SSL Tools

Check an SSL

This SSL Checker will help you diagnose problems with your SSL certificate installation. You can verify the SSL certificate on your web server to make sure it is correctly installed, valid, trusted and doesn't give any errors to any of your users. To use the SSL Checker, simply enter your server's hostname (must be public) in the box below and click the Check SSL button.

Enter a URL here:

Decode a CSR

Use this CSR Decoder to decode your Certificate Signing Request and and verify that it contains the correct information. A Certificate Signing Request is a block of encoded text that contains information about the company that an SSL certificate will be issued to and the SSL public key. Once a CSR is created it is difficult to verify what information is contained in it because it is encoded. Certificate authorities use the information in CSRs to create the certificate. Decoding CSRs allows you to make sure the information is accurate. To decode a CSR, simply paste your CSR into the box below and the CSR Decoder will do the rest. Your CSR should start with "-----BEGIN CERTIFICATE REQUEST----- " and end with "-----END CERTIFICATE REQUEST----- ".

If you want to decode Certificate Signing Requests on your own computer, run this OpenSSL command: openssl req -in req.pem -noout -text

Enter a CSR here:

Decode a Certificate

Use this Certificate Decoder to decode your PEM encoded SSL certificate and verify that it contains the correct information. A PEM encoded certificate is a block of encoded text that contains all of the certificate information and public key. You can use this certificate decoder by simply pasting the text of your certificate into the box below and the Certificate Decoder will do the rest. Your certificate should start with "-----BEGIN CERTIFICATE----- " and end with "-----END CERTIFICATE----- ".

If you want to decode Certificates on your own computer, run this OpenSSL command: openssl x509 -in cert.pem -noout -text

Enter a Certificate here:

Generate a CSR

Use this generator to create a Certificate Signing Request. A Certificate Signing request is a block of encrypted text which contains information that will be included in your SSL Certificate. This will generate a Certificate Request, Certificate, and a Private Key.

If you want to generate a Certificate Signing Request, run this OpenSSL command: openssl req -new -newkey rsa:2048 -nodes -keyout key.pem -out req.pem