Lint X509 Certificates Against Web Pki Rules With Zlint Before Issuance Or Rollout

---
name: "Lint X.509 certificates against Web PKI rules with zlint before issuance or rollout"
slug: "lint-x509-certificates-against-web-pki-rules-with-zlint-before-issuance-or-rollout"
description: "Check certificates and precertificates for Web PKI standards violations before CA issuance, trust-store submission, or deployment."
github_stars: 429
verification: "security_reviewed"
source: "https://github.com/zmap/zlint"
author: "zmap"
publisher_type: "open_source_project"
category: "Security & Verification"
framework: "Multi-Framework"
tool_ecosystem:
  github_repo: "zmap/zlint"
  github_stars: 429
---

# Lint X.509 certificates against Web PKI rules with zlint before issuance or rollout

Check certificates and precertificates for Web PKI standards violations before CA issuance, trust-store submission, or deployment.

## Prerequisites

PEM or DER certificate or precertificate input, zlint CLI or Go library, operator able to interpret lint findings

## Installation

Requirements and caveats from upstream:
- ZLint requires [Go 1.16.x or newer](https://golang.org/doc/install) be

Basic usage or getting-started notes:
- ------------
- installed. The command line setup instructions assume the go command is in
- your $PATH.

- Source: https://github.com/zmap/zlint
- Extracted from upstream docs: https://raw.githubusercontent.com/zmap/zlint/HEAD/README.md

## Documentation

- https://zmap.io

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/lint-x509-certificates-against-web-pki-rules-with-zlint-before-issuance-or-rollout/)