Verification is cryptographic (Ed25519). The certificate’s details are checked against a digital signature issued by The Founders’ Web — if anything was altered, verification fails.