Security converter

DER to PEM converter

To convert DER to PEM, drop your DER file in the box below. It converts straight away; press Download to save the PEM. It all happens in your browser, so your file stays on your device.

Converted on this device, never uploaded

What changes

DER to PEMWhat happens
RecognisedCertificate, CSR, CRL, PKCS#7, public key or private key, from the bytes
LabelThe right BEGIN line for what it is
Lines64 characters, as OpenSSL writes them
PKCS#7The certificates inside, leaf first

How to convert DER to PEM

  1. Add your DER. Drop the file in the box, or click to choose it. It becomes PEM straight away.
  2. Check the result. Look at the preview and the size. The defaults are right for most files.
  3. Download. Press Download to save the PEM.
Why PEM

Linux servers, nginx, Apache and OpenSSL read PEM text; turn a binary DER certificate, request, CRL or key into it.

Questions

DER is the certificate’s binary form. PEM is the same bytes in base64 between BEGIN and END lines, so it can be pasted into text files and config.

No. PEM and DER are two wrappings of the same bytes: the fingerprints, signature and dates stay exactly the same.

Open it in a text editor: PEM starts with a BEGIN line, DER looks like random characters. The converter tells them apart either way.

No. The file is read and converted in your browser, so it stays on your device.

No. The conversion happens right in your browser, so your file stays on your device. There is no account to make, either.

Related conversions