PKCS#7 / P7B Certificate Bundle Inspector
Decode a .p7b certificate bundle structure.
Free · no sign-up · runs locally·
About this tool
PKCS#7 (also seen as .p7b or .p7c files) is a container that bundles certificates — commonly a full certificate chain — and optionally signer information. This tool decodes the PEM-wrapped structure into its ASN.1 tree so you can see which certificates and OIDs it carries.
Useful when a CA hands you a .p7b and you need to understand or split its contents. Parsing runs entirely in your browser.
Like everything on encrypt.tools, this runs entirely in your browser — nothing you enter is transmitted or stored.
Do the same in a terminal
Reproduce or cross-check this tool with standard command-line utilities. For deterministic operations like hashing and encoding, the output matches exactly.
openssl pkcs7 -in bundle.p7b -print_certs -nooutFrequently asked questions about PKCS#7 Inspector
What is a .p7b file?+
A PKCS#7 file is a container that holds one or more certificates — typically a certificate chain — without private keys. Windows and Java tools often export chains in this format.
Can I extract individual certificates from it?+
This tool shows the structure and the certificates it contains. To split a .p7b into separate PEM certificates for a web server, use OpenSSL's pkcs7 command; this inspector helps you verify what's inside first.
Does PKCS#7 contain private keys?+
No — PKCS#7 carries certificates and signatures only. Private keys travel in PKCS#12 (.pfx/.p12) files, which are a different, password-protected format.