Certificate Verification & Revocation
Who this guide is for: Organization administrators who need third parties (employers, auditors, regulators) to confirm a certificate is genuine, and who occasionally need to revoke a certificate issued in error or no longer valid.
Every issued certificate has a public verification page that anyone can open without logging in, and admins can revoke a certificate so that page shows it as no longer valid.
Public verification
Each certificate has a stable verification URL on your organization’s domain:
https://<your-tenant>.embaylms.com/<locale>/verify/<certificate-number>The page shows who the certificate was awarded to, the credential (course or learning path), the issue date, the certificate number, the end of its validity period when the credential has one, and a clear status banner:
- ✓ This certificate is valid — the certificate is genuine and current. A valid certificate also offers its Open Badge (JSON-LD) link for wallets and verifiers.
- This certificate has been revoked — the certificate was revoked; the page shows the revocation date.
- This certificate has expired — the credential had a validity period and it has lapsed (it was not revoked).
- Certificate not found — no certificate matches that number.
Learners reach it themselves from Achievements → Certificates: each certificate has a Verify link. No personal data beyond what already appears on the certificate is exposed — the revocation reason is never shown on the public page.
Revoking a certificate
Revocation needs the certificate:revoke permission (Admin and Owner hold it).
- Go to Users, open the learner’s profile and choose View or revoke certificates. Their Achievements page opens on the Certificates tab in admin view.
- Find the certificate and click Revoke.
- Enter a reason (required) and confirm.
The certificate is immediately marked revoked. Its public verification page now reports it as revoked with the revocation date, and the learner’s Achievements page shows a Revoked badge on it; its Open Badge link is withdrawn. Revocation is recorded in the audit log (actor, time, reason).
A revocation cannot be undone. If the learner should hold a valid certificate again (for example, it was revoked in error), re-issue it: on the completed enrollment row — the course’s Enrollments tab, or the enrollments list on the learner’s profile — click Re-issue certificate. The revoked certificate stays on record with its old number, and the new certificate gets a new number and its own verification page. See Certificates → Issue a certificate by hand.
Configuration reference
| Action | Where | Permission | Audited |
|---|---|---|---|
| View public verification | /<locale>/verify/<number> | None (public) | No |
| Revoke a certificate | Users → learner → View or revoke certificates | certificate:revoke | Yes (revoked) |
| Re-issue a revoked certificate | The enrollment row → Re-issue certificate | certificate:issue | Yes (reissued) |
Troubleshooting
| Symptom | Cause | Fix |
|---|---|---|
| Verify page says Certificate not found | Wrong/mistyped number, or wrong organization domain | Check the exact number from the certificate; use the correct portal address |
| No View or revoke certificates link on the learner’s profile | Your role doesn’t hold certificate:revoke | Ask an Admin or Owner to revoke it |
| No Revoke button | You’re viewing your own Achievements page rather than the learner’s, or the certificate is already revoked | Open the learner’s page from their profile with View or revoke certificates |
| ”Certificate is already revoked” | The certificate was revoked previously | No action needed — it’s already invalid. Re-issue it if the learner needs a valid one |