{"keys":[{"kid":"a77bb4db5aef3e4d","alg":"ed25519","public_key":"Nxi68/nfGComnGOBqIOvE/qalm4VO5O88L7amnJV0AU=","public_key_pem":"-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEANxi68/nfGComnGOBqIOvE/qalm4VO5O88L7amnJV0AU=\n-----END PUBLIC KEY-----\n","certificates":"version 9 and later"}],"how_to_check":"Remove the certificate's sig field. Write the rest as JSON with its keys sorted, no spaces and non-ASCII characters as \\uXXXX escapes (Python: json.dumps(cert, sort_keys=True, separators=(',', ':'))). sig is the hex Ed25519 signature over those bytes, by the key whose kid the certificate names.","earlier_certificates":"Certificates before version 9 carry an HMAC-SHA256 that only this instance can check: POST /certificates/verify."}