.

Level 1
  • SHA-256 fingerprint of the signed payload
  • Detection of any post-signature modification
  • Configurable scope (selected JSON blocks)
  • Issuer authenticity not guaranteed
  • No certificate or chain of trust

Level 2 — PKI Authenticity

ECDSA P-256 signature with X.509 certificate chain anchored on the IsoFind Root CA.

Level 2
  • ECDSA P-256 / SHA-256 signature
  • Lab certificate signed by the IsoFind Issuing CA
  • Full chain of trust up to the Root CA
  • Certificate validity date verification
  • Embedded CRL for offline revocation checking

IsoFind PKI chain of trust

Anchor
Root CA
IsoFind SAS · Foix, FR
Intermediate
Issuing CA
Laboratory certification
Signer
Laboratory certificate
Issued to each partner laboratory