X.509 certificate
Decode PEM/DER certificates into issuer, subject, SANs, fingerprints and validity windows.
Also known as: PEM decoder, SSL certificate decoder.
100% offline · macOS, Windows & Linux · free for personal use

// overview
What it does
X.509 certificate is one of 55 tools in Hexkit, a desktop developer toolbox that runs entirely on your own machine. Decode PEM/DER certificates into issuer, subject, SANs, fingerprints and validity windows.
Because Hexkit is a native app rather than a web page, anything you paste into the x.509 certificate stays local — there are no uploads, no accounts and no telemetry. You can decode tokens and inspect encoded data even with the network turned off, which makes it safe for tokens, keys and production data.
// steps
How to use X.509 certificate
- 1
Open Hexkit and select "X.509 certificate", or press the command-palette key and start typing its name.
- 2
Paste the text or token you want to encode or decode. Decode PEM/DER certificates into issuer, subject, SANs, fingerprints and validity windows.
- 3
Read or copy the result. Everything is computed locally by Hexkit's Rust core, so nothing is ever uploaded.
Tip: the command palette opens any tool in one keystroke.
// faq
Frequently asked questions
- Is X.509 certificate free?
- Yes. X.509 certificate is part of Hexkit, which is free for personal and non-commercial use on macOS, Windows and Linux.
- Does X.509 certificate work offline?
- Completely. Hexkit runs every tool locally with no network access, so X.509 certificate works on a plane or an air-gapped machine.
- Is my data uploaded anywhere?
- No. Hexkit makes no network calls and has no telemetry — whatever you paste stays on your computer.
// keep going
Related tools
Use X.509 certificate without sending your data anywhere.
X.509 certificate ships inside Hexkit — a free, offline developer toolbox for macOS, Windows and Linux. No account, no uploads.