Drop the certificate file you received. Nothing is uploaded - the check runs in your browser. Only the key fingerprint and a hash are looked up.
Want to be sure the code you received is the code that was checked? Run in the project folder:
npx buildproof verify certificate.html --rerun .