y509
Share on:
Enter Your Mastodon Instance
Copy the link below to share to Mastodon
https://terminaltrove.com/y509/
A TUI for analyzing and validating X.509 certificate chains.
Script Preview
Review this script before executing in your terminal.
y509 is a TUI for inspecting and validating X.509 certificate chains from files, standard input (stdin) or from live servers with TLS certificates.
In the TUI, it reads PEM and DER certificates, checks system trust, hostnames and chain presentation, and supports SMTP, IMAP and PostgreSQL STARTTLS. JSON output works well with scripts and CI systems.
You can narrow certificates by searching or filtering for expired, expiring, valid or self-signed entries. This tool also lets you validate certificates, export them as PEM or DER, configure the expiry warning days, and change the theme of the TUI in y509's configuration file.
Developers, sysadmins and security engineers can use y509 to diagnose TLS, PKI and certificate deployment problems and to view general information about certificates in the terminal.
