by BizMaC Tiếng Việt

ToolsCSR & certificate decoder

CSR & certificate decoder

See the names, expiry and issuer inside a CSR or certificate

Paste a BEGIN CERTIFICATE REQUEST or BEGIN CERTIFICATE block, or pick a .csr / .crt / .pem / .cer file. Paste several certificates (a whole CA chain) and each one is decoded.

Everything is processed on your own device and never sent to our server.

Decode a CSR or SSL certificate

Paste a CSR or certificate to see what it says: domain names, organisation, key type, issuer and expiry date. Check a CSR before you order SSL, and a certificate before you install it.

What can it read?

CSRs (BEGIN CERTIFICATE REQUEST) and certificates (BEGIN CERTIFICATE), as PEM text or .cer/.der files. Paste a whole CA chain and each certificate is decoded.

Can I paste a private key here?

No. The tool does not read private keys and warns you if you paste one by mistake. A private key belongs on your server. To check that a key fits a certificate, use the Certificate key matcher or OpenSSL.

What is the SHA-256 fingerprint for?

It is a unique ID for the certificate. Compare it with the one on your server or in the browser to confirm it is the same certificate.