What server configs are supported?

Our Configuration Generator supports Nginx, Apache, and HAProxy with proper cipher suites, protocols, and security headers.

What DNS record types can I look up?

The DNS Checker supports A, AAAA, MX, NS, TXT, CNAME, SOA, CAA, and SRV records.

Trusted by 1000+ users worldwide

Free SSL Toolkit

Check, decode, generate, and troubleshoot SSL certificates — no account required.

172 Tools No Sign-up Free Forever

Quick SSL Check

Popular:

Issuer

Key

Protocol

View full report →

Issue Free SSL Certificate

172 Tools

90 Day Certs

RSA, ECDSA, Ed25519

Trusted By

Developers & Sysadmins Worldwide

10,000+

SSL Checks Daily

50+

Countries Served

99.9%

Uptime

<2s

Average Response

Trusted by developers No data stored Server-side

Trusted technologies

Let's Encrypt

SSL Labs

ACME

TLS 1.3

Everything You Need for SSL

SSL Checker & Decoder

Check any domain's SSL certificate: issuer, expiry, SANs, key info, chain validation. Decode PEM & DER formats.

Key, CSR & Converter

Generate RSA/ECDSA/Ed25519 keys. Create CSRs. Convert between PEM, DER, PFX, P7B formats.

Security & TLS Scanner

Full protocol check: TLS 1.2/1.3, cipher suites, vulnerabilities, HSTS, security headers.

DNS & Config Generator

Query A, AAAA, MX, CNAME, TXT, NS, CAA records. Generate Nginx/Apache/HAProxy SSL configs.

Free SSL Certs (ACME)

Issue real 90-day Let's Encrypt wildcard certificates with ACME HTTP-01 & DNS-01 validation.

Chain, CRL & OCSP

Build & validate certificate chains. Check CRL revocation lists and OCSP certificate status.

Why Choose SSL Toolkit?

No Registration

All tools available instantly. No email, no password, no tracking.

Fast Results

Server-side processing delivers results in under 2 seconds.

99.9% Uptime

Always available when you need to check or generate certificates.

Real Certs

Issue 90-day Let's Encrypt certificates with ACME integration.

How SSL Toolkit Compares

Feature-by-feature comparison with other SSL tools

Feature	SSL Toolkit	SSL Shopper	SSL Labs	DigiCert
SSL Certificate Checker
CSR Generator
Key Generator (RSA/ECDSA/Ed25519)
Security Scanner
DNS Record Lookup
CAA / CRL / OCSP Checkers
Certificate Chain Builder
Config Generator (Nginx/Apache/HAProxy)
SSL Converter (PEM/DER/PFX)
ACME Certificate Issuance
Certificate Monitoring
Open Source / Self-Hosted
Total Free Tools	172	5	1	2

About SSL Toolkit

SSL Toolkit is a free, comprehensive SSL toolkit designed for system administrators, developers, and security professionals. Our 172 tools help you manage, diagnose, and troubleshoot SSL/TLS certificates and DNS configurations without requiring any registration or installation.

All tools run server-side and are completely free to use. We support RSA, ECDSA, and Ed25519 key algorithms, and our suite includes everything from basic certificate checking to advanced security scanning and DNS analysis.

For automated certificate issuance, sign in to access our ACME client with Let's Encrypt integration supporting HTTP-01 and DNS-01 validation methods.

Who Uses SSL Toolkit?

Developers

Generate CSRs, create key pairs, decode certificates, and test SSL configurations.

System Administrators

Monitor certificate expiry, check DNS records, scan for vulnerabilities.

Security Professionals

Perform SSL/TLS security assessments and vulnerability scanning.

Frequently Asked Questions

Yes, all 172 SSL tools are completely free with no usage limits, no registration, and no hidden charges. You can check certificates, generate keys, decode certificates, and run security scans without paying anything.

No. All 172 SSL tools are accessible without an account. Registration is only required for ACME certificate issuance via Let's Encrypt and for managing issued certificates.

SSL Toolkit supports RSA key sizes from 2048 to 8192 bits, ECDSA curves P-256 (secp256r1), P-384 (secp384r1), and P-521 (secp521r1), as well as Ed25519 keys. All algorithms are available in both the Key Generator and CSR Generator tools.

Yes. After signing in, you can use our ACME client to issue free 90-day certificates from Let's Encrypt. We support both HTTP-01 (webroot) and DNS-01 (TXT record) validation methods.

Our Configuration Generator supports Nginx, Apache, and HAProxy. Generate complete SSL configurations with proper cipher suites, protocols, and security headers for your web server.

The DNS Checker supports A (IPv4), AAAA (IPv6), MX (mail exchange), NS (nameserver), TXT (text), CNAME (canonical name), SOA (start of authority), CAA (certification authority authorization), and SRV (service) records.

A CAA (Certificate Authority Authorization) record specifies which Certificate Authorities are allowed to issue certificates for your domain. Our CAA Checker verifies these records to prevent unauthorized certificate issuance.

Use our CRL Checker to fetch and parse Certificate Revocation Lists, or the OCSP Checker to query the Online Certificate Status Protocol endpoint. Both tools tell you if a certificate has been revoked by its issuer.