SSL Certificate Decoder
Paste a PEM-encoded SSL/TLS certificate to inspect issuer, subject, SANs, validity period, public key, and signature algorithm. Everything runs in your browser — no certificate is uploaded.
How to use the ssl certificate decoder
Paste a PEM-encoded X.509 certificate (begins with -----BEGIN CERTIFICATE-----). Click Decode to view the subject, issuer, validity period, SAN list, and signature algorithm.
Formula & explanation
Powered by node-forge running entirely in your browser. We never upload the certificate.
Examples
Paste a server cert from openssl s_client, a CA bundle item, or a self-signed development cert.
Frequently asked questions
- Is the private key inspected?
- No — public certificates only. Don't paste private keys into any web tool.
- Why does the sample fail?
- It's a placeholder; replace with a real cert. We don't ship a working sample to avoid giving the impression of a 'real' identity.
Related network & security tools
- Password Strength CheckerEstimate password entropy and time-to-crack using the zxcvbn algorithm. Shows realistic crack time estimates under different attack scenarios — far more accurate than simple strength bars.
- Hash GeneratorGenerate MD5, SHA-1, SHA-256, and SHA-512 hashes of any string. Useful for checksums, data integrity verification, and understanding hash output lengths for each algorithm.
- IP/CIDR Subnet CalculatorCompute subnet range, network mask, broadcast address, and usable host count for any IPv4 CIDR block. Also shows all subnets when you split a block — useful for network planning.