124

I have a PFX certificate file on my machine and I'd like to view the details before importing it. (The import utility doesn't actually tell you what the certificate is!).

How do I view the details about the PFX certificate file?

  • It is 2019 and we still can't easily view a certificate before installing it. We have to go out on the web to find an answer. Sad state of affairs for Microsoft. – jww Sep 15 at 0:24
174

Some options to view PFX file details:

  • Open a command prompt and type: certutil -dump <path to cert>
  • Install OpenSSL and use the commands to view the details, such as: openssl pkcs12 -info -in <path to cert>
  • The first option is good, but is there any way of seeing more details of the certificate such as the SAN, without installing a third party tool? – Meir Aug 17 '16 at 8:41
  • 14
    certutil -v -dump <path to cert> will display a verbose listing including SAN. – C. Cornwell Jan 5 '17 at 22:37
  • 1
    I have an encrypted pfx file. Is there any information I can find out about it without knowing the password? – mwfearnley Apr 21 '17 at 14:22
  • @mwfearnley, except of recovering the password via brute-force method, I am afraid there is no other option left. – U880D Apr 17 '18 at 8:59
6

You can pipe the info to the openssl x509 utility and then export that out to a file like this:

openssl.exe pkcs12 -info -in c:\temp\cert.pfx | openssl.exe x509 -noout -text > c:\temp\cert.pfx.details.txt

You will be prompted for the certificate passwords too of course.

0

Another possibility: using SigCheck utility, as mentioned in Microsoft's Clickonce docs (the docs mention examining a .manifest file, but it works on a .pfx file as well).

Outputs looks like:

enter image description here

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.