Identity collection
Keys, certificates, and token tools
Generate, inspect, convert, sign, verify, and troubleshoot keys, certificates, and tokens.
Cryptographic material needs exact formats and safe handling. Never paste a production private key into a network tool.
Browse the complete topic
This focused collection connects to the broader catalog categories.
45 tools
Working tools in this collection
- ASN.1 hex string ParserRead ASN.1 hex string input and show its structured details. Enter the key material, choose the required format, then review the result.
- CSR ParserRead a PEM certificate signing request: subject, public key, signature algorithm, and Subject Alternative Names, parsed in your browser.
- ECDSA Key Pair GeneratorCreate ECDSA Key Pair from the selected options. Enter the key material, choose the required format, then review the result.
- ECDSA SignerProcess key or token data with ECDSA Sign and explicit format settings. Enter the key material, choose the required format, then review the result.
- ECDSA VerifierProcess key or token data with ECDSA Verify and explicit format settings. Enter the key material, choose the required format, then review the result.
- EVP key DerivationDerive EVP key from the supplied material. Enter the key material, choose the required format, then review the result.
- Flask Session DecoderProcess key or token data with Flask Session Decode and explicit format settings. Enter the key material, choose the required format, then review the result.
- Flask Session SignerProcess key or token data with Flask Session Sign and explicit format settings. Enter the key material, choose the required format, then review the result.
- Flask Session VerifierProcess key or token data with Flask Session Verify and explicit format settings. Enter the key material, choose the required format, then review the result.
- Hex to Object Identifier ConverterDecode OID value bytes into decimal arcs. Inspect continuation bits and base-128 groups with an independent byte calculation.
- Hex to PEM ConverterProcess key or token data with Hex to PEM and explicit format settings. Enter the key material, choose the required format, then review the result.
- HKDF key DerivationDerive HKDF key from the supplied material. Enter the key material, choose the required format, then review the result.
- JWK to PEM ConverterConvert RSA and P-256 EC JSON Web Keys, or a whole JWKS, to PEM. Public keys become SPKI blocks; keys with d become PKCS#8 blocks.
- JWT DecoderProcess key or token data with JWT Decode and explicit format settings. Enter the key material, choose the required format, then review the result.
- JWT SignerProcess key or token data with JWT Sign and explicit format settings. Enter the key material, choose the required format, then review the result.
- JWT VerifierVerify a compact JWT with its secret or public key and inspect decoded claims. Enforce expected algorithm, issuer, and audience separately.
- Key from Certificate for Public ProcessorProcess key or token data with Public Key from Certificate and explicit format settings. Enter the key material, choose the required format, then review the result.
- Key from Private Key for Public ProcessorProcess key or token data with Public Key from Private Key and explicit format settings. Enter the key material, choose the required format, then review the result.
- Key Unwrap for AES ProcessorProcess key or token data with AES Key Unwrap and explicit format settings. Enter the key material, choose the required format, then review the result.
- Key Unwrap for GOST ProcessorProcess key or token data with GOST Key Unwrap and explicit format settings. Enter the key material, choose the required format, then review the result.
- Key Wrap for AES ProcessorProcess key or token data with AES Key Wrap and explicit format settings. Enter the key material, choose the required format, then review the result.
- Key Wrap for GOST ProcessorProcess key or token data with GOST Key Wrap and explicit format settings. Enter the key material, choose the required format, then review the result.
- Object Identifier to Hex ConverterProcess key or token data with Object Identifier to Hex and explicit format settings. Enter the key material, choose the required format, then review the result.
- PBKDF2 key DerivationDerive PBKDF2 key from the supplied material. Enter the key material, choose the required format, then review the result.
- PEM to Hex ConverterDecode PEM blocks to hexadecimal bytes. Inspect top-level DER tags, lengths, value previews, and byte offsets below the result.
- PEM to JWK ConverterProcess key or token data with PEM to JWK and explicit format settings. Enter the key material, choose the required format, then review the result.
- PGP Decrypt and VerifierProcess key or token data with PGP Decrypt and Verify and explicit format settings. Enter the key material, choose the required format, then review the result.
- PGP DecryptionProcess key or token data with PGP Decrypt and explicit format settings. Enter the key material, choose the required format, then review the result.
- PGP Encrypt and SignerProcess key or token data with PGP Encrypt and Sign and explicit format settings. Enter the key material, choose the required format, then review the result.
- PGP EncryptionEncrypt a text message to a recipient's OpenPGP public key. Get an armored PGP MESSAGE block, encrypted in your browser.
- PGP Key Pair GeneratorGenerate a public and private PGP key pair in your browser. Choose the key type and optional password, then select Generate key pair.
- PGP Key ParserRead PGP Key input and show its structured details. Enter the key material, choose the required format, then review the result.
- PGP SignerProcess key or token data with PGP Sign and explicit format settings. Enter the key material, choose the required format, then review the result.
- PGP VerifierProcess key or token data with PGP Verify and explicit format settings. Enter the key material, choose the required format, then review the result.
- RSA DecryptionProcess key or token data with RSA Decrypt and explicit format settings. Enter the key material, choose the required format, then review the result.
- RSA EncryptionEncrypt a short message with an RSA public key using RSA-OAEP, SHA-256 by default. Get Base64 or hex ciphertext, made in your browser.
- RSA Key Pair GeneratorGenerate RSA keys in your browser. Choose the key length and output format, then select Generate key pair.
- RSA SignerProcess key or token data with RSA Sign and explicit format settings. Enter the key material, choose the required format, then review the result.
- RSA VerifierVerify an RSA PKCS#1 v1.5 signature against a message and public key. Supports SHA-256, SHA-384, and SHA-512 with Base64 or hex input.
- Signature Conversion for ECDSA Key ProcessorProcess key or token data with ECDSA Signature Conversion and explicit format settings. Enter the key material, choose the required format, then review the result.
- SM2 DecryptionProcess key or token data with SM2 Decrypt and explicit format settings. Enter the key material, choose the required format, then review the result.
- SM2 EncryptionProcess key or token data with SM2 Encrypt and explicit format settings. Enter the key material, choose the required format, then review the result.
- SSH Host Key ParserDecode an OpenSSH public key line or blob. See the key type and its RSA, ECDSA, or Ed25519 public values, decoded in your browser.
- X.509 certificate ParserRead X.509 certificate input and show its structured details. Enter the key material, choose the required format, then review the result.
- X.509 CRL ParserRead X.509 CRL input and show its structured details. Enter the key material, choose the required format, then review the result.
Direct answers
Questions about this tool family
Can I share a public key or certificate?
Public keys and public certificates are designed for sharing. Private keys, secret tokens, and recovery values must remain confidential.
Does decoding a JWT verify it?
No. Decoding only reads the token structure. Verification also checks the signature, algorithm, key, and relevant claims.
Continue the task
Related collections
Evidence-led guidance