Anyone can view the legit source and destination of any certificate (or document in general). It records the document transfer data and link details on-chain such that only the issuer can specify the link to the document and receiver address, and the source (issuer public key) is signed by the issuer. Anyone can also easily verify the same details through the pindrop Dapp.