Free SSL/PKI tools: HTTPS audit incl. GM SM2/TLCP, DCV pre-check, CSR, cert decode, P12/JKS.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
解析证书(PEM / base64-DER / 裸 DER):全字段展开 + 整链吊销检查(OCSP / CRL，含交叉证书)+ 上传链时验证匹配关系并识别根证书。
证书内容:PEM(可为多证书 bundle)/ base64-DER / 裸 DER
可选;补充证书链(leaf 与链分文件时)。PEM / base64-DER / 裸 DER
是否执行整链吊销检查(OCSP / CRL，含交叉证书),默认 true
This tool isn't marked read-only, so it may change something on the server or in an account you connected.
解析证书(PEM / base64-DER / 裸 DER):全字段展开 + 整链吊销检查(OCSP / CRL，含交叉证书)+ 上传链时验证匹配关系并识别根证书。
| Argument | Type | Description |
|---|---|---|
| cert* | string | 证书内容:PEM(可为多证书 bundle)/ base64-DER / 裸 DER |
| chain | string | 可选;补充证书链(leaf 与链分文件时)。PEM / base64-DER / 裸 DER |
| check_revocation | boolean | 是否执行整链吊销检查(OCSP / CRL，含交叉证书),默认 true |
{
"type": "object",
"required": [
"cert"
],
"properties": {
"cert": {
"type": "string",
"description": "证书内容:PEM(可为多证书 bundle)/ base64-DER / 裸 DER"
},
"chain": {
"type": "string",
"description": "可选;补充证书链(leaf 与链分文件时)。PEM / base64-DER / 裸 DER"
},
"check_revocation": {
"type": "boolean",
"description": "是否执行整链吊销检查(OCSP / CRL，含交叉证书),默认 true"
}
}
}证书 / 私钥 / CSR 匹配验证(SubjectPublicKeyInfo SHA-256 指纹比对)。
| Argument | Type | Description |
|---|---|---|
| csr | string | CSR PEM |
| key | string | 私钥 PEM |
| cert | string | 证书 PEM |
| mode* | string | |
| password | string | 加密私钥的密码(可选) |
{
"type": "object",
"required": [
"mode"
],
"properties": {
"csr": {
"type": "string",
"description": "CSR PEM"
},
"key": {
"type": "string",
"description": "私钥 PEM"
},
"cert": {
"type": "string",
"description": "证书 PEM"
},
"mode": {
"enum": [
"cert-key",
"cert-csr",
"key-csr"
],
"type": "string"
},
"password": {
"type": "string",
"description": "加密私钥的密码(可选)"
}
}
}证书 / 密钥格式转换:PEM / P12 / JKS 任意方向(含同格式重置密码)。
| Argument | Type | Description |
|---|---|---|
| key_pem | string | PEM 源:私钥 |
| cert_pem | string | PEM 源:证书 |
| chain_pem | string | PEM 源:链(可选) |
| source_kind* | string | |
| target_kind* | string | |
| source_alias | string | JKS 别名 |
| target_alias | string | 目标别名，P12/PFX 默认 server，JKS 默认 tomcat |
| enable_aia_fill | boolean | 源不带链时尝试 AIA 拉取 |
| source_password | string | |
| target_password | string | P12/JKS 目标必填 |
| source_blob_base64 | string | P12/JKS 源 base64 |
解析 CSR(PEM / base64-DER / 裸 DER):Subject、公钥算法、SAN、请求扩展、SPKI 指纹、自签名完整性校验。
| Argument | Type | Description |
|---|---|---|
| csr* | string | CSR 内容:PEM 文本 / base64-DER / 裸 DER |
{
"type": "object",
"required": [
"csr"
],
"properties": {
"csr": {
"type": "string",
"description": "CSR 内容:PEM 文本 / base64-DER / 裸 DER"
}
}
}生成 RSA / ECC 私钥与对应 CSR;入参为 Subject + 算法 + 哈希 + SAN。
| Argument | Type | Description |
|---|---|---|
| subject* | object | |
| hash_alg | string | RSA 适用;ECC 由曲线决定 |
| algorithm* | string |
{
"type": "object",
"required": [
"subject",
"algorithm"
],
"properties": {
"subject": {
"type": "object",
"required": [
"common_name",
"country"
],
"properties": {
"san": {
"type": "array",
"items": {
"type": "string"
},
"description": "额外的 Subject Alternative Names(可选;CN 已自动包含)"
