I have a PFX certificate file on my machine and I'd like to view the details before importing it. (The import utility doesn't actually tell you what the certificate is!).
How do I view the details about the PFX certificate file?
Super User is a question and answer site for computer enthusiasts and power users. It only takes a minute to sign up.
Sign up to join this communityI have a PFX certificate file on my machine and I'd like to view the details before importing it. (The import utility doesn't actually tell you what the certificate is!).
How do I view the details about the PFX certificate file?
Some options to view PFX file details:
certutil -dump <path to cert>
openssl pkcs12 -info -in <path to cert>
You can pipe the info to the openssl x509 utility and then export that out to a file like this:
openssl.exe pkcs12 -info -in c:\temp\cert.pfx | openssl.exe x509 -noout -text > c:\temp\cert.pfx.details.txt
You will be prompted for the certificate passwords too of course.
The contents of a pfx file can be viewed in the GUI by right-clicking the PFX file and selecting Open (instead of the default action, Install).
This will open mmc and show the pfx file as a folder. Open the pfx folder and the Certificates subfolder, and you will see the certificate(s) contained in the pfx. The certificate can be opened to view details.
Alternatively, the GUI can be opened by running mmc certmgr.msc /CERTMGR:FILENAME="C:\path\to\pfx"
It is also possible to use FileTypesMan to change the default (double-click) action for PFX files from Install to Open.
Open
in the first menu, you have to Show More Options
, then Open
from there. (Note: I tested with a .p12 that didn't have a password.)
Feb 14 at 14:40
openssl pkcs12 -info -in FILE.pfx
).
I know this old but, but I have written a small application that is able to show certificates in PFX files. It doesn't show whether it has key or not, but you can browse through certificates in it.
You can download latest version from the Release section. Works on Windows and Linux
I wrote a python tool that can do this as well. The source is on Github at https://github.com/JavaScriptDude/print_cert .
This tool can print local certificates and PKCS stores or certs on remote sites.
usage: print_cert [-h] [--p12 P12] [--cert CERT] [--privkey PRIVKEY]
[--host HOST] [--port PORT]
optional arguments:
-h, --help show this help message and exit
--p12 P12, -p P12 Path to PKCS12/PFX archive
--cert CERT, -c CERT Path to certificate pem
--privkey PRIVKEY, -k PRIVKEY
Path to private key pem
--host HOST, -H HOST Host Address
--port PORT, -P PORT Host Port (default is 443)
Another possibility: using SigCheck utility, as mentioned in Microsoft's Clickonce docs (the docs mention examining a .manifest file, but it works on a .pfx file as well).
Outputs looks like: