How it works
Complete the job in three clear steps
- Paste a PEM certificate signing request or choose a PEM/DER CSR file.
- Verify its embedded signature and inspect requested names locally.
- Copy or download the JSON report for review.
Private X.509 certificate tool
Certificate Signing Request Decoder
Decode and verify a PEM or DER PKCS#10 certificate signing request, including subject, public key, attributes, requested extensions, and SAN entries.
Free to use CSR bytes are parsed and signature-checked in this browser and are never sent to Lucaden.
Loading tool workspace…
Important
Check the result before relying on it
Scan-test generated codes before printing or distribution. A generated barcode does not register identifier ownership, and decoded external links should be checked before opening.
Practical details
What this Lucaden tool does
Decode and verify a PEM or DER PKCS#10 certificate signing request, including subject, public key, attributes, requested extensions, and SAN entries.
Peculiar X.509 supplies standards-aware ASN.1 parsing. Lucaden adds focused reports and makes the limits of offline inspection explicit.
Included capabilities
- PEM and binary DER input
- CSR signature verification
- Requested SAN inventory
- Public-key fingerprint
Useful for
- Review a CSR before submission
- Confirm subject details
- Inspect requested DNS names
- Validate a test request
Questions
About this tool
What does a verified CSR signature prove?
It proves the request was signed by the private key corresponding to its embedded public key. It does not verify the requester’s identity or authorize issuance.
Does the decoder need a private key?
No. A PKCS#10 request contains the public key needed to verify its own signature. Do not paste private keys into the decoder.
Open-source foundations
Built transparently
Lucaden documents its standards sources, architectural references, and permissive runtime dependencies while keeping this workspace consistent with the Lucaden interface.