Certificate Checker is Live
We just shipped a new endpoint that lets you check the status of Apple signing certificates. Upload a .p12, .pfx, or .mobileprovision file and get back everything you need to know about the certificate inside it.
This has been a common ask from folks working with iOS certificate tooling — you have a cert file but you want to know if it is still valid, when it expires, or if Apple pulled it. Now you can check all of that with a single API call.
What You Get Back
The response includes the full certificate breakdown:
- Subject & Issuer — who owns it, who signed it, team ID, org name
- Validity period — exact dates for when the cert was issued and when it expires
- Fingerprints — SHA-256, SHA-1, and MD5 hashes for identification
- OCSP revocation status — checks Apple's servers in real time to tell you if the cert is Signed, Revoked, or Unknown
- Revocation details — if it is revoked, you get the reason and timestamp
- Entitlements — for
.mobileprovisionfiles, you get the full list of active entitlements (push notifications, app groups, sign-in with Apple, etc.) - Certificate type — whether it is an Enterprise or Personal certificate
Endpoint
POST https://developer.nabzclan.vip/api/certificate-checker
Quick Example
Check a P12 file:
curl -X POST https://developer.nabzclan.vip/api/certificate-checker -H "Authorization: Bearer YOUR_API_TOKEN" -H "Accept: application/json" -F "[email protected]" -F "password=mypassword"
Check a mobileprovision file (no password needed):
curl -X POST https://developer.nabzclan.vip/api/certificate-checker -H "Authorization: Bearer YOUR_API_TOKEN" -H "Accept: application/json" -F "[email protected]"
Why We Built This
If you are building anything around iOS app signing — whether that is a signing service, a certificate manager, or just an internal tool to keep track of your team's certs — you probably need to check cert status programmatically at some point. Doing it manually through Apple's portal is slow and doesn't scale. This endpoint gives you the same info in a fraction of a second.
It also pairs well with the other P12 tools we already have. You can verify a password with /api/p12-verify, crack an unknown password with /api/p12-crack, change the password with /api/p12passwordchanger, and now check the cert status with /api/certificate-checker. Full toolkit.
Get Started
Head over to your Dashboard to grab an API token, or check the full documentation for all the details on parameters and response format.