Skip to main content

Private Key Inspector

Find out what kind of private key you have, its size and curve, convert between PKCS#1, SEC1 and PKCS#8, and match it to a certificate.

Private key

Stays in your browser

Certificate, CSR or public key (optional)

Stays in your browser

Key details

Paste a private key to see its details.

Shortcuts: Ctrl+Enter run · Ctrl+Shift+C copy result · / search (use ⌘ on Mac)

Next steps

Done here? Use the Send to… menu on the result to carry it on to RSA Encryption or CSR Decoder.

Free Online Private Key Inspector and Converter

Paste a private key to see its type, size and format. Convert between PKCS#1, SEC1 and PKCS#8, get the matching public key, and check that the key belongs to a certificate or certificate request. It gives developers a quick browser-based way to solve a focused private key inspector task before moving the result into a project.

How to inspect a key

Paste the key (it starts with -----BEGIN) in the first box. Its type, size, format and public key fingerprint appear at once. If it is encrypted, a passphrase box appears.

How to check it matches a certificate

Paste the certificate, certificate request or public key in the second box. You get a clear match or no match.

Common mistakes

  • Deploying a certificate with a key from a different request: the server will not start, or clients fail the handshake. Check the match first.
  • Sharing a private key to get help. Share the public key, certificate or CSR instead.

Frequently asked questions

What is the difference between PKCS#1 and PKCS#8?
PKCS#1 ("BEGIN RSA PRIVATE KEY") only holds RSA keys. PKCS#8 ("BEGIN PRIVATE KEY") can hold any type and says which one it is. Most modern tools prefer PKCS#8. EC keys have a similar older form called SEC1 ("BEGIN EC PRIVATE KEY").
How do I know a key belongs to a certificate?
Paste the certificate or CSR in the second box. The tool compares the public key derived from your private key with the one inside, and tells you if they are the same.
Is my private key uploaded?
No. It is read in your browser and never sent anywhere. Still, use this on a computer you trust and do not leave real keys in shared documents.
Can it open an encrypted key?
Yes, keys encrypted with a passphrase in the standard PKCS#8 form (BEGIN ENCRYPTED PRIVATE KEY, AES). Older "Proc-Type: 4,ENCRYPTED" keys must first be converted with OpenSSL.
How do I use this private key inspector tool?
Use the interactive controls above; processing stays in your browser and the result is intended as a practical starting point for development work.

More Security & Auth

View all Security & Auth tools →