Certificate Decoder

Decode an X.509 certificate or CSR offline — paste a PEM block to see its subject, issuer, validity window, public key, signature algorithm, SANs, key usage, and SHA-256 / SHA-1 fingerprints. Nothing is sent anywhere.

Paste a PEM certificate or CSR above to decode it.