Certificates and keys

JWK viewer

To open a JWK file, drop it in the box below. It opens straight away, even with no extension or the wrong one. Your browser opens it on your device: nothing is uploaded.

Opened on this device, never uploadedDrop or paste another file at any time

What you see

JWK in the viewer
Key typesRSA, EC, OKP (Ed25519, X25519) and oct
ThumbprintRFC 7638, SHA-256, base64url
Private partsNamed (d, p, q…), never shown
x5cEach certificate as its own card
Extensions.jwk, .json
UploadNone: opened on your device

What is a JWK file?

In short

A JWK (JSON Web Key) is a key written as JSON; a JWK Set ({"keys": [...]}) is how sign-in providers publish the keys their tokens are signed with.

A card for each key: its type and size or curve, kid, use and algorithm, the RFC 7638 SHA-256 thumbprint, and whether private parts are present. Private parts are never shown. Certificates in x5c are shown as certificates.

How to open a JWK file

  1. Add your JWK. Drop the file in the box, choose it or paste it.
  2. Look at it. A card for each key: its type and size or curve, kid, use and algorithm, the RFC 7638 SHA-256 thumbprint, and whether private parts are present. Private parts are never shown. Certificates in x5c are shown as certificates.
  3. Take it further. Download any file from inside an archive, or open another file.

Questions

Drop the file here: each key’s RFC 7638 SHA-256 thumbprint is listed.

The card says Has private parts and names them when it does; a public key says None.

No. The viewer runs in your browser and opens the file on your device. Nothing is sent anywhere.

Related