Hosted signature signing example – Cardstream

URL encoded string as recived.

cardCVVMandatory=Y&merchantCategoryCode=0763&customerReceiptsRequired=N&threeDSCheckPref=authenticated&notifyEmailRequired=N&merchantID=140401&threeDSEnabled=Y&riskCheckEnabled=N&avscv2CheckEnabled=N&surchargeEnabled=N&eReceiptsEnabled=N&requestMerchantID=140401&processMerchantID=140401&paymentMethod=card&cardType=Visa+Credit&cardTypeCode=VC&cardScheme=Visa&cardSchemeCode=VC&cardIssuer=Unknown&cardIssuerCountry=Unknown&cardIssuerCountryCode=XXX&cardFlags=272564228&cardNumberValid=Y&threeDSXID=1be64b98-ff34-4b4e-b854-991f480f5321&vcsResponseCode=0&vcsResponseMessage=Success+-+no+velocity+check+rules+applied&transactionID=323236269&xref=24051314ZM15KH42KP13CGK&state=captured&duplicateDelay=0&captureDelay=0&redirectURL=https%3A%2F%2Fwebhook.site%2Fd019e5fa-661f-4ffb-9ec9-870bcde0c33e&remoteAddress=141.195.161.190&action=SALE&type=1&countryCode=826&currencyCode=826&currencyExponent=2&currencySymbol=%C2%A3&amount=100&cardNumberMask=401200******1112&cardExpiryDate=1224&cardExpiryMonth=12&cardExpiryYear=24&customerName=MrMrs+Tester&customerAddress=16+Test+Town&customerPostcode=TE115ST&customerEmail=customer%40exampledomainhere.com&merchantData=CS-PayByLink&threeDSEnrolled=Y&threeDSResponseCode=0&threeDSResponseMessage=Successfully+authenticated&threeDSVETimestamp=2024-05-13+14%3A15%3A42&threeDSCATimestamp=2024-05-13+14%3A15%3A46&threeDSCheck=authenticated&responseCode=0&responseMessage=AUTHCODE%3A257159&requestID=66421274b2c2f&threeDSAuthenticated=Y&threeDSECI=05&threeDSCAVV=AAABB5NWYSAFKRAhQlZhAAAAAAA%3D&authorisationCode=257159&responseStatus=0&amountApproved=100&amountReceived=100&amountRetained=100&avscv2ResponseCode=242100&avscv2ResponseMessage=SECURITY+CODE+MATCH+ONLY&avscv2AuthEntity=merchant+host&cv2Check=matched&addressCheck=matched&postcodeCheck=not+matched&rtAdviceCode=0&acquirerTransactionID=66421282e9523&acquirerResponseCode=0&acquirerResponseMessage=AUTHCODE%3A257159&timestamp=2024-05-13+14%3A15%3A46&op=process&nonce=95b31887303c7e55829e5806518b0653cc18fe3410847ab6649e559cdc884ede54ca2ed32dc2ae85c515a45d187128cd27635aa3b46a78a49a19493f4ebf0393&transactionProcess=button&formAmountEditable=N&customerAddressMandatory=Y&buttonExpiryOpt=1&buttonExpiry=1&formResponsive=Y&cardExpiryDateMandatory=Y&customerNameMandatory=Y&displayCurrency=GBP&displayAmount=GBP+1.00&threeDSACSURL=https%3A%2F%2Facs.3ds-pit.com%2F&signature=97d7ac505bea700f3adc382c7a4c3b8335966f6dbfa8494d893e483455c86c67ae23e1c14928c7637bd2c64cb823cedbaf794febb0f0a2d773ef041a75844722

URL encoded string with signature removed.

cardCVVMandatory=Y&merchantWebsite=https%3A%2F%2Fwww.cardstream.com%2F&merchantCategoryCode=8999&customerReceiptsRequired=N&threeDSCheckPref=attempted+authentication%2Cauthenticated&notifyEmailRequired=Y&merchantID=100856&threeDSEnabled=Y&riskCheckEnabled=N&avscv2CheckEnabled=N&surchargeEnabled=N&eReceiptsEnabled=N&requestMerchantID=100856&processMerchantID=100856&paymentMethod=card&cardType=Visa+Credit&cardTypeCode=VC&cardScheme=Visa&cardSchemeCode=VC&cardIssuer=Unknown&cardIssuerCountry=Unknown&cardIssuerCountryCode=XXX&cardFlags=272564228&cardNumberValid=Y&threeDSXID=d9c6692f-9b50-4733-9e63-df889b33429a&vcsResponseCode=0&vcsResponseMessage=Success+-+no+velocity+check+rules+applied&transactionID=323240299&merchantAlias=100856&xref=24051314HS43GB21DP06TNX&state=captured&captureDelay=0&redirectURL=https%3A%2F%2Fwebhook.site%2Fd019e5fa-661f-4ffb-9ec9-870bcde0c33e&remoteAddress=141.195.161.190&action=SALE&type=1&countryCode=826&currencyCode=826&currencyExponent=2&currencySymbol=%C2%A3&amount=200&cardNumberMask=401200******1112&cardExpiryDate=1224&cardExpiryMonth=12&cardExpiryYear=24&customerName=MrMrs+Tester&customerAddress=16+Test+Town&customerPostcode=TE115ST&customerEmail=customer%40exampledomainhere.com&merchantData=CS-PayByLink&threeDSEnrolled=Y&threeDSResponseCode=0&threeDSResponseMessage=Successfully+authenticated&threeDSVETimestamp=2024-05-13+14%3A43%3A21&threeDSCATimestamp=2024-05-13+14%3A43%3A30&threeDSCheck=authenticated&responseCode=0&responseMessage=AUTHCODE%3A235786&requestID=664218e784e06&threeDSAuthenticated=Y&threeDSECI=05&threeDSCAVV=AAABB5NWYSAFKRAhQlZhAAAAAAA%3D&authorisationCode=235786&responseStatus=0&amountApproved=200&amountReceived=200&amountRetained=200&avscv2ResponseCode=242100&avscv2ResponseMessage=SECURITY+CODE+MATCH+ONLY&avscv2AuthEntity=merchant+host&cv2Check=matched&addressCheck=matched&postcodeCheck=not+matched&rtAdviceCode=0&acquirerTransactionID=66421902d1b73&acquirerResponseCode=0&acquirerResponseMessage=AUTHCODE%3A235786&timestamp=2024-05-13+14%3A43%3A30&op=process&nonce=9cc3fde6ced2f5b711ff7110b3d7a584e5a587a87d1b276ba94051e2db85de7f6cf9ca9c210563d44fd3baf87634a73a97698d0726eac2333f2ea7340dfe1a97&transactionProcess=button&formAmountEditable=N&customerAddressMandatory=Y&buttonExpiryOpt=1&buttonExpiry=1&formResponsive=Y&cardExpiryDateMandatory=Y&customerNameMandatory=Y&displayCurrency=GBP&displayAmount=GBP+2.00&threeDSACSURL=https%3A%2F%2Facs.3ds-pit.com%2F&merchantID2=100856

