EnglishEN

SSL Certificate Decoder

Paste one or more certificates, or drop a file, and each one is decoded on the spot.

Your text and files never leave your browser — nothing is sent to a server.

How to use

  1. Paste a certificate into the box, or drop a .crt, .pem, .cer, .der or .p7b file. Chain files with several certificates are fine.
  2. Each certificate shows its subject, issuer, validity period with days remaining, SAN domains, public key and signature algorithm.
  3. With two or more certificates the chain order is checked. If it is wrong, “Fix the order” rewrites it for you.
  4. Type a hostname into “Check a hostname” to see whether the certificate covers it, wildcards included.

FAQ

Can I fetch a certificate just by entering a website address?

No. This tool only decodes certificates you paste, inside your browser. Export the certificate from the padlock icon in your browser’s address bar, or grab it with openssl s_client, and paste it here.

In what order should a certificate chain be?

Put the server certificate first, followed by the intermediate certificate that issued it. Browsers and operating systems already ship the root certificate, so you normally leave it out.

What do DV, OV and EV mean in the policies?

They are validation levels. DV means only domain control was checked, OV means the organization was verified too, and EV means a stricter extended review was done.

Is it safe to paste my certificate here?

Certificates are public by design, and this page decodes them locally without sending anything to a server. You never need to paste a private key here.

Related tools

SSL ConverterConvert PEM, DER, PFX and P7BCertificate Key MatcherDoes this key belong to the cert?CSR DecoderCheck a CSR before you submit itCSR & Certificate GeneratorMake a key, CSR and test certificate

All tools