SSL Certificate Decoder & CSR Generator

Decode X.509 PEM certificates and create CSRs with private keys in your browser. Fast, free, and fully client-side.

Paste X.509 Certificate or CSR

Accepts standard PEM format (-----BEGIN CERTIFICATE----- or -----BEGIN CERTIFICATE REQUEST-----).

How the SSL Certificate Decoder & CSR Generator Works

Decode and inspect SSL/TLS certificates (X.509 PEM/DER) to see the Subject, Issuer, Validity Dates, Serial Number, SANs, and SHA-256 fingerprints. Also features a client-side CSR generator that makes a fresh keypair right on your device.

Usage Example

See when an SSL certificate expires or make a new RSA/ECDSA keypair and CSR.

Frequently Asked Questions

Is it safe to generate a CSR with your private keys?

Yes. Keys are generated in local memory on your device and never sent anywhere.

Browse more

See all security & privacy tools.