Certificate Analyzer
Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.Paste a PEM-encoded certificate for a structured analysis of its fields, extensions, and expiry. Nothing you paste here is stored or logged.
How to use it
- Paste a PEM-encoded certificate, starting with
-----BEGIN CERTIFICATE-----. - Select “Analyze certificate” to run the analysis.
- Review findings, then expand the technical details.
Example
Select “Use example” above to load a sample self-signed certificate.
Privacy and security
- The certificate is sent to our API only to analyze it; it is never persisted or logged.
- Parsing happens in memory using Node’s built-in certificate parser — no network access.
Limitations
- Analyzes the leaf (first) certificate only — no chain validation, no trust check, no hostname check.
- A private key or CSR pasted by mistake is rejected, not analyzed.
FAQ
Is this the same as the Certificate Decoder?
They share the same parsing engine. This tool additionally computes expiry severity and returns structured findings; the Certificate Decoder returns a plain-text field dump.
Does "structurally parseable" mean the certificate is trusted?
No — these are different concepts, reported separately. Parseable means the bytes are a well-formed X.509 certificate. Trust and hostname match are not checked here at all (no network connection is made); use the SSL/TLS Domain Checker for that.
What if I paste a bundle of multiple certificates?
Only the first certificate in the bundle is analyzed.