Certhelm

SSL/TLS, URL, and IP toolbox

Overview Toolbox Pricing

Free SSL/TLS Toolbox

Inspect a public website certificate, analyze a public URL, decode a CSR, or scan common TCP ports on a public IP without signing in. Private targets are rejected.

Use this before onboarding. Check what a site is presenting right now, inspect public URL behavior, review CSR fields before issuance, and scan common public ports before moving into monitored workflows.

The toolbox is a public SSL/TLS checker, URL analyzer, CSR decoder, and common-port exposure scanner that gives search engines and visitors crawlable context before the interactive tools load additional results.

Website lookup Subject, issuer, SANs, validity, TLS version, cipher
URL analyzer Status, redirects, title, text matching, content preview
CSR decode Subject fields, SANs, key algorithm, signature status
Public IP scan Common TCP ports, AI risk summary, exposure findings

Website TLS Lookup

Point at a public website and inspect the certificate it presents right now.

Run a lookup to see issuer, subject, SANs, validity, and TLS details.

Public URL Analyzer

Analyze a public URL for status, redirects, title, and expected or forbidden text without creating a monitored asset.

Run an analysis to inspect status, redirects, page title, and lightweight content matches.

CSR Decoder

Paste a PEM-encoded CSR and review the subject, SANs, key algorithm, and signature state.

Paste a CSR to inspect its subject, SANs, and public key metadata.

Public IP Port Scan

Scan a public IP address across ports 1-10000, identify likely traffic types, and review exposure-focused vulnerability guidance.

Toolbox scans allow ports 1-10000. Leave the field empty to scan the full range. Public usage is limited to 5 unique target IP scans per day.

Run a scan to see open ports, likely traffic types, risk score, and AI-assisted findings.

Need Monitoring Instead Of Ad-Hoc Inspection?

Move from one-off lookups into monitored assets, renewal workflows, ownership tracking, and LAN collector coverage for internal services.