Repository navigation
Standalone, read-only Windows certificate-cache investigation tool. No Python or runtime installation required.
Download and extract the ZIP for x64 (x86_64-pc-windows-msvc, most Windows PCs) or ARM64 (aarch64-pc-windows-msvc, Windows on ARM). Targets Windows 10/11 and Server 2016+; no 32-bit builds.
Start with .\cryptnet-dump.exe. Add --ocsp-only --resolve for candidate names, or --json --output evidence.jsonl for full evidence. Resolution sends serials to ctlogs.dev, with crt.sh as fallback. Names are unverified leads, not proof of connections.
Each ZIP contains the executable, documentation, and an executable SHA-256 checksum. Adjacent .sha256 files verify the ZIP downloads. More cowbell included.
Full Changelog: https://github.com/truekonrads/ocspcryptneturlcache/commits/v1.0.0