Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a utility that is available in standard windows 7 installations, that allows me to convert DER-encoded certificates to PEM-encoded certificates or shows me the ASN.1 text of a DER-encoded certificate?

share|improve this question
up vote 1 down vote accepted

Not exactly an "utility", but you can import PEM certificates into Windows Certificate Store and export them back as DER.

In fact, Windows supports PEM-encoded certificates just fine, it just doesn't recognize the .pem extension – you can rename the file to name.crt or name.cer, then you can open it and see all information.

"PEM encoded" means nothing more than Base64-encoded DER, between "begin"/"end" headers. You can use any Base64 decoder for this.

For example, PowerShell has [System.Convert]::FromBase64String($str)...

You can also use OpenSSL for Windows:

openssl x509 -in foo.pem -out foo.der -outform der
openssl asn1parse -in foo.pem
openssl asn1parse -in foo.der -inform der

or this online ASN.1 decoder.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.