How to Verify Aadhaar eSigned Documents

3 Ways to Verify an Aadhaar eSigned Document

An Aadhaar eSigned document can be verified in under a minute using free tools. The signature embeds a digital certificate issued by a CCA-licensed certifying authority, which means any PDF reader that supports digital signature validation can confirm its authenticity. For a complete overview of how Aadhaar eSign works, see our guide. Here are three methods, from simplest to most thorough.

Method 1: Using Adobe Acrobat Reader (Recommended)

Adobe Acrobat Reader DC is the most reliable way to verify Aadhaar eSign signatures. It is free and available on Windows, Mac, and Linux.

Steps:

1. Open the signed PDF in Adobe Acrobat Reader DC
2. Look for the blue banner at the top that says "Signed and all signatures are valid" (green checkmark) or "At least one signature has problems" (yellow warning)
3. Click on the signature panel on the left side (pen icon) to see details
4. Click on each signature to view:
   • Signer's name and certificate details
   • Signing time and date
   • Whether the document has been modified after signing
   • The certifying authority that issued the certificate

What to look for:

• "Signature is valid" — The document has not been tampered with since signing
• Certificate chain — Should trace back to a CCA-licensed root CA (like eMudhra, Sify, or CDAC)
• Signing time — Confirms when the signature was applied
• Reason — Usually shows "Aadhaar eSign" or similar

If Adobe shows "Signature validity is unknown," it usually means the root CA certificate is not installed in your trust store. Download the latest CCA root certificates from cca.gov.in and add them to Adobe's trust list.

Installing CCA Root Certificates in Adobe:

1. Go to Edit > Preferences > Signatures > Verification > More
2. Click "Import" under Trusted Certificates
3. Browse to the downloaded CCA root certificate (.cer file)
4. Check "Use this certificate as a trusted root"
5. Click OK and re-open the document

After this, Adobe will recognise all CCA-issued certificates and validate Aadhaar eSign signatures correctly.

Method 2: Using the CCA eSign Verification Portal

The Controller of Certifying Authorities maintains an online verification service.

Steps:

1. Visit the CCA website (cca.gov.in)
2. Navigate to the eSign verification section
3. Upload your signed PDF document
4. The portal validates the signature against CCA records
5. You receive a verification report showing signature validity, signer details, and certificate information

This method is useful when you need official verification for legal or compliance purposes. The CCA portal checks the certificate against its own database, confirming that the eSign service provider was genuinely licensed at the time of signing.

Limitations:

• The portal may be slow during peak hours
• File size limits apply (usually 10 MB)
• Works only for signatures issued by CCA-licensed ESPs

Method 3: Checking PDF Signature Properties Manually

For technical users, you can inspect the raw signature properties embedded in the PDF.

Steps:

1. Open the PDF in any viewer that supports signature inspection
2. Right-click on the signature and select "Signature Properties"
3. Check these fields:

Field	What to Verify
Signer	Name should match the expected signer
Signing time	Should be within the expected timeframe
Issuer	Must be a CCA-licensed CA
Certificate validity	Should not be expired or revoked
Hash algorithm	Should be SHA-256 or higher
Document integrity	"Document has not been modified since signing"

Checking the certificate chain:

Every Aadhaar eSign certificate should chain back to:

• Root CA: CCA India (Root Certifying Authority of India)
• Sub CA: The licensed certifying authority (e.g., eMudhra Sub CA)
• End entity: The short-lived eSign certificate generated for the signer

If any link in this chain is broken or unrecognised, the signature cannot be fully validated.

What Makes an Aadhaar eSign Valid

For an Aadhaar eSign to be legally valid, it must meet these criteria:

1. Issued by a licensed ESP — The eSign service provider must hold a valid CCA license
2. Aadhaar authentication — The signer must have been authenticated via UIDAI (OTP or biometric)
3. Certificate integrity — The digital certificate must chain to the CCA root
4. Document integrity — The document must not have been modified after signing
5. Timestamp — The signature must include a verifiable signing timestamp

If all five conditions are met, the signature is valid under Section 3A of the IT Act, 2000. For a detailed analysis of the legal validity of Aadhaar eSign, see our dedicated legal guide.

Common Verification Issues and Fixes

Issue: "Signature validity is UNKNOWN" Fix: Install CCA root certificates in your PDF reader. This is the most common issue and does not mean the signature is invalid.

Issue: "Document has been modified after signing" This is a genuine problem. The document was altered post-signing, which invalidates the signature. Request the original signed document from the sender.

Issue: "Certificate has expired" Aadhaar eSign certificates are short-lived (typically 30 minutes). The certificate expiry does not invalidate the signature — what matters is that the certificate was valid at the time of signing. Adobe Reader handles this correctly with its timestamp validation.

Issue: Signature shows only a reference number, not a name Aadhaar eSign uses masked Aadhaar details for privacy. The certificate may show a virtual ID or reference number instead of the full name. This is normal and does not affect validity.

Verifying Signatures in Bulk

If your organisation receives hundreds of eSigned documents, manual verification is impractical. Options for bulk verification:

• Adobe Acrobat Pro supports batch validation across folders
• Custom scripts using libraries like iTextSharp (.NET) or Apache PDFBox (Java) can programmatically extract and validate signatures
• eSign service providers like SignSetu include verification as part of their platform — signed documents include a verification link and audit trail

Why Verification Matters

Accepting unverified eSigned documents creates legal risk. If a dispute arises and the signature cannot be validated, the document may not hold up in court. Spending 30 seconds on verification when you receive a signed document saves potential months of legal complications.

For businesses processing signed contracts, loan agreements, or compliance documents, building verification into your document receipt workflow is not optional — it is basic due diligence.