← ← All Tools
中文

📜 PEM Certificate Decoder

Decode a single PEM X.509 certificate locally and inspect subject, issuer, validity, extensions, and the SHA-256 fingerprint.

Scope Notes

  • Only one PEM `CERTIFICATE` block is supported. `CSR`, `PRIVATE KEY`, `PKCS7/PKCS12`, and certificate bundles are out of scope.
  • Everything is decoded locally in your browser. No certificate content is uploaded.
  • Decoded fields only reflect what this version can safely expand. They are not trust, installation, hostname, or compliance conclusions.
State
Initial

Paste one PEM CERTIFICATE block to begin.

More tools you might find useful.

🔐
AES Encrypt/Decrypt
Client-side AES encryption and decryption with GCM, CBC, and CTR modes, PBKDF2 passphrase derivation and raw key input — keys are not uploaded by the tool
🔐
BCrypt Hash Generator & Verifier
Client-side BCrypt password hash toolkit with three tabs: Generate (cost 4-15, $2a/$2b/$2y version selector, 3 output formats), Verify (auto-parses cost/version with OWASP guidance), and Inspect (dissect any bcrypt hash into prefix/cost/salt/hash). Real-time 72-byte truncation warning, progress bar, cancel button, and mobile-friendly chip controls.
🔐
DES / 3DES Encrypt & Decrypt
Client-side DES and 3DES (2-key/3-key) encryption & decryption with zero dependencies. Supports five modes (ECB/CBC/CFB/OFB/CTR) and five padding schemes (PKCS#7/Zero/ANSI X.923/ISO 10126/No Padding). Independent encoding switchers for Key/IV/Input/Output (Hex/UTF-8/Base64), real-time byte-length hints, built-in NIST test vectors, persistent deprecation banner (DES 2005, 3DES Jan 2024), and K1/K2/K3 key visualization. For education and legacy interop only — keys and plaintext are not uploaded by the tool.
#️⃣
Hash Generator
MD5 & SHA Hash Calculator
🔐
HMAC Calculator
Client-side HMAC calculator with SHA-1/256/384/512, UTF-8/Hex/Base64 key formats, text & file input, and HMAC verification

Free online PEM certificate decoder for locally inspecting a single X.509 CERTIFICATE block in your browser. View the version, serial number, issuer, subject, validity, SAN, key usage, EKU, SKI, AKI, and SHA-256 fingerprint without uploading anything. This tool decodes common fields only and does not perform trust validation, hostname checks, revocation checks, or compliance guidance.