A .crt file is not always DER
The extension is only a filename convention. Open the file in a text editor: BEGIN CERTIFICATE indicates PEM. A binary certificate typically uses DER.
Convert an X.509 certificate between PEM and binary DER/CRT entirely in your browser. No uploads, private keys or account required.
Enable JavaScript to use the interactive tool. Instructions and troubleshooting guidance are available below.
Choose PEM to DER and paste a certificate, or choose DER to PEM and select a local binary certificate file. The tool validates the X.509 structure before creating a downloadable file.
The extension is only a filename convention. Open the file in a text editor: BEGIN CERTIFICATE indicates PEM. A binary certificate typically uses DER.
This converter handles public certificates only. PFX containers include additional structures and may contain private keys. Use a trusted local certificate management tool for those operations.
PEM and DER store the same certificate bytes in different encodings. Converting cannot change validity, names, issuer or trust.
No. This release deliberately handles only public certificate PEM/DER conversions. It never requests or processes a private key.
No. Parsing, conversion and file creation run in a sandboxed browser frame that cannot make network requests.
No. The DER certificate bytes are preserved. PEM adds base64 encoding and a header/footer around those bytes.
Check a public website’s SSL certificate, expiry date, hostname coverage and trust chain. See days remaining and practical fixes. No signup required.
Use free toolInspect an SSL validation path and troubleshoot missing intermediates, untrusted issuers and certificate validity problems. Free, with no account required.
Use free toolDecode a PEM certificate signing request in your browser. Inspect subject fields, SANs, key details and verify the CSR signature without uploading it.
Use free toolRead a PEM X.509 certificate locally: subject, issuer, expiry, SANs, fingerprints, key usage and basic constraints. Free certificate decoder without signup.
Use free tool