SCEP Endpoint Tester
Probe a SCEP/NDES endpoint's GetCACaps and see whether it advertises the capabilities modern clients need (SHA-256, AES, POST).
⚠ not fully client-side — this tool sends your input through our server (disclosed on this page)⚠ This tool asks our server to send two GET requests (GetCACaps, GetCACert) to the URL you enter — browsers can't reach SCEP endpoints directly. Neither the URL nor the response is stored; the only thing kept is an in-memory rate-limit counter per IP.
Frequently asked
Why does this tool use a server?
Browsers can't call arbitrary SCEP endpoints (CORS). This is the one tool where our server makes the request — we probe the URL you enter with two GET requests and relay the answer. Neither the URL nor the response is stored; the only thing kept is an in-memory rate-limit counter per IP. Everything else on this site stays in your browser.