Skip to main content
DevStackKit
All tools

PKCS#12 / PFX Viewer

Open a .pfx or .p12 file with its password, see the certificates inside, then copy the certificate and private key as PEM. Private.

The file stays on your device.

Shortcuts: Ctrl+Enter run · Ctrl+Shift+C copy result · / search (use ⌘ on Mac)

Next steps

Done here? Use the Send to… menu on the result to carry it on to Private Key Inspector or Certificate Decoder.

Free Online PFX / P12 Viewer and Extractor

Open a .pfx or .p12 file to see the certificates inside, whether they have expired and which one belongs to the key, and take out the certificate and private key as PEM for Nginx, Apache or Linux tools. It gives developers a quick browser-based way to solve a focused pkcs#12 / pfx viewer task before moving the result into a project.

How to open a PFX file

Drop the file below, type its password and press Open file. Each certificate is listed with its dates, and you can copy or download the PEM.

Keep it private

The file and password stay in this tab and are never sent anywhere. Even so, close the tab when you are done and delete extracted keys you do not need.

Common mistakes

  • Leaving the extracted private key in a downloads folder or an email: anyone with it can impersonate your site.
  • Using only the first certificate: a server usually needs the whole chain in the right order.

Frequently asked questions

Is my PFX file or password uploaded?
No. The file is opened by your browser and never sent anywhere, and the password is not stored. You can disconnect from the internet after the page loads and it still works.
What is in a PFX or P12 file?
One file that holds a certificate, often its chain, and the private key, protected by a password. It is what Windows, IIS and many hosting panels export.
Why does it say the password is wrong?
Either the password is not the one used when the file was made, or the file is damaged. Some old files have an empty password: leave the box empty and try.
Which key format do I get?
An unencrypted PKCS#8 PEM ("BEGIN PRIVATE KEY"), which Nginx, Apache and most tools accept. Convert it to PKCS#1 with the Private Key Inspector if you need that form.
How do I use this pkcs#12 / pfx viewer tool?
Use the interactive controls above; processing stays in your browser and the result is intended as a practical starting point for development work.

More Security & Auth

JWT DecoderSee what is inside a login tokenEncode / DecodeTurn text into safe codes, and backHash GeneratorCreate a fingerprint of text or a filePassword GeneratorCreate strong passwords you can trustPassword Strength CheckerSee how strong your password really isCertificate DecoderRead what is inside an SSL certificateIBAN ValidatorCheck a bank account number (IBAN)CSP Header GeneratorBuild a security header for your website

View all Security & Auth tools →