Manufacturer instance certificate
Scenario 4 of 4. The manufacturer signs a per-device certificate for each instrument they produce.
Manufacturer and device identity
The instance certificate binds a single instrument to the manufacturer's delegated signing key. Each field is attested by the manufacturer signature and is verifiable by anyone holding the certificate chain.
Delegated signing key
The browser generates an ECDSA P-256 keypair representing the manufacturer's delegated authority. The private key is encrypted with your passphrase and stored only in this browser. It is never transmitted.