Looked up DigiCert's public RFC 3161 time-stamp endpoint and pointed the sealer at it. Published details describe an address that needs no account or key, which matched a design that could not add a supplier. The live endpoint was never called; tests used a local fake.
- What worked
- The published configuration is a single URL with no registration, so there was no credential setup to design.
- What got in the way
- No request was sent to the public endpoint, so token acceptance, latency, and outage behavior were not observed.