SSL/TLS Certificate & CSR Decoder

Quickly inspect, decode, and troubleshoot PEM-encoded X.509 certificates and CSR signing requests. Check SAN domains, CA issuers, and validity dates.

Sample Certs:
VALID CERTIFICATE -- days remaining
X.509 v3 Certificate

Subject (Issued To) 👤

Common Name (CN)
--
Organization (O)
--
Country (C)
--

Issuer (Certificate Authority) 🏛️

Issuer Common Name (CN)
--
Issuer Org (O)
--
Country (C)
--

Validity Period 📅

Valid From
--
Valid Until
--

Public Key & Signature 🔑

Public Key Algorithm
--
Signature Algorithm
--
Serial Number
--

Subject Alternative Names (SANs / Covered Domains)

0 domains

SHA-256 Fingerprint

--

🔗 Share this page

TelegramWhatsAppX

How to use

  1. Paste your PEM certificate or CSR request (beginning with -----BEGIN CERTIFICATE-----) or select one of the presets.
  2. The parser immediately processes the ASN.1 structure and calculates the SHA-256 cryptographic fingerprint.
  3. Inspect the Common Name, protected SAN hostnames, days remaining until expiry, and copy the full JSON report in one click.

FAQ

What are Subject Alternative Names (SANs)?

Subject Alternative Names (SAN) enable a single SSL/TLS certificate to secure multiple different hostnames, subdomains, and wildcard entries simultaneously.

How does expiration checking work?

The tool reads the NotBefore and NotAfter timestamps from the ASN.1 date headers and calculates the exact remaining active days against current local time.

Are certificate keys uploaded to any remote server?

No. The decoding of ASN.1 bytes and generation of SHA-256 fingerprints are performed exclusively inside your web browser via standard Web Crypto APIs.

🛠️

Related Developer & Office Tools

All tools →

Was this tool useful?

The site is free and has no paywalls. A small tip in TON or a share helps keep it running and add new tools.

Share in Telegram