Skip to main content

Keys, Certificates & Tokens

Hex to Object Identifier Converter

Decode OID value bytes into decimal arcs. Inspect continuation bits and base-128 groups with an independent byte calculation.

Tool workspace

Your input stays in this browser.

The tool is ready to run.

Ready

Run the tool when your input is ready.

Paste Hex byte pairs without the ASN.1 tag or length. Spaces can separate complete pairs.

Ready for a result

Decode OID value bytes into decimal arcs. Inspect continuation bits and base-128 groups with an independent byte calculation.

This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.

The decoder reads base-128 subidentifiers. The first subidentifier combines the first two decimal arcs.

The result contains dotted decimal arcs and a byte table with continuation bits and running calculations.

  • Read an algorithm identifier after extracting its value bytes from a certificate dump.

Sources: ITU X.690 section 8.19: object identifier encoding

Decode object identifier content bytes

Input: 88 37 03

Settings: OID content octets only; exclude tag 06 and length 03.

Result: 2.999.3

88 37 encodes the combined value 1079. Subtracting 80 gives the second arc, 999; 03 supplies the final arc.

Distinguish OID content from an ASN.1 wrapper

  1. Extract OBJECT IDENTIFIER content bytes, excluding the tag and length.
  2. Paste complete Hex pairs, with optional whitespace.
  3. Compare the decoded arcs with the identifier required by your protocol.
  • A complete DER element can resemble valid content bytes and produce the wrong identifier.
  • The decoder rejects unfinished and nonminimal base-128 groups.
  • The converter does not resolve registry names or establish organizational trust.