signature=97df2d63de617f6507643668ce4fc2c4863674acea9ffffb85d8f03a1f1855242279a3a5b93198cd04c329eae082f9c6221ff2d5ca6c7d0bdfa66de3dc49b1d1

URL encoded string sorted

acquirerResponseCode=0&acquirerResponseMessage=AUTHCODE%3A235786&acquirerTransactionID=66421902d1b73&action=SALE&addressCheck=matched&amount=200&amountApproved=200&amountReceived=200&amountRetained=200&authorisationCode=235786&avscv2AuthEntity=merchant+host&avscv2CheckEnabled=N&avscv2ResponseCode=242100&avscv2ResponseMessage=SECURITY+CODE+MATCH+ONLY&buttonExpiry=1&buttonExpiryOpt=1&captureDelay=0&cardCVVMandatory=Y&cardExpiryDate=1224&cardExpiryDateMandatory=Y&cardExpiryMonth=12&cardExpiryYear=24&cardFlags=272564228&cardIssuer=Unknown&cardIssuerCountry=Unknown&cardIssuerCountryCode=XXX&cardNumberMask=401200%2A%2A%2A%2A%2A%2A1112&cardNumberValid=Y&cardScheme=Visa&cardSchemeCode=VC&cardType=Visa+Credit&cardTypeCode=VC&countryCode=826&currencyCode=826&currencyExponent=2&currencySymbol=%C2%A3&customerAddress=16+Test+Town&customerAddressMandatory=Y&customerEmail=customer%40exampledomainhere.com&customerName=MrMrs+Tester&customerNameMandatory=Y&customerPostcode=TE115ST&customerReceiptsRequired=N&cv2Check=matched&displayAmount=GBP+2.00&displayCurrency=GBP&eReceiptsEnabled=N&formAmountEditable=N&formResponsive=Y&merchantAlias=100856&merchantCategoryCode=8999&merchantData=CS-PayByLink&merchantID=100856&merchantID2=100856&merchantWebsite=https%3A%2F%2Fwww.cardstream.com%2F&nonce=9cc3fde6ced2f5b711ff7110b3d7a584e5a587a87d1b276ba94051e2db85de7f6cf9ca9c210563d44fd3baf87634a73a97698d0726eac2333f2ea7340dfe1a97&notifyEmailRequired=Y&op=process&paymentMethod=card&postcodeCheck=not+matched&processMerchantID=100856&redirectURL=https%3A%2F%2Fwebhook.site%2Fd019e5fa-661f-4ffb-9ec9-870bcde0c33e&remoteAddress=141.195.161.190&requestID=664218e784e06&requestMerchantID=100856&responseCode=0&responseMessage=AUTHCODE%3A235786&responseStatus=0&riskCheckEnabled=N&rtAdviceCode=0&state=captured&surchargeEnabled=N&threeDSACSURL=https%3A%2F%2Facs.3ds-pit.com%2F&threeDSAuthenticated=Y&threeDSCATimestamp=2024-05-13+14%3A43%3A30&threeDSCAVV=AAABB5NWYSAFKRAhQlZhAAAAAAA%3D&threeDSCheck=authenticated&threeDSCheckPref=attempted+authentication%2Cauthenticated&threeDSECI=05&threeDSEnabled=Y&threeDSEnrolled=Y&threeDSResponseCode=0&threeDSResponseMessage=Successfully+authenticated&threeDSVETimestamp=2024-05-13+14%3A43%3A21&threeDSXID=d9c6692f-9b50-4733-9e63-df889b33429a&timestamp=2024-05-13+14%3A43%3A30&transactionID=323240299&transactionProcess=button&type=1&vcsResponseCode=0&vcsResponseMessage=Success+-+no+velocity+check+rules+applied&xref=24051314HS43GB21DP06TNX

URL encoded string with merchant secret appened to the end

SHA512 Hash of the above string

SHA51 Hash 97df2d63de617f6507643668ce4fc2c4863674acea9ffffb85d8f03a1f1855242279a3a5b93198cd04c329eae082f9c6221ff2d5ca6c7d0bdfa66de3dc49b1d1

Signature in response 97df2d63de617f6507643668ce4fc2c4863674acea9ffffb85d8f03a1f1855242279a3a5b93198cd04c329eae082f9c6221ff2d5ca6c7d0bdfa66de3dc49b1d1