Loading…
CompareOpen in Google Play
This app isn't in any of our charts yet.
• Fixed certificate details and download • New: OkHttp, network_security_config and iOS pinning snippets • New: share certificates and inspect links shared from other apps • Remaining validity days and expiry warning • Dark theme, landscape and tablet support, accessibility improvements • Available in French, Spanish, German and Chinese
Inspect any site's TLS certificates, get SHA-256 pins and download them
Certificate Pinning shows the TLS/SSL certificate chain of any website and gives you the SHA-256 public key pins you need to implement certificate pinning in your apps. Type a host name or URL, or share a link from your browser, and the app connects to the server and displays every certificate it presents. WHAT YOU GET FOR EACH CERTIFICATE • Public key pin (SPKI SHA-256) in the "sha256/…" format, ready to copy • Subject, issuer and common name • Validity dates, remaining days and a warning when it is about to expire • SHA-256 and SHA-1 fingerprints, serial number • Signature algorithm, public key type and size • Subject alternative names (DNS names and IP addresses) DOWNLOAD AND SHARE • Save a single certificate as PEM (.pem) or DER (.cer) • Save the full chain as a single PEM file • Share a certificate as PEM text with any app READY-TO-USE PINNING CONFIGURATION • OkHttp CertificatePinner snippet (Kotlin) with every key of the chain as backup pins • Android network_security_config.xml with a pin-set and an expiration date • iOS Info.plist (NSPinnedDomains) pinning the CA keys TRUST CHECK The app tells you whether the chain is trusted by your device, whether the host name matches the certificate, or why validation failed (for example expired or self-signed certificates). Certificates are shown even when they are not trusted, so you can analyse problems. DESIGNED FOR DEVELOPERS AND SECURITY TESTERS • Light and dark theme, portrait and landscape, phones and tablets • Screen reader friendly • Available in English, Italian, French, Spanish, German and Simplified Chinese PRIVACY The app only contacts the server you enter. It has no account and does not store the addresses you inspect. The app is free and shows a banner ad; in the EEA, UK and Switzerland your consent is requested first and can be changed at any time from the "Privacy settings" menu.