Web Security Headers & CSP Checker
Security Network on demand
Certificate, CSR & Key Inspector
Private · memory onlyInspect X.509 certificates, CSRs, keys, chains, and PKCS#12 containers entirely in-browser.
PEM · DER · CRT/CER · CSR · KEY · P7B/P7C · P12/PFX · 5 MiB limit
Sensitive material never leaves this page
Files, PEM blocks, passwords, and private keys stay in memory only. They are not saved, logged, or sent.
How to use it
- 01
Open PKI material locally
Paste PEM or open a certificate, CSR, key, PKCS#7, or PKCS#12 file up to 5 MiB; passwords remain in memory.
- 02
Inspect and diagnose
Review identity, validity, algorithms, SANs, extensions, CSR signatures, likely chain order, and public-key matches.
- 03
Convert or reproduce
Export metadata, supported PEM/DER/public-key/JWK forms, and copy precise OpenSSL inspection and verification commands.
Frequently asked questions
Are certificates or private keys uploaded?
No. All parsing happens in browser memory. PKI input, passwords, and private-key material are never persisted or sent.
Does a valid chain mean it is trusted?
No. The editor checks the supplied links, dates, and signatures; it does not use your operating system or browser trust store.
Can it open P12 or PFX files?
Yes, for containers supported by the browser-safe parser. Enter the password locally; unsupported legacy algorithms are reported rather than bypassed.
Can I download a private key from the tool?
No. Private material is intentionally hidden and not offered as an export. The tool can derive and export only the corresponding public key.
Related tools
Keep working with other focused browser utilities.