Professional SSL Certificate Provider - DigiCert GeoTrust RapidSSL

Click on the specific tool tab based on your need below and proceed

Create CSR

SSL Checker

Certificate Decoder

CSR Decoder

Key Matcher

SSL Convertor

Fill in the details, click Generate, then paste your customized OpenSSL CSR command into your terminal, or directly create CSR online.

If you want to create CSR for IIS or Exchange, don't use this generator (create a certificate request on the server).

Following characters is restricted. \" ,;@#$%^!*)(+=<>?:{}][

Common Name

Country

State/Province

City

Organization

Key Size RSA 2048 RSA 4096 ECC P-256

HASH Type SHA1 SHA256 SHA384 SHA512

Information:

Common Name (Server Name)

The fully qualified domain name that clients will use to reach your server.

For example, to secure https://www.example.com, your common name must be www.example.com, or *.example.com for a wildcard certificate.

Although less common, you may also enter the public IP address of your server.

congratulations! this is a safe link View certificate details >>

Can not access

The website is NOT Safe!
Start protecting your customer, and data from an SSL certificate.

Start from $15.3/Yr Need a guide?

Server certificate information:

Certificate domain name
more protected domain names
organization
city
start date
expiration date
issuer
unique code
encryption digits
encryption algorithm

Server DNS information:

IP address
server type

certificate chain

You can probably just paste the text of the SSL certificate into the box below and the decoder will check it.
Your certificate should start with
"-----BEGIN CERTIFICATE-----"
with
"-----END CERTIFICATE-----" at the end
If you want to decode the certificate using the OpenSSL command on your own server, use the command under.

OpenSSL> x509 -in example.crt -text -noout

certificate domain name:
Company:
Department:
province:
Country:
start time:
Expiration time:
serial number:
encryption digits:
encryption algorithm:

You just need to paste your CSR into the box below and we will check it.
Your CSR should start with
"-----BEGIN CERTIFICATE REQUEST-----"
with
"-----END CERTIFICATE REQUEST-----"
If you want to parse your CSR through the OpenSSL command line, you can use the following command

openssl req -in example.csr -noout -text

certificate domain name:
Organization:
Department:
City:
province:
Country:
Email:

The certificate key matcher simply compares a hashed public and private key, of certificate, or CSR and tell you if they match. you can check if a Certificate Matching private key, CSR matching certificate to use on your own computer OpenSSL The command is as follows:

openssl pkey -in privateKey.key -pubout -outform pem | sha256sum
openssl x509 -in certificate.crt -pubkey -noout -outform pem | sha256sum
openssl req -in CSR.csr -pubkey -noout -outform pem | sha256sum

Your private key is meant to be kept on the server. When we try to make this process safety When sent to the server by encrypting the key using SSL, for completion safety we It is recommended that you manually check the public key hash of the private key on your server use OpenSSL commands.

Check whether the certificate and private key match Check whether the certificate matches the CSR

Enter your certificate:

Enter private key

Enter CSR

If your server/device requires a certificate format other than Base64-encoded X.509, you can use a third-party tool like OpenSSL to convert the certificate to the appropriate format. OpenSSL is an open source tool. You can find some common openssl commands to convert at the bottom of the page. You can also try our free SSL converter. Your private key is designed to remain on the server. While we try to make this process as secure as possible by encrypting the key using SSL when sending it to the server, for complete security we recommend that you manually convert the SSL certificate on the server using the following OpenSSL command.

Your certificate

Certificate type

Convert certificate to

CA certificate (optional)

private key

Enter PFX password

Enter JKS password

On your own machine, run the OpenSSL command to convert the SSL certificate format, or to extract information.

Common commands are listed below for your reference.

Convert x509 to PEM

openssl x509 -in certificatename.cer -outform PEM -out certificatename.pem

Convert PEM to DER

openssl x509 -outform der -in certificatename.pem -out certificatename.der

Convert DER to PEM

openssl x509 -inform der -in certificatename.der -out certificatename.pem

Convert PEM to P7B

ssltools_content999

openssl crl2pkcs7 -nocrl -certfile certificatename.pem -out certificatename.p7b -certfile CACert.cer

Convert PKCS7 to PEM

openssl pkcs7 -print_certs -in certificatename.p7b -out certificatename.pem

Convert PFX to PEM

openssl pkcs12 -in certificatename.pfx -out certificatename.pem

Convert P7B to PFX

STEP 1: Convert P7B to CER

openssl pkcs7 -print_certs -in certificatename.p7b -out certificatename.cer

Step2: Convert CER and Private Key to PFX

openssl pkcs12 -export -in certificatename.cer -inkey privateKey.key -out certificatename.pfx -certfile cacert.cer

Disclaimer, Limitation of liability, and Indemnity

It is your responsibility to hold the safety and security of the private key, CSR generated and other information presented on this website. BestCert does not save, or store, any information in this regard.

YOU UNDERSTAND AND AGREE THAT YOUR USE OF THE SERVICE IS SOLELY AT YOUR OWN RISK AND THAT THE SERVICE IS PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. BestCert EXPRESSLY DISCLAIMS ALL WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

To the fullest extent permitted by law, BestCert:

- excludes all representations and warranties relating to this website and its contents or tools, including in relation to any inaccuracies or omissions in this website and/or the Company's literature;

- excludes all liability for damages arising out of or in connection with your use of any facility, tools, script provided on this website. This includes, without limitation, direct loss, loss of business or profits (whether or not the loss of such profits was foreseeable, arose in the normal course of things or you have advised this Company of the possibility of such potential loss), damage caused to your computer, computer software, systems, and programs and the data thereon or any other direct or indirect, consequential and incidental damages.

You agree to release, indemnify, defend and hold harmless BestCert and its officers, directors, shareholders, contractors, agents, employees, licensors and assigns from all liabilities, claims, damages, costs and expenses, including reasonable attorneys' fees, made by any third party due to or arising out of or in connection with your breach or alleged of these Terms of Service and your use of the Service. JuliTrust reserves the right, at its own expense, to assume the exclusive defense and control of any matter otherwise subject to indemnification by you, in which event you will assist and cooperate with JuliTrust in asserting any available defenses.

Please complete form below to receive the E-book.

Click on the specific tool tab based on your need below and proceed

Fill in the details, click Generate, then paste your customized OpenSSL CSR command into your terminal, or directly create CSR online.

Information:

Server certificate information:

Server DNS information:

certificate chain

result

result

result

On your own machine, run the OpenSSL command to convert the SSL certificate format, or to extract information.

Convert x509 to PEM

Convert PEM to DER

Convert DER to PEM

Convert PEM to P7B

Convert PKCS7 to PEM

Convert PFX to PEM

Convert P7B to PFX

Domain	Port