Keys, Certificates & Tokens
X.509 CRL Parser
Read X.509 CRL input and show its structured details. Enter the key material, choose the required format, then review the result.
This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.
X.509 CRL Parser performs certificate revocation list inspection for the supplied key or certificate data. It reports CRL metadata, extensions, signature fields, and listed revoked certificate entries.
It reports CRL metadata, extensions, signature fields, and listed revoked certificate entries. This result runs in the browser for this catalog category. Processing runs in the browser.
Conversion and parsing preserve or display key data; they do not create trust, authorization, or certificate validation.
Instructions
- Provide text or data for this tool.
- Compare a target certificate serial number with the listed entries. This applies to X.509 CRL Parser.
- Check issuer and update dates before interpreting the list. This applies to X.509 CRL Parser.
Example
Input: Use a public CRL fixture and select its format: PEM, DER Hex, Base64, or Raw.
Settings: X.509 CRL Parser: Input format must match the supplied CRL representation. Keep the complete signed list, including its issuer and update fields.
Result: It reports CRL metadata, extensions, signature fields, and listed revoked certificate entries.
Limits
- X.509 CRL Parser: This parser does not retrieve a current CRL or perform an OCSP request.
- X.509 CRL Parser: Absence from one supplied list does not prove that a certificate is currently valid.