Certificates & Reputation

This page groups three trust checks around certificates and address reputation. It includes Certificate decoder, TLS certificate analysis and IP Blacklist Check. Developers, administrators and support teams can use it to inspect an expiry date, an issuer, covered domains or an IPv4 presence on public lists. Access is free, no sign-up is required, and pasted data is handled inside the browser.

To read a pasted PEM certificate, begin with Certificate decoder. If you need to check a live domain, TLS certificate analysis focuses on issuer, domains and expiry. IP Blacklist Check addresses another need: looking up an IPv4 address across multiple public RBLs. Your choice depends on the object you examine and the level of detail you want.

How to use

  1. To read a certificate you already hold, paste the PEM into Certificate decoder and review its fields without sending it anywhere.
  2. To check a live domain, use TLS certificate analysis and inspect issuer, covered domains and expiry.
  3. If expiry is near, run TLS certificate analysis again to confirm the date before planning a renewal.
  4. For an IPv4 address, finish with IP Blacklist Check and query several public RBLs before concluding.

Frequently asked questions

Does Certificate decoder send the PEM anywhere?

No. It reads the pasted certificate in the browser. That lets you inspect a PEM without sending it to a remote service. Still check where the certificate came from if it contains internal details.

When should I use TLS certificate analysis instead of the decoder?

TLS certificate analysis is meant for checking a certificate tied to a domain, with issuer, domains and expiry. The decoder is better for inspecting a PEM you already have. Use the first for a live diagnosis, the second for a local read.

If an IP is not listed, is it automatically clean?

No. The check queries several public RBLs, but no listing does not prove a perfect reputation. Other signals can matter. Treat the result as one clue among others in your diagnosis.

Can I chain Certificate decoder and TLS certificate analysis on the same certificate?

Yes. Certificate decoder reads a pasted PEM, then TLS certificate analysis checks a live domain. You can compare the local content with the observed state. Pay attention to issuer, domains and expiry to spot a mismatch.

Does IP Blacklist Check concern a domain?

No. IP Blacklist Check examines an IPv4 address across public RBLs, not a domain name. Use TLS certificate analysis for a domain and its certificate, then IP Blacklist Check when you need to assess an address. Both diagnoses remain complementary.

Tools in the same category