Loading...

tools / certificate-viewer

Certificate Chain Viewer

Paste PEM certificates, openssl output, TLS errors, or chain notes to spot expiry, SAN, issuer, and trust-chain problems.

P0Auth / SecurityHigh severity
85
debug signal score
3 signals

3 signals detected. Start with pem certificate block.

Detected signals

PEM certificate block

A PEM certificate was detected for chain inspection.

Count the leaf, intermediate, and root certificates and confirm the served order.

Issuer or chain validation failure

The client cannot build a trusted chain to a root CA.

Serve the full intermediate chain and verify the CA bundle used by the failing client.

Expiry evidence

The certificate may be expired or close to expiry.

Check notBefore/notAfter, automation renewal status, and load balancer certificate attachment.

Highlighted lines
line 1
-----BEGIN CERTIFICATE-----
PEM certificate block
line 3
-----END CERTIFICATE-----
PEM certificate block
line 4
verify error:num=20:unable to get local issuer certificate
Issuer or chain validation failure
line 5
notAfter=May 01 00:00:00 2026 GMT
Expiry evidence
Fix checklist
Count the leaf, intermediate, and root certificates and confirm the served order.
Serve the full intermediate chain and verify the CA bundle used by the failing client.
Check notBefore/notAfter, automation renewal status, and load balancer certificate attachment.
Inspect leaf and intermediate order.
Compare requested hostname against SANs.
Check expiry, issuer, key usage, and trust-store differences.

DebugTools product

Certificate Chain Viewer

Certificate Chain Viewer is a focused DebugTools mini-product for developers. Paste PEM certificates, openssl output, TLS errors, or chain notes to spot expiry, SAN, issuer, and trust-chain problems.

Use cases

  • Inspect auth, token, header, certificate, cookie, and policy clues safely.
  • Find configuration mismatches before sharing logs or screenshots.
  • Turn security evidence into a practical fix checklist.

How it works

  • Paste or load the snippet you want to inspect in Certificate Chain Viewer.
  • Run the tool in the browser and review the highlighted output.
  • Copy, export, or turn the result into the next debugging step.

Privacy

  • Certificate Chain Viewer is local-first. The core workflow runs in your browser and does not require sending pasted content to DebugTools servers.

This tool history

Recent Certificate Viewer sessions

Only visits for this tool are shown. Pasted content, tokens, request bodies, and logs are not stored here.

Loading this tool history...