← All tools
CYBER SECURITY

Certificate Converter & Inspector

Convert X.509 certificates between PEM and DER, inspect certificate details, and extract certificates from PEM-encoded bundles. Files are processed locally in your browser.

1. Add certificate

Supported: PEM or DER X.509 certificates, PEM certificate chains, and PEM-encoded PKCS#7 bundles containing certificate blocks.

Add a certificate to begin. The tool does not upload files.

2. Certificate details

Certificate metadata will appear here after processing.

Privacy and scope: Processing runs in this page; certificate contents are not sent to an Ingenix server. Do not paste private keys or upload PFX/P12 files. This tool handles public X.509 certificates only and does not validate trust against a root CA or verify revocation status.

Supported formats and limitations

New to certificates? Read the X.509 Certificate Fields & Formats guide for a detailed explanation of certificate fields, extensions, PEM/DER and PKCS#7/PKCS#12 formats.

  • PEM: Base64-encoded certificate data with BEGIN/END markers. Common extensions include .pem, .crt and .cer.
  • DER: Binary ASN.1 encoding of a single X.509 certificate. Convert between DER and PEM without changing the certificate itself.
  • Certificate chains: PEM files containing multiple CERTIFICATE blocks are detected and can be exported as a PEM bundle. DER output requires exactly one certificate.
  • PKCS#7 (.p7b / .p7c): PEM-encoded bundles with embedded CERTIFICATE blocks are supported. Binary PKCS#7 extraction and PKCS#12/PFX private-key bundles are not supported in this version.
  • Extensions are not the format: .cer and .crt can contain either PEM or DER. The tool detects encoding from the file content.