},
"country": {
"type": "string",
"description": "C 国家代码 ISO 3166-1 alpha-2,会自动转大写(必填)"
},
"locality": {
"type": "string",
"description": "L 城市(可选)"
},
"province": {
"type": "string",
"description": "ST 省/州(可选)"
},
"common_name": {
"type": "string",
"description": "CN,支持中文域名及通配符，自动转换为 IDNA/Punycode。会自动作为第一个 SAN 加入(现代 CA 要求 CN 出现在 SAN 中)"
},
"organization": {
"type": "string",
"description": "O 组织名(可选,DV 证书通常不需要)"
}
}
},
"hash_alg": {
"enum": [
"SHA-256",
"SHA-384",
"SHA-512"
],
"type": "string",
"description": "RSA 适用;ECC 由曲线决定"
},
"algorithm": {
"enum": [
"RSA-2048",
"RSA-3072",
"RSA-4096",
"EC-P256",
"EC-P384",
"EC-P521"
],
"type": "string"
}
}
}DCV 预检 — DNS(TXT/CNAME)或 HTTP 文件验证模式。返回完整事件流(同步等待)。
| Argument | Type | Description |
|---|---|---|
| mode* | string | |
| domain | string | DNS 模式必填:主机记录名 |
| file_url | string | HTTP 模式必填;协议头可省略,系统自动探测 http+https |
| target_ca | string | 可选;letsencrypt | digicert | sectigo | godaddy | globalsign | zerossl |
| record_type | string | DNS 模式记录类型,默认 txt |
| expected_token | string | 可选;粘贴期望值启用字节级匹配 |
{
"type": "object",
"required": [
"mode"
],
"properties": {
"mode": {
"enum": [
"dns",
"http"
],
"type": "string"
},
"domain": {
"type": "string",
"description": "DNS 模式必填:主机记录名"
},
"file_url": {
"type": "string",
"description": "HTTP 模式必填;协议头可省略,系统自动探测 http+https"
},
"target_ca": {
"type": "string",
"description": "可选;letsencrypt | digicert | sectigo | godaddy | globalsign | zerossl"
},
"record_type": {
"enum": [
"txt",
"cname"
],
"type": "string",
"description": "DNS 模式记录类型,默认 txt"
},
"expected_token": {
"type": "string",
"description": "可选;粘贴期望值启用字节级匹配"
}
}
}列出已支持的 CA(用于挑战路径推导与 CAA 比对)。
No arguments.
{
"type": "object",
"properties": {}
}HTTPS 体检：常规 TLS 与国密 TLCP、RSA/SM2 证书、RSA 根信任、整链 OCSP/CRL（含交叉证书）、协议套件及评级。同步等待全部完成。
| Argument | Type | Description |
|---|---|---|
| host* | string | FQDN,可带 :port |
| port | integer | 可选;默认从 host 解析或回退 443 |
| force | boolean | true 跳过缓存,强制重扫 |
{
"type": "object",
"required": [
"host"
],
"properties": {
"host": {
"type": "string",
"description": "FQDN,可带 :port"
},
"port": {
"type": "integer",
"description": "可选;默认从 host 解析或回退 443"
},
"force": {
"type": "boolean",
"description": "true 跳过缓存,强制重扫"
}
}
}{
"type": "object",
"required": [
"source_kind",
"target_kind"
],
"properties": {
"key_pem": {
"type": "string",
"description": "PEM 源:私钥"
},
"cert_pem": {
"type": "string",
"description": "PEM 源:证书"
},
"chain_pem": {
"type": "string",
"description": "PEM 源:链(可选)"
},
"source_kind": {
"enum": [
"pem",
"p12",
"jks"
],
"type": "string"
},
"target_kind": {
"enum": [
"pem",
"p12",
"jks"
],
"type": "string"
},
"source_alias": {
"type": "string",
"description": "JKS 别名"
},
"target_alias": {
"type": "string",
"description": "目标别名，P12/PFX 默认 server，JKS 默认 tomcat"
},
"enable_aia_fill": {
"type": "boolean",
"description": "源不带链时尝试 AIA 拉取"
},
"source_password": {
"type": "string"
},
"target_password": {
"type": "string",
"description": "P12/JKS 目标必填"
},
"source_blob_base64": {
"type": "string",
"description": "P12/JKS 源 base64"
}
}
}