DeNiSe operating a secure machine that separates a PFX package into certificate, private-key and CSR files

PKCS#12 extractor

PFX Decoupler

Separate a PFX/P12 into its certificate, private key and chain, then create a fresh CSR when needed.

Private key safety

The PFX password is used only during this request and is never stored or logged. Extracted files are kept outside the public web root, expire quickly and are deleted after download. The exported private key is unencrypted—store it securely.

PFX/P12 file

Maximum file size: 5 MB.

PFX password

Leave blank only when the PFX has no password.

Generate a CSR using the extracted private key and the certificate's subject details

The CSR keeps the subject identity where available. Review it before renewal because certificate extensions such as SANs are not copied automatically.

Continue with SSLassist

Explore more SSL tools

Move straight to the next certificate task without returning to the tools index.

SSL Certificate Checker Inspect a live certificate, its expiry, names and TLS details.

CSR Generator Create a CSR and matching private key with SAN support.

PFX Creator Build a password-protected PKCS#12 package.

CSR Decoder Decode a certificate request and inspect its requested names.

Certificate Decoder Decode CRT, CER, PEM and DER X.509 certificates.

CAA Record Generator Create DNS CAA records from a certificate issuer.

Insecure Link Finder Find HTTP mixed content on an HTTPS webpage.

Key Matcher Confirm that a certificate, CSR and private key belong together.