Step-by-step guides · Help Center
Your issuer identity, your domain, and verification
What exactly makes a credential trustworthy, and how to make that trust point at your institution rather than at us.
What a verifier actually checks
When someone verifies a credential of yours, the system checks three things, in this order: that the signature matches the keys published by your institution, that the content has not changed by a single character since it was signed, and that the credential is neither revoked nor expired.
None of those three questions is answered by VeriCert on its own authority. They are answered by mathematics, against a document you publish.
Your issuer identity (did:web)
Signing up created an issuer identity document holding your public keys. It lives at a web address, and that address is the root of all the trust: whoever verifies goes there to find what to check the signature against.
On entry plans it lives under vericert.pro. From the Institución plan it lives under your own domain, and at that point the credential carries no mark of ours anywhere along the path.
Connecting your domain
- Under Institution → Own domain, enter the domain or subdomain you will use (for example credentials.youruniversity.edu).
- Create the DNS record we show you, pointing at our infrastructure.
- Wait for propagation — minutes to a couple of hours — and confirm from the panel.
- From then on, new credentials verify on your domain.
Heads up: Credentials already issued keep verifying where they were born. Connecting the domain breaks nothing from the past, but it does not migrate it either: if that matters to you, do it before your heavy issuing season.
Dual signing, and why it exists
Each credential is signed twice with different methods: Data Integrity and VC-JWT. It sounds redundant and it is, on purpose.
The verifiable-credentials ecosystem has not settled on one format yet. Signing twice means your credential can be read both by a modern verifier and by one that only understands the classic format, without you having to bet on the winner.
Revocation: the part almost nobody looks at
A credential that cannot be revoked is not worth much. If you revoke, whoever checks sees the same page, clearly marked as revoked, with the date.
We do not delete or hide it. An employer verifying a revoked degree needs to learn that it was revoked, not run into a 404 they can read any way they like.
If we disappeared tomorrow
It is the right question to ask any credentialing provider. The answer here: each credential is a self-contained file with its signature inside. It can be downloaded, kept, and verified against your issuer identity document, which lives on your domain.
On top of that, your plan guarantees retention — 2 to 10 years, perpetual from Institución — and there are automatic backups you can download.