tools/encode/ssl cert inspector
// encodenew

ssl cert inspector

parse pem certificates — subject, issuer, validity, fingerprint

// ssl cert inspector   // browser · free
// certificate info appears here

// related tools

base64encode and decode, text or fileurl encoderpercent-encode and decode url componentshash generatorsha-1, sha-256, sha-384, sha-512 via web crypto

// about this tool

The SSL certificate inspector parses PEM-encoded X.509 certificates directly in your browser. Paste a certificate (the block between -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----) and instantly see the subject, issuer, validity period, Subject Alternative Names (SANs), signature algorithm, and SHA-256 fingerprint — no extension or server needed.

// when to use

  • Quickly check the expiry date and issuer of a certificate you copied from a server
  • Verify the SANs on a multi-domain or wildcard certificate before deploying
  • Compare the fingerprint of a certificate from two different sources to confirm they match
  • Debug certificate chain issues by inspecting each PEM block in the chain

// faq

What format does this accept?
PEM-encoded X.509 certificates — the text block starting with -----BEGIN CERTIFICATE-----. You can export a certificate from most browsers (Developer Tools → Security → View certificate → Export) or extract it with openssl s_client -connect host:443 -showcerts.
Is the certificate sent to your server?
No. The PEM data is parsed entirely in your browser using the Web Crypto API and custom ASN.1/DER parsing. Nothing is sent over the network.
// history
Pro Cloud Sync — upgrade
no operations yet