SSL Toolkit — Powerful On Every Platform

SSL Toolkit is your all-in-one multiplatform toolkit for SSL. It is available for Android, iOS, macOS, Windows and ChromeOS including full feature set on all devices.

SSL Toolkit offers a variety of different functions for your daily work with SSL certificates, including SSL install check, TLS check, PEM parser, CSR generator/manager and certificate transparency log check.

The CSR Generator is a powerful and compared to OpenSSL easy to use tool to generate CSR with the desired parameters. A CSR can be created using the RSA or ECC algorithms. RSA supports key lengths of up to 8192 bytes, while ECC supports prime256v1 and secp384r1 curves. The generator also allows to define subject alternative names within the CSR.

The CSR Generator Tool

Have you ever tried to create a CSR including subject alternative names with OpenSSL? What a mess… So don’t waste any more time googling the right commands for OpenSSL!
Every generated CSR including the private key can then be saved to manage them later via the CSR Manager.

The CSR Manager Tool

You have a certificate file and no clue for which identifiers are covered by this certificate? Are you sure the certificate meets your requirements and was issued in the correct way? No problem, copy paste the certificate and take a look!

The PEM Parser supports CSR, X509 and PKCS7 certificates in PEM format.

PEM Parser Tool Parsing medium.com Certificate

Did you know that normally every issued certificate ist written in a so called Certificate Transparency Log (CT Log). So if someone else issues a certificate for a domain from my portfolio to so something bad with it, so this musst be seen in the CT Log? Exactely!

Open the CT Log Check tool and enter any common name of you choice. Below you can find the result if you search for medium.com.

CT Log Check Tool

Now you have installed the certificate and need to check if everything works as intended.

  • Does the server return the right certificate?
  • Does the server automatically redirect to HTTPS?
  • Have I setup the correct CAA DNS record?

Do you do this and more checks everytime by hand? Stop wasting time! Use the SSL Install Check tool. Enter a domain name of your choice and start checking. The check will lookup the following information and more:

  • The certificate returned from the server
  • If the server redirects to HTTPS
  • If the certificate returned from the redirect matches
  • If a CAA DNS record is set in the corresponding zone file.
SSL Install Check Tool

The CAA Record Generator helps to easily create the right CAA record for the right Certificate Authority.

The generated DNS records are then displayed in BIND format.

CAA Generator Tool

Sometimes you got a lot of certificate and do not know if they belong together. You can check whether the given certificates represent a correct chain, by passing them in the desired order in the Certificate Chain Check tool. The tool will then check if the issuer and the subject matches for each entity of the chain.

Certificate Chain Check Tool

If this all sounds great to you, here comes the best part: SSL Toolkit is available on all major stores and offers the full set of features on every platform!

SSL Toolkit is not yet finished and there are several tools and improvements in the pipeline:

  • Base64 encode/decode
  • PKCS7 Converter
  • Certificate Matcher

If you miss any feature, feel free to get in contact via the build in feedback functionality!