~/cert-tool > x509 · pkcs#12 · jks · ssh
# everything runs in your browser, nothing is uploaded anywhere
Import
Drop files here, or click to choose — .pem .crt .cer .key .csr .der .p7b .pfx .p12 .jks
Everything runs in your browser. Nothing is uploaded anywhere.
Identified items
Convert / export
Generate certificate / CSR
Keys are generated with the browser's native Web Crypto API (fast, non-blocking) — RSA and EC (P-256/P-384) are both supported for certificates and CSRs.
Generate SSH keypair
Produces a standard OpenSSH private key and matching .pub file — the same format ssh-keygen produces. Add a passphrase to encrypt the private key (bcrypt + AES-256-CTR, same as OpenSSH's own default).