VERIFIED·REGISTRY LIVE·QTL-DEMO-001

This certificate is valid.

End-of-engagement artefact issued by QorTrace Labs. Signed PDF, embeddable SVG, SHA-256 anchored on the public registry — the same template every client receives at the close of a Cryptographic Migration engagement.

STANDARDNIST FIPS 203 / 204

METHODv1.5

ANCHORSHA-256 · public

ISSUEDMarch 21, 2026

QQORTRACE · LABS

QTL-DEMO-001

Hybrid TLS Migration · Tier-1 Bank · NORAM

Cryptographic Migration Certificate · methodology v1.5 · NIST FIPS 203 / 204

SUBJECT

[Client Name Redacted under NDA]

ENGAGEMENT

PQC Migration Engineering · 16-week

ISSUED

March 21, 2026

VALID THROUGH

March 21, 2028

2b·a4·c1·07·9d·5e·11·8f

ATTESTED PRIMITIVES

Key exchangeX25519 + ML-KEM-768 (hybrid)
Primary signatureML-DSA-65 (FIPS 204)
Co-signature · v1.5SLH-DSA-SHA2-128s (FIPS 205)
TLS suite negotiatedTLS_AES_256_GCM_SHA384
KMS providerAWS KMS · ML-KEM-768 keys
Code-signingML-DSA-65 + SLH-DSA co-signed
Telemetry100% hybrid handshake adoption

FINDINGS · SIGNED

All customer-facing TLS endpoints negotiate hybrid groups by default.
Code-signing pipeline migrated from RSA-PSS to ML-DSA-65 with verifiable provenance.
Methodology v1.5 SLH-DSA co-signature attached to every release artefact.
Zero customer-facing TLS errors during the 4-week measured rollout window.
p99 handshake latency delta vs. classical baseline: +2.3ms (within target).
Rollback runbook tested in staging on 2026-03-12; recovery time 47s.

REGISTRY DIGEST

sha256:7af9d2c8e1b4f5a6e0d3c91b8a5f7e2d4c6b9a8d1e3f5b7c9d8e2f4a6c8b0e3d5f

Issued March 21, 2026 · Method v1.5

SAMPLE. This is a published demo so prospective clients can see exactly what an end-of-engagement certificate looks like. Real-client certificates are gated by mutual NDA and are issued at the conclusion of every QorTrace Labs engagement against the same template.

Want a certificate like this?

Every QorTrace Labs engagement issues one at the close. Senior engineers, fixed-fee scoping, signed deliverables.

See how we work