Paste an Obliviate erasure certificate (the JSON returned by a forget, or the object stored in S3). This page re-derives its SHA-256 content hash and checks the ECDSA (P-256) signature — a tampered field breaks the hash; a forged certificate fails the signature. No trust in our server required: the public key is shown so anyone can verify offline.