Open and verify PKCS#7 / CMS files

Drop a .p7s, .p7m or .p7b file to see its signers, certificates, signed attributes and timestamps. For a detached signature, add the original file and PKIScope checks that it matches. Everything runs locally.

What you can do

• Attached and detached signatures, and certificate-only bundles
• Verifies the content hash and each signer's signature
• Signed attributes: signing time, content type, message digest
• RFC 3161 timestamp tokens
• Extract the signed content and the certificates

Frequently asked questions

What is the difference between .p7s, .p7m and .p7b files?

A .p7s is a detached signature, usually next to the file or email it signs. A .p7m holds signed content and its signature together. A .p7b holds only certificates, often a chain.

How do I verify a detached signature?

Drop the .p7s file, then add the original file. PKIScope hashes the original and checks it against the signed message digest.

Can I get the original document out of a .p7m file?

Yes. Extract the signed content and save it with its original extension.

Related tools

• PDF signatures — Check every signature in a PDF and see why Adobe calls it invalid
• Code signature — Read the Authenticode signature of a Windows .exe, .dll or .sys
• DER to PEM — Convert binary DER/CER/CRT files to PEM text and back