Public key & CSR inspector

Identify the key algorithm and the signature declared on a certificate signing request before sending it to an issuer.

SPKI / PKCS#10

PEM public key or certificate signing request

Paste one PUBLIC KEY or CERTIFICATE REQUEST block. Public keys and CSRs stay in this tab. Private keys are rejected.

Key and signature analysis

Ready for public key material.

How can I tell whether a CSR uses a post-quantum signature?

Paste a PEM certificate signing request (CSR) and inspect the Request signature field. ML-DSA identifies a post-quantum signature. You can compare the SHA-256 public-key fingerprint with the fingerprint of a separately exported public key.

The key belongs to the subject. A CSR declares a signature made by the requester. The issuing CA selects its own signature when it issues a certificate. This inspection classifies the declared algorithms and reports a public-key fingerprint; proof of possession and CA trust remain unverified.