Certificate Viewer

Parse and display X.509 certificate details from PEM, Base64, or DER.

Certificate input

What is Certificate Viewer?

An X.509 certificate viewer decodes PEM or DER certificates so you can inspect subjects, SANs, validity windows, fingerprints, and key details without OpenSSL on every machine.

How it works

Paste a certificate (or chain segment). PacketWizard parses the ASN.1 structure and presents fields IT teams need for TLS and identity troubleshooting.

Common issues

  • Wrong certificate in the chain

    Leaf, intermediate, and root certificates look similar in PEM form. Decode each block separately when a chain is incomplete or mis-ordered.

  • Fingerprint mismatch in docs

    SHA-1 and SHA-256 fingerprints differ. Confirm which algorithm a vendor document expects before comparing values.

Frequently asked questions

Can I decode a full chain at once?

Paste one PEM block at a time for clearest results, or split a bundle into leaf and intermediate certificates when diagnosing trust failures.

How does this differ from the TLS inspector?

TLS Inspector connects to a live hostname. Certificate Viewer analyzes a certificate you already have — useful for CSRs, offline bundles, and IdP metadata certs.

Continue with these related PacketWizard tools for adjacent diagnostics.