Certificate smart cards
Inspect certificates, public keys, key-container metadata and accessible files through the Windows smart-card minidriver.
Open the certificate viewer THE SMART-CARD WORKBENCH
Small card.
Deep grooves.
Inspect EMV directories, certificates, public PIV objects, DESFire metadata and chip details. Save and compare captures in the Windows app, or decode supplied data with the browser tools.
Windows · PC/SC readers
FIG. 1 / UNDER THE SURFACE 
cardgroove↗
SMART CARD
EXPLORER / 1)))
EXPLORER / 1)))
↳
ANSWER TO RESET3B 80 01 81 T=1
✓READ. DECODE. UNDERSTAND.✳
LESS GUESSWORK.
MORE CONTEXT.CertificatesPIV identityDESFire badgesEMVChip & Java CardKeycard
MORE CONTEXT.CertificatesPIV identityDESFire badgesEMVChip & Java CardKeycard
CHOOSE YOUR CARDOne workbench.
One workbench.
More kinds of card.
Reader access on Windows. Local decoding in your browser.
PIV identity cards
Read public identity objects, discovery information, key history and certificate slots. Protected objects keep their access-status information.
Decode a PIV objectDESFire access badges
Inspect card version, visible application IDs, file IDs and accessible file settings without authentication. This mode does not read file contents or provision badges.
Decode DESFire file settingsEMV payment cards
Read PSE and PPSE payment directories and inspect application identifiers, labels and selection priorities.
Decode a payment directoryChip & Java Card
Explore ATR, CPLC manufacturing fields and accessible application registries. Inspect captured APDU commands and responses.
Decode an APDU commandKeycard crypto wallets
Use the separate desktop wallet panel for inspection, pairing, public-key derivation and explicitly confirmed digest signing on compatible Keycards.
Read the Keycard guideAvailable fields depend on the card, reader and provider. Certificate inspection has been tested with cryptoCertum3.6; PIV, DESFire and Keycard still need physical-card qualification. See supported scope and compatibility →
1 / THE TOOLKITCard details,
Card details,
decoded.
/1
ATR decoding
Start with the handshake.
Decode protocols, interfaces, and historical bytes.
3B 80 01 81T=1 · valid checksum/2
CPLC manufacturing data
Trace its story.
View chip, OS, manufacturing dates, and serial fields.
9F 7F 2A18 manufacturing fields/3
Application inventory
See what’s on board.
List applications from supported registries and public directories.
4F · 9F70 · C5AID · life cycle · privileges2 / FOLLOW THE BYTES
Try the inspector.
Select a field to highlight its bytes.
cardgroove / inspector SYNTHETIC SAMPLEAnswer to reset4 BYTES
FIELDDECODED VALUE
The card’s first hello. Select a field to inspect its encoding.
Under the surfaceHEX / ASCII
OFFSET00 01 02 03 04 05 06 07
SELECTED FIELDBYTE 0
TS - convention
Direct convention
3B Browser-local · sample data onlySelect any field to follow its bytes.
Physical readers require the Windows app.
Connect a reader
Track card insertion and removal automatically.
Choose a read mode
Press Ctrl+O and choose EMV, Auth, Chip, Certificate or DESFire. CardGroove remembers your selection.
Inspect and save
Review decoded fields and export bytes. Save captures as .cgs or YAML, reopen them offline, and compare snapshots.