X.509 TLS/SSL certificate inspector — parse fields and SANs, calculate a SHA-256 fingerprint, and check hostname and time validity without trust or revocation claims.

PKCS#10 certificate signing request (CSR) inspector — parse requested identities and public-key metadata, calculate a fingerprint, and check the included self-signature without CA approval claims.

File type and MIME/media type inspector — identify bounded content by magic bytes and return SHA-256, size, and extension consistency without unpacking, malware scanning, or safety claims.

JSON Web Key (JWK) inspector — validate bounded public RSA, EC, or Ed25519 keys and calculate RFC 7638 SHA-256 thumbprints without ownership or trust claims.

JSON Web Token (JWT) decoder — parse an unverified compact JWS header and claims and evaluate advisory NumericDate times without signature verification or URL fetching.