Are my private keys and certificates safe to use here?
Yes. Everything runs in your browser using its built-in crypto, with no requests to a server. Your keys, certificates, tokens and text aren't uploaded, stored or logged.
Which certificate formats can I convert between?
PEM to DER and DER to PEM, including files with several blocks, like a certificate and its intermediates. PKCS#12 files (.pfx, .p12) aren't supported. Use OpenSSL or your system's certificate manager for those.
What hash algorithms does the hash generator support?
MD5, SHA-1, SHA-256, SHA-384 and SHA-512, all from one pass, so there's nothing to choose. Each digest has its own copy button, and a compare field checks it against a published checksum.
Can I use this to debug or validate JWT tokens?
Yes. JWT Sign creates a token from your claims and a shared secret with HS256, HS384 or HS512. JWT Verify reads the header and payload without a secret and reports the signature and expiry separately, because a token with a valid signature can still be expired.
What does the CSR Generator produce?
A PEM signing request and its private key, as two separate downloads. Keys are RSA 2048, 3072 or 4096, or ECDSA P-256 or P-384, and you can add alternative names next to the common name.
Can I encrypt something here?
Not on this page. Use the AES encryptor at /tools/security/aes-encryptor for files and text. This page covers converting, inspecting, encoding, hashing, signing and generating.
