Home▸Cryptography▸Trust Chain Verification

PKI Chain-of-Trust Validator

Watch a client walk a TLS certificate chain from leaf to root, verifying each issuer signature, expiry date and revocation status — and see exactly where trust breaks when a CA is revoked, a cert expires, or the root anchor isn't trusted.

Cryptography2DEasy60 FPS📱 Mobile-adapted⇄ 3D version

Public-key infrastructure secures the web by chaining trust: a server's leaf certificate is vouched for by an intermediate CA, which is in turn vouched for by a root CA that ships pre-installed in every browser and OS. This simulator animates a client walking that chain from leaf to root, checking each certificate's issuer signature, validity window and revocation status in turn, and shows exactly which hop breaks the chain when a certificate expires, an intermediate CA is revoked, or the root itself isn't a trusted anchor. Toggle the failure scenarios to see how a single broken link anywhere in the chain is enough to reject the whole connection, no matter how valid the rest of the certificates are.

⚙ Under the hood

Follow a verification pulse as it travels from leaf to root in a linear chain, halting at any expired, revoked, or untrusted certificates.

PKICertificate AuthorityTrust Verification

2D · HTML5 Canvas 2D · 60 FPS target · runs fully client-side, no install