Given a P12 certificate file on Windows, what's the quickest way to see the details such as common name?

Say i have a file mycertificate.p12, ideally I'm looking for a command line tool that I can run against the file to show me the details and doesn't require anything extra to be installed.

It looks like openssl has something similar:

openssl pkcs12 -in file.p12 -info -noout
  • 1
    Are you talking about an installed certificate, or a certificate file you have yet to install?
    – James P
    May 21, 2014 at 15:23
  • 1
    A file. I've clarified the question.
    – Iain
    May 21, 2014 at 15:41
  • 1
    Try opening a new command window and entering certutil -dump <certificate full path>
    – James P
    May 21, 2014 at 15:42
  • I would use OpenSSL
    – Ramhound
    May 21, 2014 at 15:44
  • 3
    There is a question here which seems to be the same as I think the process is the same as for a PFX file: superuser.com/questions/580697/…
    – James P
    May 21, 2014 at 15:45

1 Answer 1


I think the simplest way is probably this:

  • Open a new command window
  • Type certutil -dump <certificate full path>

The certutil tool is built in to Windows so you don't need anything to be installed.


As Iain mentioned, since the file can contain a private key you may be prompted for a password. It's possible to specify the password when you run the command, which would have the advantage of allowing you to use command redirection to send the output directly to a text file:


certutil -p MyPassword -dump D:\MyCertificate.p12 > D:\CertDetails.txt

  • Thanks James. I'd say it's worth keeping my question (even with it's -1) given someone searching google might use p12 instead of pfx as a search term.
    – Iain
    May 21, 2014 at 15:55
  • Note that certutil will prompt you for the password for the file.
    – Iain
    May 21, 2014 at 15:55
  • That's a good point, I will edit the answer.
    – James P
    May 21, 2014 at 16:01
  • 1
    Is there a GUI tool instead of a command line one?
    – galeop
    May 29, 2019 at 9:19
  • you can also add "-v" before -dump to see more verbose details like signature algorithms, etc.
    – Kevin Liu
    Jul 8, 2020 at 6:19

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .