devvkit / dev

PEM Certificate Inspector

Decode PEM certificates: subject, issuer, SANs, key details, fingerprints.

Input

share this tool

related tools

Hash Generator

Generate MD5, SHA-1, SHA-256, SHA-512 hashes for text and files.

JWT Decoder

Decode and inspect JWT tokens: header, payload, signature, expiration.

CSP Header Builder

Build Content-Security-Policy headers with guided directive and source selection.

Decode PEM certificates and certificate chains locally: subject, issuer, validity, SANs, key type, and SHA-256 fingerprint. Get expiry warnings before your cert silently fails in production.

>[x]Features

-Parses full chains with multiple certificates
-Subject, issuer, and validity dates in your timezone
-DNS and IP SAN extraction
-RSA/EC public key type and bit size
-SHA-256 fingerprint with hex format
-Self-signed detection and chain-root warnings

>>Use Cases

>Verifying an SSL certificate before deploying
>Debugging "certificate not trusted" errors
>Auditing expiry across staging and prod certs
>Confirming SANs after CSR generation

Frequently Asked Questions

>Is my certificate sent to a server??

No. The PEM file is parsed locally in your browser using node-forge. Your certificate never leaves your device.

>What can I inspect??

Subject and issuer details, validity dates, SANs (domains and IPs), public key type and size, SHA-256 fingerprint, and self-signed detection. Chain files with multiple certificates are all parsed.

>Why is the certificate expiring soon warning red??

Certificates expiring within 30 days are flagged so you can renew before downtime: the threshold matches common monitoring practice.