Why does my government PDF show a yellow question mark?

Indian government PDFs are digitally signed using certificates from NIC, eMudhra, or other CCA India licensed authorities. Adobe Acrobat and most PDF viewers don't include India's Root Certifying Authority (RCAI) in their default trusted certificate store. So even though the signature is completely valid and legally recognised under the Information Technology Act 2000, your PDF viewer shows a yellow question mark because it cannot automatically verify the issuer. Kagazo checks your PDF against the actual CCA India trust hierarchy and gives you a copy with a permanent green tick visible on any device.

Is my document safe? Do you store my PDF?

Your PDF is processed entirely in memory during verification. We never write your file to disk, never store it on our servers, and never share it with any third party. The file is deleted from memory immediately after verification is complete. You can also verify this by checking our open source backend code.

Which documents does Kagazo support?

Kagazo supports any PDF digitally signed under India's CCA certificate hierarchy. This includes e-Aadhaar, PAN card, DigiLocker documents, ITR-V, Form 16, and all state government certificates from Tamil Nadu e-District, AP and Telangana MeeSeva, Karnataka Nadakacheri and eJanma, Kerala Sevana portal, and more.

My Aadhaar PDF is password protected. Will it work?

Yes. Enter your Aadhaar password (first four letters of your name in capital letters followed by your birth year, for example RAMA1995) in the password field that appears after you upload your e-Aadhaar PDF. We decrypt it in memory, verify the signature, and return a verified copy.

What is the difference between "Signature Valid" and "Signature Unknown"?

Signature Valid means the document is genuinely issued by the government authority and has not been modified. Signature Unknown means your PDF viewer cannot verify the certificate chain — this is a viewer configuration issue, not a problem with your document. Signature Invalid means the document may have been tampered with or re-saved after signing.

Does this work on mobile?

Yes. Kagazo is fully mobile responsive and works on any Android or iOS browser. No app installation required. Simply open kagazo.in on your phone browser, upload your PDF and verify instantly.

ICANN RDAP Bootstrap • RFC 7480 Standard

WHOIS Lookup & Domain Age Checker

Inspect authoritative domain registration records. Check exact domain age, registrar IANA credentials, expiration timeline, and nameserver delegation.

RDAP Compliance Exact Age in Years & Months Registrar & IANA ID

Quick samples:

Understanding the Domain Registration Lifecycle

Every registered internet domain passes through strict ICANN lifecycle phases:

1. Active Period

The domain is registered and fully resolving DNS records to websites and mail servers for 1 to 10 years.

2. Grace Period (0–45 Days)

If expired, the original owner can typically renew the domain at standard rates before it enters redemption.

3. Pending Deletion

After redemption (30 days), the registry releases the domain back into the public pool for re-registration.

Frequently Asked Questions

What is RDAP and how is it different from legacy WHOIS?

RDAP (Registration Data Access Protocol) is ICANN’s modern standard replacing legacy port 43 WHOIS. It returns structured, machine-readable JSON data with standardized error codes and privacy compliance under GDPR.

Why does domain age matter for SEO and trust?

Search engines like Google consider domain longevity when evaluating trust and authority. Older domains that have maintained active registrations without penalty history are viewed as more established than freshly registered domains.

Why is registrant personal contact info hidden?

Due to international privacy regulations such as GDPR and CCPA, most registrars redact personal names, phone numbers, and physical addresses by default using proxy/privacy protection services.

What does "clientTransferProhibited" status mean?

It is an ICANN security status code set by the domain registrar to prevent unauthorized or fraudulent transfer requests to another registrar (also known as registrar lock).