x509Lab — Certificate Chain Builder

🔐

x509Lab

✉

rocketsquirrel.dev@gmail.com

Node Types

🔴 Root CA

🟡 Intermediate CA

🟢 Leaf / End-entity

🟣 Cross-Certificate

Tree Stats

Nodes: 0
Edges: 0
With cert: 0
Verified: —

Quick Add

🌳

Drag nodes onto the canvas
Click a node to view details

🔍

Select a node to
view its details

Node Info

Name

Type

Certificate

No certificate uploaded

Verification

Connection

          No connections
        

Ready — drag nodes to build your certificate tree

📄 CSR Tools

Common Name (CN)*

Key Algorithm

Organization (O) optional

Org Unit (OU) optional

Country (C) 2-letter

State / Province (ST) optional

Locality (L) optional

Subject Alternative Names optional

Key Usage optional

digitalSignature nonRepudiation keyEncipherment dataEncipherment keyAgreement keyCertSign cRLSign

Extended Key Usage optional

serverAuth clientAuth codeSigning emailProtection timeStamping OCSPSigning

CSR (PEM)

Private Key (PEM)

CSR (PEM)

📁 Load from file

🔑 Upload Private Key

Paste the PEM private key for this node. It stays in your browser and is never sent anywhere.

📁 Load from file

⌨ Keyboard Shortcuts

Actions

Verify Chain

CtrlEnter

Auto Layout

CtrlL

OpenSSL Commands

CtrlK

Save Chain

CtrlS

Clear All

CtrlShiftX

General

Show this help

?

Close modal

Esc

Mac: use ⌘ instead of Ctrl

What's New

x509Lab release history

📎 Upload Certificate

📂

Click or drag a file here

PEM · DER · CRT · CER · P7B supported

Or paste PEM text directly

📋 OpenSSL Commands

Equivalent openssl CLI commands for the current tree

⚡ Generate Test Certificates

Automatically generates test certificates based on the current tree structure.
Generated directly in the browser using the Web Crypto API.

Key Algorithm

Validity (days)

        Nodes to generate:
      

Generating certificates...