> the end-user doesn't supply the company ID, just the legal name, the verifying CA then checks the government authority to get the company ID. That's backward

> the end-user doesn't supply the company ID, just the legal name, the verifying CA then checks the government authority to get the company ID. That's backwards from what I'd expect. I'd expect to give the CNPJ, and the CA to get the company name from the government given the CNPJ.