Raidiam

PKI demo

Generate keypair and issue a certificate

Creates a fresh keypair in your browser, builds a PKCS#10 CSR with the fixed Raidiam test-PKI subject, and asks the mock API to sign it.

Prefer openssl? Run these instead

    Then paste the resulting csr.pem into the Upload tab.

    Upload an existing CSR

    Paste any PEM CSR (ECDSA, RSA, ML-DSA — the CA will cross-sign). The tool decodes it locally for confirmation before submitting.

    Verify a certificate

    Parses a leaf certificate, builds the chain against the trust anchors baked into this site, then fetches OCSP and CRL from the leaf's advertised endpoints.

    Revoke certificate

    Serial · AKI