HTML Makefile CSS JavaScript Shell Ruby Nginx
Latest commit dc3eb1f Jul 29, 2017 @lgarron lgarron Add missing comma.

Visit for a list of test subdomains, including:

Server Setup

Stock Ubuntu VM, DNS A records for and * pointing to the VM.

Testing and development

Your user should be part of the docker group or otherwise permitted to access Docker.

sudo apt-get update ; sudo apt-get install
git clone && cd

make list-hosts # list of domains to copy into /etc/hosts
make test

Now you can visit badssl.test in your browser. The root CA is at certs/sets/test/gen/crt/ca-root.crt. If you'd like to preserve it even when you run make clean, run:

cd certs/sets/test
mkdir -p pregen/crt pregen/key
cp gen/crt/ca-root.crt pregen/crt/ca-root.crt
cp gen/key/ca-root.key pregen/key/ca-root.key

Acknowledgments is hosted on Google Cloud infrastructure and co-maintained by:

Several public certificates required special issuance processes. Most certificates were graciously issued for free, thanks to help from:

Various subdomains and test pages are also implemented by external contributors.

Disclaimer is meant for manual testing of security UI in web clients.

Most subdomains are likely to have stable functionality, but anything could change without notice. If you would like a documented guarantee for a particular use case, please file an issue. (Alternatively, you could make a fork and host your own copy.) is not an official Google product. It is offered "AS-IS" and without any warranties.