← All Tools

PEM / DER Inspector

Parse PEM-armored blocks (certificates, keys, CSRs, CRLs) into DER bytes. Shows block labels, byte lengths, SHA-1 and SHA-256 fingerprints, and a hex preview. No parsing of inner ASN.1 structures — this is for quick identification, not cryptographic verification.

About PEM

PEM (Privacy-Enhanced Mail, RFC 7468) wraps binary DER data in base64 between -----BEGIN <LABEL>----- and -----END <LABEL>----- markers. Common labels: CERTIFICATE, PRIVATE KEY, RSA PRIVATE KEY, EC PRIVATE KEY, PUBLIC KEY, CERTIFICATE REQUEST, X509 CRL, DH PARAMETERS, and ENCRYPTED PRIVATE KEY.

Multiple blocks can be concatenated (e.g. a cert chain). Fingerprints are computed over the raw DER bytes — for certificates this matches openssl x509 -fingerprint.

Copied!