ASN.1 DER Structure Inspector
Inspect one DER value as a bounded tag, length and value tree with exact offsets and selected primitive checks.
Loading tool…
How to use ASN.1 DER Structure Inspector
Inspect one DER value as a bounded tag, length and value tree with exact offsets and selected primitive checks. Read DER bytes, hexadecimal text or one matching-label PEM block. Decode integers, object identifiers, selected strings and bit counts while preserving a short hex preview for uninterpreted content.
- Provide optional local der or pem file, der hexadecimal or one pem block.
- Choose the supported mode and run the tool. Review its assumptions and any reported errors.
- Copy the result or download a separate output; reset to clear the current form.
Good to know
- One complete value, at most 1 MiB, 24 nesting levels, 1,000 values and tag numbers through 2^31−1. Indefinite, truncated and non-minimal lengths are refused before descending into content.
- Primitive checks cover Boolean, integer/enumerated sign octets, bit-string padding, OID components and selected string alphabets. Integer decimal previews stop at 32 bytes; long values retain a short hex preview.
- This is a structure inspector, not complete DER/schema validation. SET ordering, default omission, all character-string/time/REAL semantics and application-defined tags need their actual schema. No key or certificate is imported, executed or trusted.
- The PEM profile accepts one matching uppercase label and ASCII whitespace in the body. Multi-block bundles, surrounding prose and legacy encrypted-PEM headers are refused.
- Inputs are processed on this device and are not automatically saved or uploaded.
Common questions
Does a parsed CERTIFICATE label mean the certificate is trusted?
No. A PEM label is only an outer marker. The tree does not verify certificate semantics, signatures, chains, names, revocation or trust.
Does this change my original input?
No. The tool returns a separate result. Review that output before using it in another application.
Keep going with related tools
All developer →JWK and PEM Public Key Converter
Convert RSA or P-256 public keys between JWK JSON and SPKI PEM locally.
FilesBinary Record Pack and Unpack Workbench
Pack or unpack fixed binary fields using an explicit offset and endian JSON schema.
DeveloperBase64 Decoder
Decode standard Base64 into UTF-8 text with strict alphabet, padding, and byte validation.
DeveloperX.509 Certificate Field Inspector
Read bounded public certificate fields, selected extensions and SHA-256 fingerprints from local PEM certificates or DER bytes.
DeveloperDNSSEC DS Record Builder
Calculate SHA-256 or SHA-384 DS records from a public DNSKEY field, with canonical DNS owner bytes and a key tag.