16

Given P12 certificate file on Windows, what's the quickest way to see the details such as common name?

Say i have a file mycertificate.p12, ideally I'm looking for a command line tool that I can run against the file to show me the details and doesn't require anything extra to be installed.

It looks like openssl has something similar:

openssl pkcs12 -in file.p12 -info -noout
7
  • Are you talking about an installed certificate, or a certificate file you have yet to install?
    – James P
    May 21, 2014 at 15:23
  • A file. I've clarified the question.
    – Iain
    May 21, 2014 at 15:41
  • 1
    Try opening a new command window and entering certutil -dump <certificate full path>
    – James P
    May 21, 2014 at 15:42
  • I would use OpenSSL
    – Ramhound
    May 21, 2014 at 15:44
  • 3
    There is a question here which seems to be the same as I think the process is the same as for a PFX file: superuser.com/questions/580697/…
    – James P
    May 21, 2014 at 15:45

1 Answer 1

43

I think the simplest way is probably this:

  • Open a new command window
  • Type certutil -dump <certificate full path>

The certutil tool is built in to Windows so you don't need anything to be installed.

Edit:

As Iain mentioned, since the file can contain a private key you may be prompted for a password. It's possible to specify the password when you run the command, which would have the advantage of allowing you to use command redirection to send the output directly to a text file:

e.g.

certutil -p MyPassword -dump D:\MyCertificate.p12 > D:\CertDetails.txt

5
  • Thanks James. I'd say it's worth keeping my question (even with it's -1) given someone searching google might use p12 instead of pfx as a search term.
    – Iain
    May 21, 2014 at 15:55
  • Note that certutil will prompt you for the password for the file.
    – Iain
    May 21, 2014 at 15:55
  • That's a good point, I will edit the answer.
    – James P
    May 21, 2014 at 16:01
  • Is there a GUI tool instead of a command line one?
    – galeop
    May 29, 2019 at 9:19
  • you can also add "-v" before -dump to see more verbose details like signature algorithms, etc.
    – Kevin Liu
    Jul 8, 2020 at 6:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.