Certificate tools
Prepare, inspect and convert certificates
These tools work with certificate files, signing requests and private keys supplied to this server. To inspect the certificate presented by a website or mail service, use TLS certificates and protocols.
Generate a CSR
Create an RSA or ECDSA key and certificate signing request with DNS and IP subject alternative names.
Generate CSRDecode a CSR
Inspect the subject fields and public-key size of a certificate signing request. A CSR is a request for a certificate, not an issued certificate.
Decode CSRDecode a certificate
Read an issued certificate’s subject, issuer, SANs, dates and public fingerprints from PEM or DER.
Decode certificateMatch certificate, CSR and key
Compare public-key fingerprints to check whether supplied materials belong together. Matching does not establish issuer trust.
Compare public keysCertificate format converter
Convert PEM and DER, extract a PFX bundle, or build a PFX bundle from a PEM certificate, matching private key and optional CA chain.
Convert certificate formats