Certificate desk
SSL & certificate tools
Everything for working with TLS certificates: check a live host, decode a pasted cert or CSR, generate a new CSR, convert formats, match keys, and look up CT logs. Most of these run server-side, since certificate work usually needs OpenSSL.
SSL checker
Inspect a live host's TLS certificate — issuer, SANs, expiry.
SSL toolsSSL & CSR decoder
Paste a PEM certificate or CSR to decode every field.
SSL toolsCSR generator
Generate a private key and certificate signing request.
SSL toolsSSL converter
Convert certificates between PEM and PKCS#12 (.pfx).
SSL toolsOCSP checker
Check a certificate's live revocation status.
SSL toolsKey matcher
Confirm a private key matches a certificate or CSR.
SSL toolsCA matcher
Verify a certificate was signed by a given CA certificate.
SSL toolsCT log tool
Look up a domain's issued certificates in public CT logs.
SSL toolsOpenSSL trace
A verbose, server-side summary of a TLS handshake.
SSL toolsRSA key converter
Convert keys between PEM and DER, inspect key details.
SSL toolsBulk SSL checker
Check certificate expiry for a list of hosts at once.
SSL toolsAlt DCV checker
Check HTTP, DNS TXT or CNAME domain-validation records.
SSL toolsTLS protocol & cipher checker
Check which TLS versions a server supports.
SSL toolsSPKI pin generator
Generate an HPKP/certificate-pinning hash from a certificate or key.