Three browser-local utilities: inspect JWK/JWKS (private fields redacted), decode PEM X.509 certificates, and scan pasted text for a documented secrets-pattern subset. No remote JWKS fetch, not a trust store, not a repo scanner. Also useful: jwt-decode and validate-env.

Back to security tools on the hub

Inspect JWKS

Inspect JWK/JWKS with private fields redacted — paste-only, no remote fetch.

Decode certificate

Decode PEM X.509 certificates: subject, SANs, expiry, fingerprint — not a trust store.

Scan secrets

Scan pasted text for secret-like patterns — documented subset, not gitleaks.

Also useful

Decode JWT Validate .env