Wingetlywingetly
← All apps
Y

y509

by kanywstv1.11.0

Last updated

A TUI for X.509 certificate chains

Visit homepage

Install with winget

$ winget install --id kanywst.y509 --exact --version 1.11.0

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

From $49/month. No credit card required.

Not on Intune? Pckgr RMM deploys and patches apps like this one on any Windows fleet. Free for up to 5 devices.

About

y509 opens an X.509 certificate chain in a terminal UI. The chain can come from a PEM or DER file, from standard input, or from a live server, including one behind STARTTLS.

It answers two questions separately: whether the chain verifies against the system trust store, and whether the server actually served it correctly. The second one catches a missing intermediate, a redundant root, certificates sent out of order, and duplicates. That is the chain which passes in a browser and fails in curl, Go and Java, because only browsers chase the AIA URL to fetch a certificate the server never sent.

y509 validate exits non-zero on anything a TLS client would reject, and --json reports trust and presentation as separate fields so a script can gate on either.

Installers · v1.11.0

ArchitectureTypeScopeInstallDownload
x64ZIP
archive
-Direct
arm64ZIP
archive
-Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

No known CVEs for y509.

Coverage is best-effort and depends on a winget package mapping to an NVD CPE entry. Absence here is not a guarantee of safety.

Related apps

  • R
    rtkrtk-ai
    rtk-ai.rtkv1.1.0

    CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies

  • C
    Codex CLIOpenAI, Inc.
    OpenAI.Codexv0.161.0

    Codex CLI is an open‑source local coding agent that runs in your terminal, letting you write, edit, and understand code without leaving the command line.

  • GitHub CLIGitHub, Inc.
    GitHub.cliv2.103.3

    Take GitHub to the command line

  • Office Deployment ToolMicrosoft Corporation
    Microsoft.OfficeDeploymentToolv16.0.20430.20146

    A command-line tool that you can use to download and deploy Click-to-Run versions of Office, such as Microsoft 365 Apps for enterprise, to your client computers.

  • SpicetifySpicetify
    Spicetify.Spicetifyv2.45.3

    A command-line tool to customize the official Spotify client.

  • R
    RipGrep MSVCBurntSushi
    BurntSushi.ripgrep.MSVCv15.2.0

    ripgrep recursively searches directories for a regex pattern while respecting your gitignore

More from kanywst or browse certificate, cli, go.

Frequently asked questions

How do I install y509 on Windows?
Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id kanywst.y509 --exact --version 1.11.0. winget downloads the installer from kanywst and runs it. Requires Windows 10 (1809+) or Windows 11.
How do I install y509 silently for unattended deployment?
Add --silent and accept the agreements upfront: winget install --id kanywst.y509 --exact 1.11.0 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.
How do I uninstall y509 via winget?
Run: winget uninstall --id kanywst.y509 --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from y509's Apps & Features entry.
Is y509 free?
y509 is distributed under Apache-2.0. Refer to the publisher (https://github.com/kanywst/y509) for the full license terms - Wingetly itself does not charge for installation.
Does y509 work on Windows 10?
Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls y509 directly from the publisher.
How do I keep y509 up to date?
Run winget upgrade --id kanywst.y509 --exact, or winget upgrade --all to update everything winget tracks. We index 1 version of y509 from microsoft/winget-pkgs.