DocDigest DocDigest

Base64
Private
(document hash) (document hash)
Public
Key Key
Sig Sig
Base64
Invoice (digital signature) (digital signature)
XML/ X.509
JSON certificate Use cert Private key to Sign CertDigest
Base64
CertDigest
(document hash) (document hash)
Canonicalize PropsDigest
PropsDigest
DocDigest Sig (Sign Propertie hash) Base64 (Sign Propertie hash)
Invoice
(document (digital
XML/ SHA256 Sign
hash) signature)
JSON
(step 3) (step 4)

The whole cert without private key !!

CertDigest

Step 8
X.509 SHA256 (document
certificate hash)
(step 5)

Invoice
XML/ PropsDigest
JSON (Sign
SHA256
<Sign Propertie
Properties> hash)
(step 6) (step 7)

Certificate properties (Not the digital signature)