Certificate#

The Certificate view decodes the X.509 certificates exchanged in a TLS handshake. The tab appears only when the selected frame contains certificates. Handshakes that resume an earlier session carry no certificates, so the workspace hides the tab for them.

Screenshot to be added: the Certificate tab open on a TLS frame with a multi-certificate chain, the leaf certificate selected, and the Validity, Subject, Issuer, Public Key, and Certificate Details cards visible.

One tab per certificate#

A TLS server usually presents a chain: its own certificate first, then one or more certificate-authority certificates that vouch for it. When the frame carries a chain, the view shows it as tabs across the top. The view labels the server's own certificate Server Certificate. It labels each authority certificate above that one CA Certificate, numbered outward. Each tab's subtitle is the certificate's common name.

Select a tab to switch the body of the view to that certificate.

Validity#

The Validity card at the top shows whether the certificate is currently valid:

• A green badge with a tick means the certificate is in date and has more than 30 days remaining.
• An orange badge means the certificate is in date but expires within 30 days, or the certificate is not yet valid.
• A red badge means the certificate has already expired, with the number of days since expiry.

The card also shows the Not Before and Not After timestamps in your local time zone, formatted as a long date.

Subject and issuer#

Two cards underneath Validity show the parties on the certificate:

• Subject: who the certificate was issued to.
• Issuer: who signed the certificate.

Each card lists the same fields:

• Common Name (CN)
• Organisation (O)
• Organisational Unit (OU)
• Country (C)
• State (ST)
• Locality (L)

The view hides empty fields.

Public key, details, and names#

Further cards show the cryptographic and identification details:

• Public Key: the key algorithm (for example, ECDSA) and the key size in bits.
• Certificate Details: the version (v3), serial number, signature algorithm, and SHA-256 fingerprint.
• Subject Alternative Names (SANs): the additional hostnames and IP addresses the certificate covers, where present.
• Key Usage and Extended Key Usage: what the certificate is permitted to be used for, where the certificate declares it.

Hover any value to see a copy icon. Select the icon to copy the value to the clipboard.

What the view does not do#

The view does not validate the chain against your trust store, check revocation, or verify the signature. It reads whatever the server presented during the handshake. For trust validation, use a dedicated tool such as openssl s_client.