Accreditation authority

Authority console

The root authority decides who may issue. Revoking a key takes effect from a chosen moment: certificates issued before it stay valid, certificates after it do not. That is how a stolen key is handled without erasing an honest institution's history.

Connect the authority wallet

Only the root authority can accredit issuers, revoke and rotate keys, or pause issuance.

Accredit an issuer

Signing key address

Domain

Institution name

Issuer type

Listed by (accreditation source)

I have confirmed the DNS TXT record mohar-issuer=<address> on this domain

Revoke a key

Effective from the time you choose. It may be in the past, and can only ever be moved earlier.

Key address

Effective from

Reason

Rotate a key

The old key is revoked from now. Its past certificates stay valid, and the new key takes over managing them. Only the authority can rotate, so a thief holding the old key cannot.

Old key

New key

Emergency stop

Pausing stops new issuance only. Revocation, suspension and all verification keep working, so honest issuers can still withdraw bad certificates during an incident.

Issuance open

Registered issuers

Institution	Domain	Key	Domain confirmed	Status
Loading registry from chain…