Certificates break.
Audits don't wait.

FixMyCert is the PKI operations toolkit — interactive diagnostics, battle-tested runbooks, and audit-ready compliance kits, built from real enterprise PKI practice.

Production is down and it's cert-related

Run the Diagnostic

We have an audit on the calendar

Get Audit-Ready

We're building and need a certificate plan

Plan Your PKI

The Compliance Shelf

Walk into your audit with the paperwork already done.

Templates and working documents that normally take a PKI program weeks to produce — written by engineers who have sat on both sides of the audit table.

Available Now

$497

Compliance-in-a-Box

CP/CPS templates, key ceremony script, naming convention guide, and the supporting documents auditors actually ask for. Updated as CA/Browser Forum requirements change.

One-time purchase · Instant download · Kept current by our compliance monitoring engine

PKI Consortium member·50+ interactive demos·140+ engineering guides·14 operational runbooks·Compliance Hub tracking live CA/B Forum deadlines

Tools

Start where the problem is.

SSL Diagnostic Troubleshooter

Step through the most common cert failures and get to root cause in minutes

SSL Checker

Inspect live certificate details, chain, and expiry for any hostname

CSR Checker

Validate a certificate signing request before you submit it to the CA

Compliance Hub

Track deadlines, validity changes, and CA/B Forum requirements in real time

Deadline Alerts

The 47-day countdown is real. Know where you stand.

Get the 47-Day Readiness Audit checklist (free) plus deadline alerts when CA/B Forum requirements actually change — from the same monitoring engine that keeps our kits current. No filler, no fearmongering.

Interactive Demos

See it work before you run it in production.

SSL/TLS Diagnostic Troubleshooter

Diagnose SSL/TLS connection problems systematically. Interactive troubleshooter for common issues.

Try it

TLS Handshake Step-by-Step

Step through the TLS 1.2 and 1.3 handshake message by message. See ClientHello, ServerHello, and more.

Try it

Certificate Lifecycle Management

Walk through the complete certificate lifecycle from key generation to CSR, issuance, deployment, monitoring, and renewal.

Try it

Engineering Guides

Guides engineers actually finish.

The 47-Day Certificate Timeline

Complete timeline of CA/Browser Forum Ballot SC-081v3 reducing TLS certificate validity from 398 to 47 days by 2029. Live countdowns, phase breakdowns, and action items.

15 minRead