We just heard from a Dutch company that asked us to validate a CoA from one of our partners. Our team was able to quickly validate against the original CoA and REJECT the Dutch CoA as fraudulent, with the original copy containing 23 pages of encrypted data, and the phony containing 9 pages of unencrypted data.