No. The checker only reads the public certificate a server presents during a TLS handshake, which never includes the private key.
Check any domain's live SSL certificate, generate a private key and CSR for a new certificate order, or decode an existing certificate or CSR to see exactly what's inside it.
Enter a domain and we connect to it directly to read its live, currently-installed certificate.
Fill in your organization details and we build a private key and CSR entirely in your browser.
Paste any certificate or CSR to see its subject, validity, SANs, and other fields decoded.
| Subject (CN) | systron.net |
| Issuer | Let's Encrypt |
| Valid From | 08 Jul 2026 |
| Valid To | 06 Oct 2026 — 51 day(s) remaining |
| Signature Algorithm | RSA-SHA256 |
| Serial Number | 05422F28F84D385178B82AD8D1E47977AB21 |
| Chain Length | 4 certificate(s) presented |
| Subject Alt Names | systron.net www.systron.net |
Inspects the certificate a live website is currently presenting — useful for confirming expiry, chain, and SANs on a domain you don't control the server for.
Creates a new private key and Certificate Signing Request before you own a certificate — the first step when ordering one from a CA.
Reads the fields out of a certificate or CSR you already have in text form — no network connection involved at all.
No. The checker only reads the public certificate a server presents during a TLS handshake, which never includes the private key.
No. The private key is generated and stays entirely inside your browser using JavaScript. Only the CSR, which contains no secret material, is meant to be shared with a Certificate Authority.
Checking a live certificate requires a real server-side connection to the target domain, which this tool performs safely via a standard form submission rather than background scripting.
Yes. The decoder parses the pasted text entirely in your browser and makes no network requests.