SSL Tools

Verify SSL certificate installation on your server

SSL Checker –The SSL Checker verifies the type of certificate installed, the common name, validity, server type, certificate chaining, and more.

CSR Generation Has Never Been Easier (OpenSSL Guide)

Generate CSR – To start your certificate issuance process, you need to generate your Certificate Signing Request (CSR) first. With our help and a few OpenSSL commands, you can do this job in seconds.

Decode your Certificate Signing Request (CSR)

CSR Decoder – The CSR Decoder will allow you to decode your Certificate Signing Request that you generate off your server. The CSR decoder will allow you to ensure that all the information within your Certificate Signing Request is accurate and matches your URL.

Convert your SSL file to other formats (OpenSSL Guide)

Convert your SSL – Sometimes, the original format of your SSL certificate may not be compatible with your server. You don't need to worry about it. We can help you use OpenSSL to convert your SSL Certificate into six other formats.

Verify your SSL Certificate is
Correct

Certificate Decoder – Before proceeding with the installation process, you must verify that all information in SSL is 100% correct. Our Certificate Decoder tool allows you to do it easily. You can decode your PFX, DER, or PEM formatted SSL Certificate and validate that all the information is absolutely correct.

Check if Your CSR, SSL Certificate, and Private Key Match (OpenSSL Guide)

Match your CSR and Certificate Key – You easily use OpenSSL to verify if your CSR, SSL Certificate, and Private Key match each other. This is a boon if you have multiple certificate on your hands.

Check for Insecure Links

Why No PadLock? – Our Why No Padlock tool scans through your website in seconds to make sure that it doesn't contain any insecure links. Your site may not display your padlock correctly if there is a presence of insecure links.

State your Preferred Certificate Authority

CAA Record Generator – Our Certification Authority Authorization (CAA) Record Generator Tool generates the proper DNS record to specify your preferred Certificate Authority for a wide number of DNS servers. It’s easy and it takes just a couple of minutes.

Just a few clicks and find out if you need to reissue your Symantec-issued SSL/TLS certificate

Symantec Re-issue Checker – DigiCert has officially acquired Symantec’s CA business. That’s why Symantec SSL/TLS certificate owners MUST reissue their certs before deadlines approach. See if you need to reissue your cert.