/api/generate

Generate a certificate signing request and a private key.

/api/decode

Parse any PKCS#10 CSR and return its subject, SANs, public key, signature verification and extensions.

/api/ssl-check

Full SSL/TLS check with an SSL Labs-style A–F grade.

/api/ct

Search public certificate transparency logs for certificates issued to a domain.

/api/revocation

Fetch the certificate currently served by a domain and report its CRL distribution points and OCSP responder endpoints.

/api/ssl-tracer

Perform a TLS handshake against a host and port, recording DNS, TCP, TLS version, cipher, and certificate chain.

/api/openssl-trace

Run a raw openssl s_client handshake against a domain and return the complete verbose output.