Decodificador de Certificados X.509

Certificate

Or drop a certificate file o elige un archivo.pem, .crt, .cer · hasta 2.0 MB. Se lee en tu navegador, nunca se envía.

Or drop a certificate file o elige un archivo.der, .cer, .crt · hasta 2.0 MB. Se lee en tu navegador, nunca se envía.

This decodes certificate information only. It does not validate trust, hostname, DNS, revocation, or certificate chains.

Resultados

This decodes certificate information only. It does not validate trust, hostname, DNS, revocation, or certificate chains.

How to read an X.509 certificate

Paste or load a PEM/DER certificate to inspect its subject, issuer, validity period, public key, fingerprint, and common extensions.

Certificate information

The decoder reads fields encoded inside the certificate itself, such as Subject, Issuer, serial number, validity dates, Subject Alternative Names, Key Usage, and Basic Constraints.

Trust is different

A certificate can be decoded without proving that it is trusted for a domain. Trust requires hostname context, a certificate chain, revocation information, and platform trust roots, none of which this local decoder verifies.

Common uses

Check when a certificate expires.
Inspect SAN entries before configuring TLS.
Compare issuer and public key details during debugging.

Processing notes

Certificate parsing and fingerprinting run in your browser; the certificate is never uploaded.

Preguntas frecuentes

Does this prove a certificate is trusted?

No. It decodes certificate data but does not validate trust, hostname, DNS, revocation, or certificate chains.

Can I load DER certificates?

Yes, DER files can be loaded from your device and parsed locally when they are not malformed.

What is the SHA-256 fingerprint?

It is a digest of the certificate bytes, useful for comparing certificates without sharing the full certificate.

Herramientas relacionadas

Disponible