PKI & SSL Products

Powerful tools to manage certificates and protect your infrastructure.

Our Products

Red Kestrel builds enterprise-grade PKI and SSL solutions that simplify certificate management, prevent outages, and ensure compliance.

SslDecoder Desktop lets you decode certificates and CSRs completely offline — ideal for secure or air-gapped environments where privacy matters.

CertAlert provides automated discovery and expiry alerts to prevent costly certificate outages.

x509dump is our free developer CLI for offline certificate and CSR decoding with clean JSON output, and a natural entry point into planned pro validation and analysis features.

SslDecoder Desktop

Private certificate and CSR decoding for secure environments.

SslDecoder Screenshot

Decode X.509 certificates entirely offline — no data ever leaves your system.

  • Fully offline certificate and CSR decoding
  • Zero network communication – all data stays local
  • Ideal for air-gapped and classified systems
  • Free 30-day trial with expert support
Learn More Request Free Trial

CertAlert

CertAlert HTML Report

Enterprise certificate discovery and monitoring. Detect, track, and alert on expiring or misconfigured certificates before they cause downtime.

  • Automated discovery across your network
  • Real-time certificate health and status monitoring
  • Custom alerts for upcoming expirations
  • Compliance-ready reporting and audit trails
Learn More Get CertAlert

Resources

x509dump

Free offline CLI for certificate and CSR decoding with stable JSON output.

Decode X.509 certificates and PKCS#10 CSRs locally from PEM, DER, files, or stdin. Built for automation, CI, and secure environments where data must stay on the machine.

  • Offline certificate and CSR decoding
  • Stable JSON output for scripts and pipelines
  • Free edition available now for Windows, macOS, and Linux
  • Planned pro roadmap for deeper validation and analysis
Learn More Download Free

UPDATED CRL Monitor

Automated CRL monitoring, alerting, and reporting for resilient PKI operations.

CRL Monitor HTML Dashboard

Ensure your Certificate Revocation Lists stay available and up to date. CRL Monitor checks freshness, verifies signatures, detects outages, and generates clean HTML and CSV reports.

  • Monitors CRL freshness, availability, and signature validity
  • Immediate alerts for errors, expired CRLs, or unreachable endpoints
  • HTML dashboard and machine-readable CSV reports
  • Lightweight JSON configuration and easy automation via Task Scheduler
Learn More

Customer Feedback

"CRL monitor is the tool we were looking for; installation is complete and productive. Thank you for your superb support!"

— Hans Probst, Swiss Mobiliar Insurance Company Ltd

Want to learn more about our solutions?

Contact our team for a personalized consultation about how our tools can help your organization.

Get in Touch