CSR Decoder

Decode a Certificate Signing Request and inspect its contents.

Parses a PEM-encoded PKCS#10 CSR entirely in memory: subject fields, requested SANs, key type and size, signature algorithm and a SHA-256 fingerprint. Warns about weak keys or signatures before you submit the CSR to a Certificate Authority.

Decoded entirely server-side in memory; CSRs contain only public information.

Privacy: CSRs contain no secrets. Input is processed in memory and never stored.

Related tools

Frequently asked questions

Is it safe to paste my CSR here?

Yes. A CSR contains only public information — it never includes your private key. Still, decoding happens in memory and nothing is stored.

Why does it reject certificates?

Certificates are signed by a CA; CSRs are requests. The tool detects when you pasted the wrong object and explains what to look for instead.