SSL/TLS Tools
Free tools for SSL configuration, certificate management and TLS security testing. No signup — all tools are completely free.
Certificate Transparency Search
See every SSL certificate ever logged for a domain — issuers, recent certs, wildcards, and subdomains discovered from CT logs.
Open toolSSL Grade Badge
Embed your SSL/TLS rating on your site with one line of HTML — the badge auto-updates with your latest scan.
Open toolRenewal Readiness Badge
Embed a live “47-day ready” badge proving your certificate will survive the shrinking 200 → 100 → 47-day lifetime limits.
Open toolDMARC Checker
Analyze a domain's DMARC record, grade enforcement, and get the upgrade path to p=reject and Gmail/Yahoo compliance.
Open toolSecurity Headers API
Free JSON API for HTTP security-header grades — a drop-in replacement for the discontinued securityheaders.com API.
Open toolsecurityheaders.com Alternative
Snyk shut down the securityheaders.com API in April 2026. Migrate your CI header checks in one line — same A+ to F grade on the X-Grade header.
Open toolSSL Config Generator
Generate hardened SSL/TLS configurations for Nginx, Apache, Caddy, and HAProxy.
Open toolCSR Generator
Generate Certificate Signing Requests and private keys for RSA and ECDSA.
Open toolCertificate Decoder
Parse and inspect SSL certificate details, expiry dates, and chain info.
Open toolCSR Decoder
Analyze CSR contents including subject, key type, and SAN entries.
Open toolKey Matcher
Verify that your certificate, CSR, and private key match each other.
Open toolCAA Record Checker
Check DNS CAA records that control which CAs can issue certificates.
Open toolPQC Readiness Checker
Check if your server is ready for post-quantum cryptography (ML-KEM hybrid key exchange).
Open tool47-Day Cert Readiness
Check if your domain is prepared for 47-day certificate lifetimes starting 2029.
Open toolCompliance Framework Checker
Map your SSL, email security, and HTTP headers against PCI DSS, ISO 27001, HIPAA, SOC 2, GDPR, and more.
Open toolFrequently asked questions
Are these SSL/TLS tools free?
Yes, every tool here is free to use with no account required. A free account is only needed for continuous monitoring, scan history and alerts.
Do I need to create an account?
No. All the checkers and generators run on demand without signup. Sign up only if you want scheduled scans, expiry alerts and a dashboard across your domains.
Are the CSR generator and other key tools safe to use?
The sensitive tools (CSR generator, decoders and key matcher) run on a hardened, browser-only page with a strict Content-Security-Policy, no analytics and no third-party scripts. Private keys are generated in memory, never stored and never logged.
Which tool should I use to fix a low SSL grade?
Use the SSL Config Generator to produce a hardened configuration for your server, then re-scan with the SSL checker. The CAA checker, compliance checker and PQC readiness checker help you close remaining gaps.
Can I automate these checks in CI/CD?
Yes — the Security Headers API returns machine-readable JSON grades you can call from CI. Further checks are available through the MySSL REST API on a free account.