Digital signatures: format, certificate, and validation policy — three layers people constantly mix up

Digital signatures: format, certificate, and validation policy — three layers people constantly mix up I was deep in a validation error that made no sense. The cryptography was fine — I'd checked the hash, the algorithm, the key length. Three hours in, I found the actual problem: the document was CA