---
title: "FreeSign CAs trusted for verification"
method: GET
path: "/.well-known/free-sign-signing-cas.json"
---

# FreeSign CAs trusted for verification

`GET /.well-known/free-sign-signing-cas.json`

## Request

- Base URL: `https://free-sign.com`
- URL: `https://free-sign.com/.well-known/free-sign-signing-cas.json`
- Auth: none declared

Every FreeSign signing CA this deployment trusts for verification: the current CA first, then archived CAs from before a CA rotation (archived CAs never sign; they keep previously sealed PDFs verifiable). /verify pins the embedded CA against this list.

## Response `200`

Trusted CA list.

- object
  - `cas` object[], required
    - `sha256` string, required
    - `status` 'current' | 'archived', required
    - `pem` string, uri, required
    - `crl` string, uri, nullable, required

## Other responses

- `404`: Signing CA cert is not configured on this deployment.

---

[API](https://skmtc.dev/free-sign/apis/freesign-free-e-signature-api.md) · [All operations](https://skmtc.dev/free-sign/apis/freesign-free-e-signature-api/llms.txt) · [OpenAPI document](https://skmtc.dev/free-sign/apis/freesign-free-e-signature-api/revisions/5d8e9854ab85?raw)