What input does PEM to JWK Converter accept?

Paste a complete supported key or CERTIFICATE block with matching boundaries. It rejects the RSA PUBLIC KEY label and DSA keys.

Does PEM to JWK Converter need extra settings?

The operation provides no extra settings or password field. Arbitrary text and incomplete key material cannot define a supported key.

What does PEM to JWK Converter return?

It returns JWK text for each supported block. The output does not contain all certificate information or prove certificate trust.

PEM to JWK Converter | Tool Factory

Tool workspace

Your input stays in this browser.

Needs input

You can run the tool again after any change.

Input

Your result appears here

Process key or token data with PEM to JWK and explicit format settings. Enter the key material, choose the required format, then review the result.

This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.

PEM to JWK Converter reads supported PEM keys or certificates and writes JSON Web Key data. A certificate contributes only its public key. Plain text without key structure is not a key.

Each supported block produces JWK text. A certificate contributes its public key, not its complete certificate information.

Publish an existing public key in a JWKS document.
Read the n and e or x and y values of a PEM key.
Check a key-format conversion with a public sample.

Sources: RFC 7517: JSON Web Key structure; RFC 7518: parameters for RSA and EC keys

Instructions

Paste a complete supported PEM key or CERTIFICATE block with matching BEGIN and END labels.
Keep the complete Base64 body. The converter rejects the RSA PUBLIC KEY label and does not support DSA keys.
Read the JWK members in the output and add use, alg, or kid yourself if the receiver needs them.

Example

Input: -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEMKBCTNIcKUSDii11ySs3526iDZ8A iTo7Tu6KPAqv7D7gS2XpJFbZiItSs3m9+9Ue6GnvHw/GW2ZZaVtszggXIw== -----END PUBLIC KEY-----

Settings: No settings. The tool has only the Input field. The input is the RFC 7517 Appendix A.1 public sample key.

Result: {"kty":"EC","crv":"P-256","x":"MKBCTNIcKUSDii11ySs3526iDZ8AiTo7Tu6KPAqv7D4","y":"4Etl6SRW2YiLUrN5vfvVHuhp7x8PxltmWWlbbM4IFyM"}

The x and y values match the RFC 7517 Appendix A.1 sample key exactly.

Limits

This tool converts existing key material. It does not generate keys or recover missing parameters.
The interface has no password field for encrypted private keys.
Successful conversion does not prove key ownership or certificate trust.