Certificates break.
Audits don't wait.
FixMyCert is the PKI operations toolkit — interactive diagnostics, battle-tested runbooks, and audit-ready compliance kits, built from real enterprise PKI practice.
Walk into your audit with the paperwork already done.
Templates and working documents that normally take a PKI program weeks to produce — written by engineers who have sat on both sides of the audit table.
Monthly subscription
PKI Compliance Brief (Monthly)
White-label monthly brief consultants rebrand and send to their own clients.
One-time kits
Mass Revocation Response Plan Kit
Response plan + annual tabletop exercise for CA mass revocation events.
47-Day Readiness Kit
Scored 82-point audit, exec briefing deck, vendor matrix, and DCV migration plan. Answer "are we ready?" with a number.
PCI DSS 4.0 Audit Prep Kit
Evidence workbook, crypto inventory, QSA interview prep, 30-day plan. Walk into the assessment prepared.
Compliance-in-a-Box
CP/CPS templates, key ceremony script, naming convention guide, and the supporting documents auditors actually ask for. Updated as CA/Browser Forum requirements change.
Compliance Command Center
All four kits in one purchase — Mass Revocation Response Plan Kit, 47-Day Readiness Kit, PCI DSS 4.0 Audit Prep Kit, and Compliance-in-a-Box.
Lifetime access to all future updates · Single-organization license
One-time purchase · Instant download · Kept current by our compliance monitoring engine
Start where the problem is.
SSL Diagnostic Troubleshooter
Step through the most common cert failures and get to root cause in minutes
SSL Checker
Inspect live certificate details, chain, and expiry for any hostname
CSR Checker
Validate a certificate signing request before you submit it to the CA
Compliance Hub
Track deadlines, validity changes, and CA/B Forum requirements in real time
The 47-day countdown is real. Know where you stand.
Get the 47-Day Readiness Audit checklist (free) plus deadline alerts when CA/B Forum requirements actually change — from the same monitoring engine that keeps our kits current. No filler, no fearmongering.
See it work before you run it in production.
SSL/TLS Diagnostic Troubleshooter
Diagnose SSL/TLS connection problems systematically. Interactive troubleshooter for common issues.
Try it
TLS Handshake Step-by-Step
Step through the TLS 1.2 and 1.3 handshake message by message. See ClientHello, ServerHello, and more.
Try it
Certificate Lifecycle Management
Walk through the complete certificate lifecycle from key generation to CSR, issuance, deployment, monitoring, and renewal.
Try itGuides engineers actually finish.
The 47-Day Certificate Timeline
Complete timeline of CA/Browser Forum Ballot SC-081v3 reducing TLS certificate validity from 398 to 47 days by 2029. Live countdowns, phase breakdowns, and action items.
How to Install OpenSSL
Install OpenSSL on Windows, Linux, macOS, and Alpine — plus why winget leaves it off your PATH and how to fix the 'openssl is not recognized' error.
TLS 1.2 vs 1.3
Compare TLS versions side-by-side. See why TLS 1.3 is faster and more secure.
Recommended Resources
Two resources we recommend to every PKI practitioner — one for learning, one for issuing.
Learn TLS & PKI Properly
Ed Harmoush's Practical TLS course — 11 modules, 40+ labs, the most complete structured deep-dive into TLS and PKI we've found. FixMyCert readers get 50% off.
See the course
Get Free SSL Certificates
ZeroSSL issues free 90-day certificates via ACME with no rate limits, wildcard support, and a web dashboard. Operated by HID Global.
Read the guide