content hash

Hash of the signed content, computed over a canonical form of the document. Recomputing it against the presented data is the first of the two checks; if it differs, the data has moved since it was signed.