Dcert

About

Dcert is a versatile Rust-powered command-line interface (CLI) and Model Context Protocol (MCP) server designed for comprehensive X.509 certificate management. It enables detailed analysis of TLS certificates from PEM files or live HTTPS endpoints, supports crucial format conversions between PFX and PEM, and facilitates the creation of PKCS12 keystores and truststores. Beyond basic decoding, dcert offers advanced capabilities like private key verification, OCSP revocation checking, and an integrated MCP server for seamless interaction with AI-powered IDEs, making it an essential tool for developers and system administrators focused on secure communication.

Key Features

• 2 GitHub stars
• Verification of private keys against certificates
• Comprehensive TLS Certificate Analysis from PEM files or HTTPS endpoints
• Format conversion between PKCS12/PFX and PEM files
• OCSP revocation status checking and expiry warnings for CI/CD gates
• Model Context Protocol (MCP) server for AI-powered IDE integration

Use Cases

• Integrating certificate expiry checks into CI/CD pipelines to prevent outages
• Converting certificate and key formats (e.g., PFX to PEM) for different server environments
• Diagnosing TLS connection issues and ensuring private keys match their respective certificates