rfc5280

X509 (RFC5280) handling in OCaml

This tool is for making X.509 Cert, CRL, CSR and KeyPair(RSA and ECDSA)

OpenSSL config-file generator to embed pictures and audio logotypes into X.509 certificates, according to RFC-9399

Policy-based X.509 Certificate Linter

Independent, pure-Java RFC 5280 X.509 certification path validation engine and ASN.1 DER parser

Browser-based answer to what the padlock means — four checks a real certificate passes and you can break one at a time, a flawless certificate for a lookalike domain that passes all four, and the first message your browser sends with the hostname in the clear. Reads captured certificates; it never connects to a site.

A .NET / Blazor PKI fuzzing tool for generating X.509 certificates, CSRs, malformed keys, custom certificate profiles, and advanced X.509 extension test vectors.

Self-hostable web app + CLI for testing OCSP responders and CRL endpoints against RFC 6960 / RFC 5280 and US Federal PKI requirements.

A haskell library to represent the standard X.509v3 certificate extensions from RFC 5280

Browser demo: a real X.509 hierarchy you validate by hand — showing that finding a chain and validating a chain are two different problems, and only one of them is about signatures.