PayTLS
Certificate explorer

Verify before you pay.

Check whether a service domain authorizes a payment address and signing key. No wallet needed and nothing is sent.

Service credentials

DIRECT CHAIN READ
Route-scoped certificate

A URL is required when the certificate authorizes specific routes.

No wallet connection required. No payment is sent.

Trust starts with a check.

Enter the service domain and the address it asked you to pay. The current certificate is read from Arc at a single block.

01 Current certificate for the exact domain02 Payment address matches03 Signing key matches, if provided04 Route in scope, if restricted05 Not expired, not revoked
valid

The domain authorizes this recipient at the checked block. Your payment policy decides the rest.

invalid

Something does not match, or the certificate is expired or revoked. Do not pay.

unavailable

The registry could not be read. Do not pay. Retry when Arc is reachable.

Verification establishes authorization at the checked block. It does not guarantee the service is honest or that its response is correct.