Public-key

Certificate chain builder

Build a real three-link chain of trust — root, intermediate, and leaf — each signed with real ECDSA, then tamper with the leaf and watch verification catch it.

What's happening under the hood →·Read the X.509 certificates & the PKI trust hierarchy module for the full explanation →

1. Generate a three-link chain

Real ECDSA P-256 key pairs for a root CA, an intermediate CA, and a leaf certificate — each parent signs its child's identity + public key, exactly like the chain of trust module describes.