—

—

This certificate is verifiable offline: the payload and its Ed25519 signature travel with the file, so a third party needs only the published public key.