Or use something similar to jwts, you normalize the document, sign the hash, wrap the original document with metadata and include the signature.