Nexilon Tools

PKI Toolkit

Nothing leaves this window. Processing happens entirely in the browser - no transmission, no upload, no external resources. Enforced by Content Security Policy.

How to check it. Open this tool via "Open in a new tab" and then the network panel of your browser: apart from the document itself, nothing is listed there - not even while you load a file into it. Inside the frame of a web page you additionally see the entries of that page; the tool requests none of them.

An empty network tab only shows that nothing was loaded, not that nothing can be loaded. The rule is in the source code of this file as Content-Security-Policy and can be read there.

Files

Drop certificates, bundles, requests and key containers here - in any order and any mix: .pem, .crt, .cer, .der, .p7b, .p7c, .csr, .key, .p12, .pfx. Detection is based on content, not on the file extension. Every file is named - including any that this tool cannot open.

Notes on the files

    Recognised files

      Certificates read in

      File Subject Issuer Valid until Key Status

      Chain Fixer

      The correctly sorted chain is built from the certificates that were read in. Every issuer edge is checked cryptographically, not just matched by name.

      Notes

        Chain

          fullchain.pem

          The download button uses a blob: address that this bundle generates itself - nothing leaves the window in the process. If the browser blocks the download anyway: select the text below and copy it with Ctrl/Cmd+C, that always works.