How to use
- Paste a PEM CSR or choose a PEM / DER request file.
- Run the tool and review the results and status messages.
- Copy the values you need or download the result for reuse.
CSR Decoder
Decode PKCS#10 requests, inspect subject and SANs, and check the CSR signature locally.
Processing runs in your browser. Your input and files are not uploaded to DevToolsy.
How it works
A CSR is a certificate request, not an issued certificate. Signature verification does not establish identity or trust.
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
{
"subject": "CN=example.test, O=DevToolsy Example, C=US",
"san": [
{
"type": "dns",
"value": "example.test"
},
{
"type": "dns",
"value": "*.example.test"
},
{
"type": "ip",
"value": "192.0.2.1"
}
],
"signature": "valid"
}Decode PKCS#10 requests, inspect subject and SANs, and check the CSR signature locally.
What to expect
Verification is unavailable for this algorithm in this browser.
Output
Copy the values you need or download the result for reuse.
One PKCS#10 PEM or DER request, up to 1 MiB. Certificates, private keys and other containers are not accepted.
Frequently asked questions
Does a valid CSR signature mean the request is trusted?
A CSR is a certificate request, not an issued certificate. Signature verification does not establish identity or trust.
Why might signature verification be unavailable?
Verification is unavailable for this algorithm in this browser. A CSR is a certificate request, not an issued certificate. Signature verification does not establish identity or trust.
Is the input uploaded?
Processing runs in your browser. Your input and files are not uploaded to DevToolsy.
What are the processing limits?
One PKCS#10 PEM or DER request, up to 1 MiB. Certificates, private keys and other containers are not accepted.
Can I keep the result?
Copy the values you need or download the result for reuse.