Terms of Use

1. Who provides this service

This site (“the Service”) is operated by Pattaradol Nonting, contactable at [email protected]. By using the Service you agree to these terms. If you do not agree, stop using it.

2. What the Service does

The Service provides tools for inspecting and generating SSL/TLS material: decoding certificates and signing requests, checking a live domain's certificate chain, rebuilding an incomplete chain from the issuer's published intermediates, matching a private key to a certificate, computing public key pins, looking up CAA records and building new ones, searching Certificate Transparency logs, generating key pairs, CSRs and self-signed certificates, testing a signing request against the Let's Encrypt staging environment, and converting between encoding formats including PKCS#12.

Decoding, key matching, format conversion, CAA record building and key/CSR generation run entirely inside your browser. Domain checks, chain building, CAA lookups, CT log searches and staging test orders are performed by our server on your behalf, as described in the Privacy and Cookie Policy.

3. Acceptable use

You may use the Service only for lawful purposes. You must not:

• direct the domain checker at hosts you do not own or are not authorised to test — it opens a real connection to whatever you enter, and doing so against third-party infrastructure without permission may be unlawful in your jurisdiction;
• use the Service to scan, enumerate, probe or map networks, ports or hosts;
• submit automated or high-volume requests, or attempt to circumvent rate limits;
• attempt to disrupt, overload, reverse-engineer or gain unauthorised access to the Service or the systems it runs on;
• use the Service to infringe anyone's rights, or in breach of any applicable law or regulation.

We may rate-limit, block or refuse service to any request or source at our discretion, without notice.

4. Cryptographic keys are your responsibility

Keys generated by the Key Pair & CSR Generator are produced in your browser and are never transmitted to us. We do not hold, escrow, log or back up any private key. If you navigate away or reload without saving a generated key, it is gone permanently and cannot be recovered by us or anyone else.

You are solely responsible for storing private keys securely, and for the consequences of losing or exposing them. Whether a key generated in a browser meets your organisation's key-management requirements is your decision to make.

5. No warranty

The Service is provided “as is” and “as available”, without warranty of any kind, express or implied, including any implied warranty of merchantability, fitness for a particular purpose, accuracy or non-infringement.

In particular, we do not warrant that results are correct, complete or current. Certificate parsing, chain analysis, validity assessments, CAA answers and CT log results may be wrong, stale or incomplete. Do not rely on this Service as the sole basis for a security decision. Verify anything that matters independently — for example with OpenSSL, or with your certificate authority.

6. Limitation of liability

To the fullest extent permitted by law, we are not liable for any indirect, incidental, special, consequential or exemplary damages, nor for any loss of data, keys, certificates, profits, revenue, goodwill or business, arising out of or in connection with your use of or inability to use the Service — including any outage, expired or mis-issued certificate, or security incident.

Where liability cannot lawfully be excluded, our total aggregate liability to you is limited to the amount you paid us for the Service, which is zero.

7. Third-party services

Some tools depend on services we do not run. CT Log Search queries the Certificate Transparency index operated by Cert Spotter (SSLMate, Inc.). The Let's Encrypt Staging Test places orders with the staging environment operated by the Internet Security Research Group, and the certificates it returns are signed by an untrusted root and are not usable in production. The Chain Builder downloads intermediate certificates from whichever Certificate Authority a submitted certificate names. Each of those services has its own terms and privacy policy, and we control neither their availability, their accuracy nor their data handling.

8. Affiliate links

Some pages carry a link to a commercial Certificate Authority or reseller, marked as such where it appears. If you buy after following one, we may be paid a commission; the price you pay is not affected. We are not a party to that sale, we do not process your payment, and we have no control over the seller's pricing, delivery, support or terms — any dispute is between you and them.

A recommendation is not advice about what you should buy. For an ordinary website certificate the free automated route described in our ACME guide is usually the better answer, and we say so on the same pages.

9. Availability and changes

We may change, suspend or discontinue the Service, in whole or in part, at any time and without notice. We may revise these terms; the revised version takes effect when published on this page, and the “last updated” date above will change. Continued use after that constitutes acceptance.

10. Governing law

These terms are governed by the laws of Thailand, and the courts of Thailand have exclusive jurisdiction over any dispute arising from them, without prejudice to any mandatory consumer protections available to you where you live.

11. Contact

Questions about these terms: [email protected].