cert-parse

Parse X.509 certificate details from PEM files or remote hosts.

21|1|Updated Apr 12, 2026
One-click install
npx skills add https://github.com/woohyun212/security-skill --skill cert-parse
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cert-parse
Source: https://github.com/woohyun212/security-skill/tree/main/cert-parse
Command: npx skills add https://github.com/woohyun212/security-skill --skill cert-parse

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Certificate analysis and validation can be tedious and error-prone; cert-parse automates extraction of Subject, Issuer, SANs, validity, and extensions from PEM/DER inputs and helps verify chain integrity.

Core Features & Use Cases

  • Parse Subject, Issuer, SAN, validity, and public key info from certificates (PEM/DER or remote host).
  • Verify certificate chains against a CA bundle and report common issues (expired, self-signed, weak keys).
  • Use Case: Debug TLS deployments by quickly validating server certificates and chain integrity.

Quick Start

Run cert-parse on a PEM file or remote host to extract and verify certificate details.

Frequently Asked Questions about cert-parse

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify a certificate chain against a CA bundle?

To verify a certificate chain against a CA bundle, use cert-parse to check chain integrity and report common issues like expired, self-signed, or weak keys during deployment or debugging.

Do I need openssl installed to parse and verify SSL certificates?

Yes, you need openssl installed to parse and verify SSL certificates. cert-parse requires this environment dependency to process PEM/DER inputs and perform chain verification.

Does cert-parse support DER input format for parsing X.509 certificates?

Yes, cert-parse supports DER input format for parsing X.509 certificates. It can extract Subject, Issuer, SANs, and extensions from both PEM and DER file inputs.

What X.509 certificate extensions and issues are reported during chain verification?

During chain verification, cert-parse reports X.509 certificate extensions and common issues such as expired certificates, self-signed certificates, and weak public keys against a CA bundle.