CSR Decoder
Decode a Certificate Signing Request and inspect its contents.
Parses a PEM-encoded PKCS#10 CSR entirely in memory: subject fields, requested SANs, key type and size, signature algorithm and a SHA-256 fingerprint. Warns about weak keys or signatures before you submit the CSR to a Certificate Authority.
Decoded entirely server-side in memory; CSRs contain only public information.
Privacy: CSRs contain no secrets. Input is processed in memory and never stored.
Related tools
Frequently asked questions
Is it safe to paste my CSR here?
Yes. A CSR contains only public information — it never includes your private key. Still, decoding happens in memory and nothing is stored.
Why does it reject certificates?
Certificates are signed by a CA; CSRs are requests. The tool detects when you pasted the wrong object and explains what to look for instead.