netrecon.
booting
$ netrecon cert-inspect

X.509 certificate inspector.

SANs · sigAlg · expiry · weak primitives · hostname coverage · chain parse

🔒 Pasted PEM is sent to /api/cert-inspect to use our ASN.1 parser, then discarded. Nothing is persisted.