# Lint X.509 certificates against Web PKI rules with zlint before issuance or rollout

> Check certificates and precertificates for Web PKI standards violations before CA issuance, trust-store submission, or deployment.

- Skill: `agentskillexchange/lint-x-509-certificates-against-web-pki-rules-with-zlint-bef` (Agent Skill)
- Install (CLI): `npx skillmds@latest add agentskillexchange/lint-x-509-certificates-against-web-pki-rules-with-zlint-bef`
- Raw SKILL.md: https://api.skillmd.com/api/skills/agentskillexchange/lint-x-509-certificates-against-web-pki-rules-with-zlint-bef/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: agentskillexchange (https://skillmd.com/u/agentskillexchange)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/agentskillexchange/lint-x-509-certificates-against-web-pki-rules-with-zlint-bef

---


# Lint X.509 certificates against Web PKI rules with zlint before issuance or rollout

Check certificates and precertificates for Web PKI standards violations before CA issuance, trust-store submission, or deployment.

## Prerequisites

PEM or DER certificate or precertificate input, zlint CLI or Go library, operator able to interpret lint findings

## Installation

Requirements and caveats from upstream:
- ZLint requires [Go 1.16.x or newer](https://golang.org/doc/install) be

Basic usage or getting-started notes:
- ------------
- installed. The command line setup instructions assume the go command is in
- your $PATH.

- Source: https://github.com/zmap/zlint
- Extracted from upstream docs: https://raw.githubusercontent.com/zmap/zlint/HEAD/README.md

## Documentation

- https://zmap.io

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/lint-x509-certificates-against-web-pki-rules-with-zlint-before-issuance-or-rollout/)