Inspect X.509 certificate identity, validity, usages, and fingerprints.
Certificates are decoded and hashed entirely in your browser. No host lookup, upload, or revocation request is made.
Decoding is not trust validation. This tool does not check revocation, Certificate Transparency, hostname ownership, or whether a root is trusted by your device. Do not paste private keys.
JWT Decoder
Decode JWT headers and payloads — no secret needed.
ASCII / Char Code Viewer
Paste a string to see each character with its numeric code point underneath.
Chmod Calculator
Toggle permissions or enter a number to see the chmod breakdown.
CSP Builder
Build a Content Security Policy and flag risky directives entirely locally.