📜

把证书文件拖到这里，或点击选择文件Drop certificate files here, or click to choose files

支持 .pem / .crt / .cer / .der（可含多张证书的证书链文件）/ .pfx / .p12（会提示输入密码）
一次可以多选几个文件一起导入（比如 ca.crt + server.crt + client.crt + client.key 一起选），导入后会互相核对
也可以顺带拖入 .key 私钥文件，工具会帮你核对私钥与证书是否配对Supports .pem / .crt / .cer / .der (including chain files with several certificates) / .pfx / .p12 (you will be asked for the password)
Select several files at once (e.g. ca.crt + server.crt + client.crt + client.key) and they are cross-checked automatically
You can also drop in .key private key files — the tool checks whether each key matches a certificate

这个文件是加密的证书包（PFX/P12）This file is an encrypted certificate bundle (PFX/P12)

已载入的证书Loaded certificates

这个工具能看什么What this tool shows you

Drop any X.509 certificate — a server certificate, a CA certificate, or a client certificate from a .pem, .crt, .cer, .der or .pfx/.p12 file — and CertView decodes every field locally in your browser: subject and issuer distinguished names, serial number, signature algorithm, validity dates with days remaining, subject alternative names (DNS names and IP addresses), public key details (RSA size and exponent, or EC curve), key usage and extended key usage, basic constraints, authority and subject key identifiers, AIA and CRL distribution points, plus SHA-256 and SHA-1 fingerprints. Load a CA certificate together with a leaf certificate and the tool verifies the signature chain; load a .key file as well and it checks whether the private key matches the certificate. Nothing is uploaded — parsing happens entirely on your device, which makes it safe for internal and test certificates.

Need a certificate instead? Use the free certificate generator to make a custom CA, server and client certificate set in your browser. New to certificates? Read our guides: how to check a certificate's details, SAN and expiry, how to check if a private key matches a certificate, and PEM vs DER vs CRT vs PFX formats explained.