Certificate, CSR decoder and key match

Paste a certificate, a certificate signing request (CSR) or a private key. Fill any fields — with two or more we check that they match.

Data is processed in memory and is neither stored nor logged. Only paste a private key you are comfortable showing this site — or none at all; it is only needed to match the certificate.

A certificate is a BEGIN CERTIFICATE block (the first one is decoded for a chain). The key must be unencrypted: PRIVATE KEY, RSA PRIVATE KEY or EC PRIVATE KEY. SAN in a CSR is not shown.

Log in or create an account