Inventory PEM and DER certificates locally, calculate SHA-256 fingerprints, inspect X.509 fields, and continue into chain, CSR, CT, revocation, and TLS checks.
Paste PEM data or open a local DER file to identify certificates, requests, public keys, and private-key containers. The lab calculates a SHA-256 fingerprint for each bounded object and can convert between PEM and DER without uploading it.
An X.509 leaf summary covers subject, issuer, validity, SANs, public key, and signature metadata. It does not claim a trusted chain merely because parsing succeeds. Raw certificate and key material is excluded from saved workspaces.
No. Parsing confirms readable structure. Trust also depends on chain construction, cryptographic verification, hostname and purpose policy, time, revocation, and the platform trust store.
No. The page can identify a private-key PEM block and warns about it, but raw PEM/DER bytes and keys are excluded from saved workspace data and JSON evidence.
You can download locally loaded blocks as PEM or DER while they remain in page memory. The workspace evidence export contains fingerprints and normalized summaries, not the raw certificate or key material.
Decode and analyze X.509 SSL/TLS certificates. Parse PEM, DER, and CRT formats with detailed certificate chain validation and security analysis.
Build complete SSL/TLS certificate chains automatically — upload your certificate and the tool fetches the missing intermediate CA certs.
Generate CSRs, convert between PEM/DER/PFX/P7B formats, and verify certificate chains - 100% client-side
Search Certificate Transparency logs to find every SSL/TLS certificate issued for a domain and spot unauthorized or unexpected certificates.
Check certificate revocation status via OCSP and CRL.