Running on your device · 0 bytes uploaded

X.509 certificate and CSR inspector

Paste a PEM certificate or PKCS#10 CSR — subject, issuer, validity window, SANs, key facts, and extensions, parsed by pkijs in your tab. Nothing fetched, nothing uploaded.

PEM block
-----BEGIN CERTIFICATE----- or -----BEGIN CERTIFICATE REQUEST-----
What this tool does not do
  • No chain validation — that needs trusted root stores and revocation data (OCSP/CRL) this offline page refuses to contact.
  • “Valid now” means the validity window contains your clock — never that anyone trusts the certificate.
  • No private key handling: paste a certificate or CSR, and a CSR’s whole point is that the private key never left your machine.
Nothing in yet

Paste, drop, or type to begin. Everything stays on this device.

paste a certificate or CSR PEM