PFX/P12 viewer online

Drop a .pfx or .p12 file and enter its password to see every certificate and private key inside, the chain they form, whether the key matches the certificate, and how the file is encrypted. Legacy files that OpenSSL 3 refuses to open work too. The file and its password never leave your browser.

What you can do

• Lists every certificate, private key and friendly name in the bundle
• Shows the encryption and MAC algorithms, and flags legacy RC2-40 and 3DES
• Builds and verifies the certificate chain from the certificates inside
• Checks that the private key matches the certificate
• Extract the certificate, key and chain as PEM, or re-issue a new PFX from it

Frequently asked questions

How do I open a PFX file without OpenSSL?

Drop it here and enter the password. PKIScope decrypts it with your browser's WebCrypto API and lists what's inside; nothing is uploaded.

What is the difference between .pfx and .p12?

None. Both extensions are the same PKCS#12 format: a password-protected bundle of a certificate, its private key and often the chain. Windows tends to use .pfx; other systems use .p12.

Why does OpenSSL 3 say “unsupported” for my PFX?

The file is encrypted with RC2-40 or 3DES, which OpenSSL 3 disables by default (openssl pkcs12 -legacy enables them). PKIScope opens these files directly.

What if I don't know the password?

The certificates and key can't be read without it; PKCS#12 encryption is designed to stop that. Ask whoever exported the file, or export a new one from the system that holds the key.

Related tools

• PFX to PEM — Extract certificate, key and chain from a PFX/P12
• PEM to PFX — Combine certificate, key and chain into a PFX/P12
• Key matcher — Check whether a private key matches a certificate or CSR
• Java keystore — Open JKS/JCEKS keystores and convert them to PFX or PEM