CALCULATE • LOOKUP • VERIFY
Paste a PEM-encoded certificate to decode all its fields. Runs entirely in your browser - nothing is sent to a server.
Check a domain’s SSL certificate - expiry date, issuer, covered domains, and whether HTTPS is currently reachable.
Inspect response headers and grade the HTTP security configuration for any URL. One request - raw headers and an A‑F security score side by side.
Share a secret that self-destructs after one view. Encrypted in your browser with AES-256-GCM - the server never sees your plaintext.
tools.ssl-decoder.about.p1
tools.ssl-decoder.about.p2