Pactumize Sign signer certificate
This is the public certificate Pactumize Sign uses to seal every PDF it issues. You can download it, inspect it, and add it to your trust store so that signed documents display as fully verified in Adobe Reader and other PDF readers.
Certificate details
When you add this certificate to your trust store, compare the fingerprint shown in your OS / Adobe Reader dialog against the value above. They must match exactly.
Why do I need to trust this certificate?
Pactumize Sign currently uses a self-signed certificate. That means the cryptographic signature in every sealed PDF is mathematically valid — you can confirm that on the verification page or with our CLI tool — but PDF readers don't know Pactumize yet, so they'll display "signature is valid, but signer's identity is unknown" until you tell them once that this certificate belongs to us.
This is a one-time setup per machine. Once trusted, every Pactumize-sealed PDF will show as fully verified.
Trust in Adobe Reader (Windows / macOS)
- Download the certificate (saves
pactumize-sign.crt). - Open Adobe Reader (or Acrobat).
- Open Preferences:
- Windows: Edit → Preferences (or press
Ctrl+K). - macOS: Acrobat Reader → Settings (or press
Cmd+,).
- Windows: Edit → Preferences (or press
- In the left pane, select Signatures.
- Under Identities & Trusted Certificates, click More….
- Select Trusted Certificates in the left panel, then click Import.
- Click Browse… and pick the
pactumize-sign.crtfile you just downloaded. - Select Pactumize Sign in the Contacts list, then again in Certificates below, and click Trust….
- Tick only Use this certificate as a trusted root. Leave Certified documents and its three sub-options (Dynamic content, Embedded high privilege JavaScript, Privileged system operations) unchecked — those grant extra capabilities Pactumize Sign neither needs nor uses. Click OK.
- Before confirming with Import, verify that the SHA-256 fingerprint Adobe shows matches the value above.
- Open a Pactumize-sealed PDF again. The signature panel now shows a green checkmark and "Signed and all signatures are valid".
Tip: if the signature still shows as "unknown", close and reopen Adobe Reader once so it rebuilds its trust cache.
Trust system-wide on Windows (optional)
Useful if multiple PDF tools on the machine need to trust Pactumize.
- Download the certificate.
- Double-click
pactumize-sign.crtin Explorer. - Click Install Certificate….
- Choose Current User (or Local Machine for all users — requires admin), then Next.
- Select Place all certificates in the following store → Browse… → pick Trusted Root Certification Authorities → OK.
- Click Next → Finish.
- Windows will show a security warning listing the certificate's SHA-1 fingerprint. Confirm it matches the value on this page, then click Yes.
Trust system-wide on macOS (optional)
- Download the certificate.
- Double-click
pactumize-sign.crtin Finder — this opens Keychain Access. - If asked, add it to the login keychain.
- Find Pactumize Sign in Keychain Access, double-click it.
- Expand Trust, set When using this certificate to Always Trust, close the window and enter your Mac password to confirm.
Verifying without trusting
You don't have to add Pactumize to your trust store to confirm that a document is genuine. Two alternatives:
- Drop the PDF onto /sign/verify. It runs the full cryptographic check in the browser session (no login, not stored) and reports pass/fail plus what bytes were covered.
- Run our CLI verifier:
php pactumize-sign-verify.php path/to/contract.pdf
The tool only needs this certificate — no network access, no account.