Certificate Chain Inspector

Paste a PEM bundle to verify it, paste a leaf cert and we'll fetch the intermediates via AIA, or just type a hostname. Chain walks up to the root — broken signatures, expired certs, and missing intermediates are flagged.