Certificate Trust Lab

Inventory PEM and DER certificates locally, calculate SHA-256 fingerprints, inspect X.509 fields, and continue into chain, CSR, CT, revocation, and TLS checks.

Advertisement

Inventory certificate material locally

Paste PEM data or open a local DER file to identify certificates, requests, public keys, and private-key containers. The lab calculates a SHA-256 fingerprint for each bounded object and can convert between PEM and DER without uploading it.

Separate structure from trust

An X.509 leaf summary covers subject, issuer, validity, SANs, public key, and signature metadata. It does not claim a trusted chain merely because parsing succeeds. Raw certificate and key material is excluded from saved workspaces.

Frequently Asked Questions

Does parsing a certificate mean it is trusted?+

No. Parsing confirms readable structure. Trust also depends on chain construction, cryptographic verification, hostname and purpose policy, time, revocation, and the platform trust store.

Are private keys saved in the workspace?+

No. The page can identify a private-key PEM block and warns about it, but raw PEM/DER bytes and keys are excluded from saved workspace data and JSON evidence.

What can I export?+

You can download locally loaded blocks as PEM or DER while they remain in page memory. The workspace evidence export contains fingerprints and normalized summaries, not the raw certificate or key material.

Related tools

This tool is provided for informational and educational purposes only. All processing happens in your browser — no data is sent to or stored on our servers. While we strive for accuracy, we make no warranties about the completeness or reliability of results.