Skip to main content
Tool Factory

Keys, Certificates & Tokens

X.509 certificate Parser

Read X.509 certificate input and show its structured details. Enter the key material, choose the required format, then review the result.

Tool workspace

Your input stays in this browser.

Add the required input to continue.

Needs input

You can run the tool again after any change.

Options

Your result appears here

Read X.509 certificate input and show its structured details. Enter the key material, choose the required format, then review the result.

This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.

X.509 certificate Parser performs X.509 certificate field inspection for the supplied key or certificate data. It reports version, serial number, issuer, subject, validity, public-key details, extensions, and signature fields.

It reports version, serial number, issuer, subject, validity, public-key details, extensions, and signature fields. This result runs in the browser for this catalog category. Processing runs in the browser.

Conversion and parsing preserve or display key data; they do not create trust, authorization, or certificate validation.

Instructions

  1. Provide text or data for this tool.
  2. Inspect subject alternative names when reviewing intended hostnames. This applies to X.509 certificate Parser.
  3. Compare validity dates with your verification time and then use a separate chain validator. This applies to X.509 certificate Parser.

Example

Input: Use a disposable PEM certificate and Input format PEM, or select the matching DER Hex format.

Settings: X.509 certificate Parser: Formats include PEM, DER Hex, Base64, and Raw. Supply the certificate, not a CSR or a private-key block.

Result: It reports version, serial number, issuer, subject, validity, public-key details, extensions, and signature fields.

Limits

  • X.509 certificate Parser: Field parsing does not validate the issuer chain or hostname match.
  • X.509 certificate Parser: It does not fetch revocation status or prove that the certificate is trusted by a browser.

Questions

What input does X.509 certificate Parser accept?

X.509 certificate Parser accepts text. X.509 is an ITU-T standard for a public key infrastructure (PKI) and Privilege Management Infrastructure (PMI). It is commonly involved with SSL/TLS security. This operation displays the contents of a certificate in a human readable format, similar to the openssl command line tool. Tags: X509, server hello, handshake

Which settings does X.509 certificate Parser provide?

X.509 certificate Parser provides controls for Input format.

What does X.509 certificate Parser return?

X.509 certificate Parser returns text. X.509 is an ITU-T standard for a public key infrastructure (PKI) and Privilege Management Infrastructure (PMI). It is commonly involved with SSL/TLS security. This operation displays the contents of a certificate in a human readable format, similar to the openssl command line tool. Tags: X509, server hello, handshake