- The result of validation is a qualified Validation Report, i.e. a report on the validity of signatures, which unambiguously specifies what files made up the validated document and the type and validity of individual signatures. The report is proof of the validity of the signatures, and after its execution, subsequent validation of the document is no longer necessary.
- A validation report is a document showing the results of a validation that has been carried out, which can provide the evidence necessary to show that signatures and seals are valid. The validation report provides the necessary information about the identity of the signer and the status of each validated signature or seal.
- The validation report does not determine whether the number and type of signatures, as well as the authorization of the signatories, is sufficient to fulfill the purpose for which the document is to be used and to accept or reject the document (e.g., whether a sufficient number of persons required to represent the company have signed)
- The validation report is a document, issued automatically by the validation service, providing proof of the validity (or invalidity) of validated signatures and seals, with the highest degree of reliability envisaged by the eIDAS regulation
- The report is issued in PDF and XML forms and is secured with the seal of qualified trust service provider Enigma Systemy Ochrony Informacji Sp. z o.o. The report specifies the type of signatures contained in the validated document (or attached to the document), other details of the signatures, seals and timestamps, as well as data identifying the file(s) comprising the signed document
- The report may also contain warnings related to the security of signatures/seals
The validation report consists of:
- The status of the validation process of the signed document,
- The unique identifier of the issued certificate,
- the date, including the time, of execution of validation, along with information on what date was used in the validation process, as the confirmed date of existence of the signed document
- to indicate whether the signature or electronic seal was checked,
- signature validation statuses, for each of the signatures on the document,
- information about the hash algorithm used in each signature,
- Identifying data of the signer, for each of the signatures,
- Timestamp information (if used), for each of the signatures,
- The list of evidence used in the validation process (CRLs, OCSP responses, TSLs, timestamps).
The validation report shows:
- Identity of the signatory
- Correctness of the submitted signature – verifying that the signature was made in accordance with the rules that apply to the signature format in question
- Integrity of the document – whether any changes have been made
- Certificate validity – confirmation of whether the signature or seal certificate was valid at the time of signing, was suspended or revoked
- Certification path – confirming whether a certificate is qualified or unqualified based on the intermediary certificate information attached to it