Certificate Compliance Manager for LearnDash

Certificate ID formats

Choose the format before live issuance. Existing IDs never change when the prefix, format or starting sequence is updated.

The prefix accepts 2–12 letters or numbers. A starting sequence applies only before the first sequential ID is issued; CCM never resets or reuses sequence numbers.

Expiry rules

Set the default in CCM Settings. Each native certificate can inherit it or override it through Certificate Verification Expiry: Never expires, a duration after completion or a fixed date.

The resolved expiry is frozen into the issuance. Later setting changes do not rewrite history, although an administrator can adjust one record from Issued Certificates.

Issuance boundary

CCM creates a record only when LearnDash awards an assigned native certificate. Quiz issuance requires the separate LearnDash Certificate Awarded for threshold, which may differ from the passing score.

Add these to the native LearnDash certificate editor. They resolve against the learner and award represented by the protected certificate URL.

Evidence is optional and applies only to Course certificate records. Course-step progress, Quiz assessment and attempt history can each inherit the global setting or be independently shown or hidden for a Course.

Best passing attempt is the default score policy. A stricter site can use the most recent passing attempt. Failed or incomplete quizzes remain represented in counts but are not inserted into the average as zero scores.

A Course may specify a required average, minimum number of eligible quizzes and excluded quizzes. If no eligible assessment quizzes exist, the frozen assessment reads Non-assessable.

Use [lecv_course_steps_summary], [lecv_assessment_summary] and [lecv_attempt_history_summary] to add the summaries to the native certificate.

These values are evidence only. LearnDash remains responsible for Course completion and certificate eligibility.

CCM creates a page containing [lecv_certificate_verification]. A verifier can enter the certificate ID or follow its opaque URL or QR code without signing in.

Choose the Credential Card or Formal Record layout, configure accent, width, border radius and site logo, then select which learner and award fields are public. Group names and IDs are hidden by default because they may identify an employer, client or department.

Internal revocation reasons are available to authorized reports but are not exposed publicly.

Course, Quiz and Group emails can be enabled independently. CCM sends an HTML message with a verification button and the LearnDash-generated native certificate PDF. If PDF generation fails, the verification link can still be delivered.

The shared template has Visual and Text modes. Common tokens include {learner_name}, {award}, {certificate_id}, {verification_url}, {completion_date}, {expiry_date}, {context_type}, the three evidence-summary tokens and the three membership-Group tokens.

An administrator can resend an eligible message from Issued Certificates.

Certificate Compliance → Issued Certificates lists every issuance. Search or filter by certificate ID, learner, email, award type, status, issue date or expiry date.

Administrators can open verification, update expiry, revoke or reactivate a record, review its internal revocation reason and resend its email. Historical records remain frozen unless an explicit lifecycle action is taken.

Add [lecv_certificate_report] to a WordPress page. Then use Certificate Compliance → Report Access to admit each user explicitly and grant only the required Course, Quiz, Group, managed-Group or all-record scope.

The visible report and CSV export apply the same authorization boundary. Site administrators have all-record access by default. LearnDash Group Leader status or a WordPress role alone does not grant entry.

The optional Compliance Officer role can be added without replacing a user’s existing roles. Managed-Group access for explicitly admitted Group Leaders is disabled globally until the administrator enables it.

CCM begins with a 15-day full-feature trial. Pro activates one production site; Agency activates up to ten. Manage the key under Certificate Compliance → CCM License.

When the trial expires or a licence is explicitly revoked, new CCM issuance, IDs, automatic CCM email and historical import pause. LearnDash completion and native certificates continue, while existing CCM records, verification, reports and lifecycle controls remain available.

Normal plugin deactivation retains data and the server activation. Use Deactivate this site to release the licence allocation. Clean uninstall permanently removes CCM tables, options, scoped metadata, generated QR files and the untouched plugin-created verification page; take a backup first.

Confirm a native certificate is assigned to the exact Course, Quiz or Group. For a Quiz, confirm the attempt met Certificate Awarded for. Check that the trial or licence permits new issuance, then run a fresh award rather than merely reopening an old certificate URL.

No matching CCM issuance exists for that learner and award context. Check Issued Certificates first. Blank output is intentional and prevents stale credential data being reused.

Confirm the selected verification page is published and still contains [lecv_certificate_verification]. Use the repair or recreate control in CCM Settings, then resave WordPress permalinks if required.

Confirm the credential was issued on a publicly reachable site. A phone cannot ordinarily resolve a local development hostname even when the QR itself is correct.

CCM uses the active theme’s Site Logo and falls back to the Site Icon. A white PNG or SVG with transparency may be present but invisible on the white verification card; test with a contrasting logo.

Confirm the relevant award-type email is enabled, competing certificate-email modules are disabled and WordPress mail delivery works. CCM uses wp_mail(); configure SMTP or transactional delivery separately.

Confirm the user is explicitly admitted and has at least one applicable scope. Verify that page caching is not serving another user’s response; exclude the report page if the host or CDN does not vary authenticated content safely.