square/certigo

Health v2 · maintenance only

Adoption not part of the score

1031 stars · 77 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Certigo is a Go command-line utility for examining, dumping, and validating TLS/SSL certificates in formats like X.509 (DER/PEM), PKCS7, PKCS12, and JCEKS. It can connect to remote servers (including via STARTTLS protocols) to inspect and verify certificate chains, with JSON output for scripting.

Use cases

• inspect a certificate file from the command line
• debug ssl/tls handshake issues with a remote server
• convert certificates between pem, der, pkcs12 and other formats
• validate a certificate chain and find common certificate errors
• check for expired certificates on a database or mail server via starttls
• script certificate analysis with output and jq
• examine a java keystore or pkcs12 bundle

When to choose

• you need a quick CLI to dump or validate certificates in many formats
• you are debugging TLS connections to servers using STARTTLS like MySQL, SMTP, or LDAP
• you want scriptable JSON output for certificate auditing

When to avoid

• you need a full PKI or certificate authority management solution
• you want a GUI certificate inspector
• you need continuous certificate lifecycle management or automated renewal

Facets

cli-tool · maturity stable

security cryptography developer-tools cli security developer-tools networking windows cross-platform cli go tls ssl x509 certificates pem pkcs12 jceks pkcs7 keystore starttls certificate-validation debugging command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="square/certigo")