Public-Key Fingerprint
Compute a SHA-256, SHA-384, or SHA-512 Web Crypto fingerprint of a pasted public key's DER SubjectPublicKeyInfo.
This tool handles input and primary processing in your browser and is designed not to send the input to QuickKit’s server.
Avoid live production secrets; use dummy or masked data where possible. Data handling details
SPKI fingerprint
How it works
Paste exactly one PEM block labelled PUBLIC KEY, CERTIFICATE, CERTIFICATE REQUEST, or NEW CERTIFICATE REQUEST. The tool structurally extracts the complete DER SubjectPublicKeyInfo (SPKI) from that supported format and hashes those exact DER bytes with the browser Web Crypto API. It does not hash PEM text, the whole certificate, the whole CSR, or only the BIT STRING payload. PKCS#1 RSA PUBLIC KEY, private keys, encrypted key material, and unrecognized PEM labels are rejected rather than guessed. A fingerprint identifies byte material only; it does not verify certificate signatures, trust paths, hostnames, ownership, revocation, or current validity.