Certificate & CSR Decoder
- Certificate
- Certificate signing request (CSR)
- Item {n}
- Subject
- Issuer
- Common name
- Validity
- Valid from
- Valid until
- Status
- Serial number
- Version
- Valid, {d} days left
- Expired {d} days ago
- Not valid yet (starts in {d} days)
- Self-signed
- Public key
- Algorithm
- Key size
- {n} bits
- Curve
- Exponent
- Signature algorithm
- Subject alternative names
- Basic constraints
- CA: yes
- CA: no
- path length {n}
- Key usage
- Extended key usage
- Subject key ID
- Authority key ID
- Authority information access
- CRL distribution points
- Certificate policies
- Certificate transparency (SCT)
- present
- Fingerprints
- SHA-1
- SHA-256
- Warnings
- The signature uses SHA-1 or MD5, which is no longer trusted.
- RSA keys under 2048 bits are considered weak.
- This certificate has expired.
- Validity is longer than 398 days; browsers reject new public TLS certificates with such a long life.
- No subject alternative names. Browsers require SANs and ignore the common name.
- Could not read this as a PEM or base64 certificate or CSR.
- Paste a certificate or CSR to decode it.
- This looks like a PRIVATE key. Never paste private keys into any website.
- Extensions requested
- Copy
- Load example
About this tool
Paste an X.509 certificate or a certificate signing request (PEM, starting with -----BEGIN CERTIFICATE-----) to see who it is for, who issued it, when it expires, its key, extensions and fingerprints. You can paste a whole chain. Decoding happens in your browser, nothing is sent to a server. Never paste a private key.
Frequently asked questions
What is Certificate & CSR Decoder?
Decode an X.509 certificate or CSR: subject, issuer, validity, SANs, key and fingerprints. It is one of the Security & Crypto tools on MyCodeTips.
How do I use Certificate & CSR Decoder?
Open the tool, enter or paste your input, and the result appears right away. Use the Copy button to copy it.
Is Certificate & CSR Decoder free to use?
Yes. It is free to use and does not need an account.
Is my data safe with Certificate & CSR Decoder?
Yes. It runs entirely in your browser, so what you enter is never uploaded to our servers.
Can I share my result?
Yes. Use the share buttons below the tool to post a link or copy a link to the tool page.
Which tools are related to Certificate & CSR Decoder?
SSL Certificate Expiry Checker, SSH Key Fingerprint, Hash Generator (MD5, SHA-256).
- Hash Generator (MD5, SHA-256)
- SSL Certificate Expiry Checker
- Send output to…
- Nothing to send yet.
- Received output from {tool}
- Undo
- Dismiss