This site is an archive and is no longer updated.

    Certificates break.
    Audits don't wait.

    FixMyCert is the PKI operations toolkit — interactive diagnostics and battle-tested runbooks, built from real enterprise PKI practice.

    Production is down and it's cert-related

    Run the Diagnostic

    We're building and need a certificate plan

    Plan Your PKI
    Tools

    Start where the problem is.

    SSL Diagnostic Troubleshooter

    Step through the most common cert failures and get to root cause in minutes

    CSR Checker

    Validate a certificate signing request before you submit it to the CA

    Interactive Demos

    See it work before you run it in production.

    SSL/TLS Diagnostic Troubleshooter

    SSL/TLS Diagnostic Troubleshooter

    Diagnose SSL/TLS connection problems systematically. Interactive troubleshooter for common issues.

    Try it
    TLS Handshake Step-by-Step

    TLS Handshake Step-by-Step

    Step through the TLS 1.2 and 1.3 handshake message by message. See ClientHello, ServerHello, and more.

    Try it
    Certificate Lifecycle Management

    Certificate Lifecycle Management

    Walk through the complete certificate lifecycle from key generation to CSR, issuance, deployment, monitoring, and renewal.

    Try it
    Engineering Guides

    Guides engineers actually finish.

    The 47-Day Certificate Timeline

    The 47-Day Certificate Timeline

    Complete timeline of CA/Browser Forum Ballot SC-081v3 reducing TLS certificate validity from 398 to 47 days by 2029. Live countdowns, phase breakdowns, and action items.

    15 minRead
    How to Install OpenSSL

    How to Install OpenSSL

    Install OpenSSL on Windows, Linux, macOS, and Alpine — plus why winget leaves it off your PATH and how to fix the 'openssl is not recognized' error.

    8 minRead
    TLS 1.2 vs 1.3

    TLS 1.2 vs 1.3

    Compare TLS versions side-by-side. See why TLS 1.3 is faster and more secure.

    6 minRead