A powerful utility for parsing and inspecting X.509 PEM certificates to extract human-readable SSL/TLS metadata.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install cert-decode
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install cert-decode using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Cert Decode?
Cert Decode is a specialized tool designed for the Openclaw Skills ecosystem that simplifies the inspection of SSL/TLS certificates. It bridges the gap between raw cryptographic data and actionable insights by leveraging openssl to parse PEM content from text, local files, or live hostnames. This skill is essential for developers and system administrators who need to verify certificate chains, ensure security compliance, and monitor expiration timelines.
By automating the extraction of complex fields like Subject Alternative Names (SANs) and signature algorithms, Cert Decode provides a clean, summarized view of a certificate's identity and validity status. It acts as a diagnostic companion for troubleshooting web server configurations and validating public key infrastructure (PKI) components.
Cert Decode Use Cases
- Verifying the expiration date and validity window of a web server certificate.
- Checking Subject Alternative Names (SANs) to confirm multi-domain coverage.
- Inspecting local .pem or .crt files during development or deployment.
- Troubleshooting SSL connection issues by fetching and parsing live certificates from a hostname.
- Identifying weak public key algorithms or small key sizes in existing certificates.
How Cert Decode Works
- The skill identifies the input source: a pasted PEM block, a local file path, or a remote hostname.
- It executes the appropriate openssl x509 command to extract raw text data from the certificate.
- The raw output is parsed to isolate key fields including Subject, Issuer, Serial Number, and Validity dates.
- A logic check is performed on the 'Not After' date to determine if the certificate is valid, expiring within 30 days, or already expired.
- The final analyzed data is presented to the user in a structured, easy-to-read summary.
Cert Decode Setup
To use Cert Decode within the Openclaw Skills framework, ensure you have openssl installed on your system:
# macOS
brew install openssl
# Ubuntu/Debian
sudo apt update && sudo apt install openssl
# RHEL/CentOS
sudo yum install openssl
Cert Decode Data Schema & Taxonomy
Cert Decode organizes extracted certificate metadata into a structured key-value format for clarity:
| Field | Description |
|---|---|
| Subject | The entity the certificate is issued to (CN, O, OU, C) |
| Issuer | The Certificate Authority (CA) that signed the certificate |
| Validity | Not Before and Not After timestamps including a countdown to expiry |
| SANs | A list of all DNS and IP entries in the Subject Alternative Name block |
| Technical Details | Public key algorithm, key size (e.g., RSA 2048), and signature algorithm |
Cert Decode Advanced Features
- Live Hostname Inspection: Automatically connects to port 443 of a provided domain to pull the active certificate.
- Smart Expiration Alerts: Provides visual warnings if a certificate is slated to expire within a 30-day window.
- Multi-Source Support: Seamlessly handles raw text input via temporary file creation or direct file path reading.
- Error Diagnostics: Detects and advises on DER to PEM conversion and missing system dependencies.
SKILL.md
Loading
Related Openclaw Skills
Home Layout
A comprehensive interior design and spatial optimization tool that provides intelligent layout solutions and furnishing inspiration.
Feishu Cloud Drive Assistant
A professional-grade Feishu cloud storage manager built on official APIs to handle files, folders, and permissions for AI agents.
Surreal Mutation & Impossible Physics Video Generator
A high-end video generation skill for Seedance 2.0 that transforms mundane prompts into surreal, reality-warping short-form content.
Backup OpenClaw Configuration
A specialized utility for creating timestamped backups and performing safe restorations of all OpenClaw configuration and workspace data.
3D Web Experience
An expert framework for building immersive 3D web experiences using Three.js, React Three Fiber, and Spline.
Aight Utils
Aight Utils provides a native bridge between your AI agent and the Aight iOS app to manage reminders, tasks, and deadlines in real-time.
METADATA
Featured*
