How It Works
- Get a certificate: Generate a CSR on your device (use your name in the CN field), upload it here, and get a signed client certificate
- Install CA certificates: Trust the CA certificates in your browser/OS (one-time setup)
- Import to YubiKey: Load your signed certificate onto your YubiKey PIV slot
- Test mTLS: Connect to test servers - successful connections will show your certificate details
- Try different configs: Test various combinations of server certificates, CAs, and key exchange algorithms
What You'll See on Success
When you successfully connect to a test server, you'll see:
- ✅ Verify return code: 0 (ok) - Your certificate was accepted
- 📄 Client certificate subject - Your name from the certificate
- 🔐 Cipher suite details - Which algorithms were negotiated (Classical vs Hybrid PQ)
- 🌐 Protocol version - TLS version used