X.509 Certificate Decoder

Paste a PEM-encoded certificate to inspect SANs, expiry, issuer chain, and more. Everything runs locally in your browser.

Tip: openssl s_client -connect host:443 < /dev/null 2>/dev/null | openssl x509