CSR Decoder
Structurally decode a pasted PKCS #10 certificate signing request locally, including subject, SPKI, signature identifier, attributes, and parsable extension requests.
This tool handles input and primary processing in your browser and is designed not to send the input to QuickKit’s server.
Avoid live production secrets; use dummy or masked data where possible. Data handling details
CSR fields
How it works
Paste exactly one PEM block labelled CERTIFICATE REQUEST or NEW CERTIFICATE REQUEST. The decoder structurally reads PKCS #10 CertificationRequestInfo: version 0, subject, SubjectPublicKeyInfo, attributes, outer signature algorithm, and signature bit-string length. If the extensionRequest attribute contains exactly one complete Extensions sequence, it exposes the same selected extension values as the certificate decoder: basic constraints, key usage, subject alternative names, extended key usage, and subject key identifier. Other request attributes and extension values remain structural summaries or unparsed. This does not verify the request signature or proof of possession, and it makes no network, CA, hostname, revocation, or issuance decision.