View SSH keys, fingerprints and certificates

Paste an OpenSSH public key, private key or SSH certificate (or an authorized_keys file) to see the key type and size, SHA256 and MD5 fingerprints, comment, and for certificates the principals, validity and options. Convert SSH public keys to PEM and back. Nothing is uploaded.

What you can do

• OpenSSH public keys, authorized_keys files and private keys
• SHA256 and MD5 fingerprints, as shown by ssh-keygen
• SSH certificates: principals, validity, critical options, extensions and signing CA
• RSA, ECDSA and Ed25519 keys
• Convert between SSH public key format and PEM

Frequently asked questions

How do I get the same fingerprint with ssh-keygen?

ssh-keygen -lf key.pub prints the SHA256 fingerprint; add -E md5 for the older MD5 format. PKIScope shows both.

Can I convert an SSH public key to PEM?

Yes, in both directions, for RSA, ECDSA and Ed25519 keys.

Is an SSH certificate the same as an X.509 certificate?

No. An SSH certificate is an SSH public key signed by an SSH CA, with principals and a validity period. It uses OpenSSH's own format, not X.509.

Related tools

• JWK converter — PEM ↔ JSON Web Key, JWKS viewer and key thumbprints
• Viewer — Inspect and debug certificates, PFX files, keys, CSRs and CRLs
• Generator — Create certificates, CSRs and PFX files, or re-issue from a PFX