I have a PFX certificate file on my machine and I'd like to view the details before importing it. (The import utility doesn't actually tell you what the certificate is!).
How do I view the details about the PFX certificate file?
-
It is 2019 and we still can't easily view a certificate before installing it. We have to go out on the web to find an answer. Sad state of affairs for Microsoft. – jww Sep 15 '19 at 0:24
Some options to view PFX file details:
- Open a command prompt and type:
certutil -dump <path to cert> - Install OpenSSL and use the commands to view the details, such as:
openssl pkcs12 -info -in <path to cert>
-
The first option is good, but is there any way of seeing more details of the certificate such as the SAN, without installing a third party tool? – Meir Aug 17 '16 at 8:41
-
14certutil -v -dump <path to cert> will display a verbose listing including SAN. – C. Cornwell Jan 5 '17 at 22:37
-
1I have an encrypted pfx file. Is there any information I can find out about it without knowing the password? – mwfearnley Apr 21 '17 at 14:22
-
@mwfearnley, except of recovering the password via brute-force method, I am afraid there is no other option left. – U880D Apr 17 '18 at 8:59
You can pipe the info to the openssl x509 utility and then export that out to a file like this:
openssl.exe pkcs12 -info -in c:\temp\cert.pfx | openssl.exe x509 -noout -text > c:\temp\cert.pfx.details.txt
You will be prompted for the certificate passwords too of course.
Another possibility: using SigCheck utility, as mentioned in Microsoft's Clickonce docs (the docs mention examining a .manifest file, but it works on a .pfx file as well).
Outputs looks like:
