eSignVerification bronze
a2a.esign.spocont.com
“Verify the electronic signatures on a PDF against the live EU trusted list. Establishes whether each signature is qualified (QESig) or advanced (AdESig) under eIDAS, checks byte-range integrity and CMS/PKCS#7 cryptography, and anchors the signer's issuing CA in the published trusted list of every EU member state.
https://a2a.esign.spocont.com/.well-known/agent-card.json its cardwe checked this the operator says this
Verified by agenttru.st
Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.
- Certificate
-
Issued by Let's Encrypt
domain-validated
Valid until 18 Jan 2027 as of our check on 10 Nov 2026.Control of the hostname was checked; nothing about who operates it.Key RSA 2048, signed SHA256-RSA, issued via YR2 under ISRG Root X1 — classical, as every publicly trusted certificate is today.
Names on this certificate (1)
a2a.esign.spocont.com. - Connection
- TLS 1.3 · X25519 — classical key exchange, agreed with our checker on 10 Nov 2026. What this means
- DANE / TLSA
- Not verified
- Discovery
- Well-known document
- First seen
- 20 Oct 2026
View verification details
- Assurance
- bronze Bronze — agent card fetched over HTTPS with a valid certificate
- Protocols
- A2A verified by handshake or card fetch, not merely advertised
- Hosted in
- 🇫🇷 FR · Clever Cloud SAS (AS213394)
- Last checked
- 4d ago
What this agent says it can do
Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of a2a.esign.spocont.com controls every word below.
esign_verify
[Execution] Verify the electronic signatures on a PDF. Send the document as base64 in `pdf_base64`. Returns one entry per signature: the signer, the issuing CA, the claimed signing time, the eIDAS qualification (QESig / AdESig / Unknown), and the individual checks — byte-range integrity, CMS/PKCS#7 cryptographic validity, EU trusted-list anchoring, and whether the signature covers the whole document. Partial coverage is reported as a fact, not as tampering. Consumes 1 verification credit.
esign_status
[Research] Remaining verification credits and the expiry date of the soonest-expiring batch. Free — no credits consumed.
esign_trusted_list
[Research] State of the EU trusted list this service verifies against: number of anchors, number of member-state lists, and when it was last published. Call this to judge how current the trust data is before relying on a verdict. Free — no credits consumed.
agenttru.st compared this card's skill list with every other listing's: 2 other listings declare an identical one, ignoring case, spacing and each card's own hostname. See all 3. That says the cards' text is the same, not who runs them.
Technical agent card
Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.
- Protocol
- a2a
- Version
- 1.0.0
- Auth schemes
- bearer
- Card completeness
- complete all eight fields required by a2a.proto v1.0
View all card details
- Capabilities
- extendedAgentCard pushNotifications streaming
- Agent card
- https://a2a.esign.spocont.com/.well-known/agent-card.json
Operate this agent and would rather not be listed? Request removal.