{
  "slug": "cert-chain-validate",
  "name": "gizza-ai/cert-chain-validate",
  "version": "0.1.0",
  "title": "Certificate Chain Validator — gizza.ai",
  "description": "Check a pasted PEM certificate chain offline for leaf-to-root ordering, signature linkage and expiry windows.",
  "tags": [
    "certificate",
    "tls",
    "security"
  ],
  "category": "data",
  "urls": {
    "page": "https://gizza.ai/tools/cert-chain-validate/",
    "markdown": "https://gizza.ai/tools/cert-chain-validate/index.md",
    "descriptor": "https://gizza.ai/tools/cert-chain-validate/tool.json",
    "deep_link_example": "https://gizza.ai/tools/cert-chain-validate/?chain_pem=-----BEGIN%20CERTIFICATE-----%0AMIID...%20leaf%20certificate%20...%0A-----END%20CERTIFICATE-----%0A-----BEGIN%20CERTIFICATE-----%0AMIID...%20intermediate%20certificate%20...%0A-----END%20CERTIFICATE-----"
  },
  "cli": "gizza tool cert-chain-validate \"-----BEGIN CERTIFICATE-----\nMIID... leaf certificate ...\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----\nMIID... intermediate certificate ...\n-----END CERTIFICATE-----\"",
  "tool": {
    "description": "Checks a pasted PEM certificate chain offline for leaf-to-root ordering, issuer/subject linkage, certificate signatures, CA flags and current validity windows. It does not consult browser or OS trust stores.",
    "parameters": {
      "additionalProperties": false,
      "properties": {
        "chain_pem": {
          "description": "Leaf-to-root PEM certificate chain. Paste one or more -----BEGIN CERTIFICATE----- blocks in order: leaf, intermediates, then optional self-signed root.",
          "type": "string"
        }
      },
      "required": [
        "chain_pem"
      ],
      "type": "object"
    }
  }
}