Reads the constraints inside a single certificate — basic constraints, key usage
Reads the constraints inside a single certificate — basic constraints, key usage, extended key usage — and reports, per role, whether the certificate permits being used that way under the pinned OpenSSL build's rules. Roles covered are TLS client, TLS server, S/MIME signing and encryption, and timestamp signing. This answers the frequent confusion where a certificate is deployed for a purpose its own extensions forbid, and the failure only shows up as an opaque handshake error later.
Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.
Endpoint
POST https://sicher.halowerk.com/v1/oss-openssl-x509-purpose-evaluate
| Category | Everything else |
|---|---|
| Provider host | sicher.halowerk.com |
| Networks | eip155:8453 |
| Payment schemes | exact |
| Self-reported calls, 30 days | 2 from 2 payers (the provider's figure, not ours) |
Our checks, last 30 days
| Day | Result | HTTP | Asked | Time |
|---|---|---|---|---|
| 2026-10-24 | valid payment request | 402 | $0.001 | 1221 ms |
Example input (from the provider)
{
"body": {
"certificate_pem": "-----BEGIN CERTIFICATE-----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\nDmVCA6ajI2xERBn+\n-----END CERTIFICATE-----\n"
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Promised output schema (from the provider)
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"additionalProperties": false,
"properties": {
"certificate_pem": {
"maxLength": 262144,
"minLength": 1,
"type": "string"
}
},
"required": [
"certificate_pem"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST",
"PUT",
"PATCH"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}