Decode certificates and CSRs securely on your computer — with no external data transmission.
Download Free TrialSingle-user Windows application — Mac & Linux versions in development.
Keep sensitive cryptographic material off online services. All decoding operations stay strictly within your controlled environment.
Designed for organisations with strict data-handling policies — perfect for secure or regulated environments.
A lightweight, single-user Windows application. No server setup, just install and decode instantly.
For environments where uploading sensitive PKI data is against policy, SslDecoder provides the secure, offline alternative. It's the single-user Windows application that delivers powerful decoding capabilities entirely on your computer, with no external data transmission.
This new desktop application harnesses the deep decoder expertise gained from running our popular online tool since 2007. We developed SslDecoder specifically for environments where even the most trusted online service cannot meet strict data handling policies.
Purpose-built for professionals working in highly secure, isolated, or governed environments, it ensures full functionality without ever transmitting data externally. It's the dependable solution for teams where privacy, compliance, and control are non-negotiable.
SslDecoder launches with a robust core feature set, delivering the essential decoding capabilities required for secure, offline analysis of Certificates and CSRs. Our development roadmap is directly informed by user needs, with planned updates to rapidly expand its feature set.
The application is built upon our deep PKI expertise. With experience dating back to 1999 and a track record of over 18 years since our founding, Red Kestrel Consulting has contributed to high-stakes PKI projects for major banks, government agencies, and PKI vendors globally. As the creator of one of the internet's original online decoders in 2007, SslDecoder is expertly engineered to meet today's demands for absolute enterprise privacy and control.
Full breakdown of all standard fields, extensions, and metadata including Signature Algorithm, Public Key, Issuer, Subject, Validity periods, and Subject Alternative Names (SANs).
Decode certificates and CSRs in PEM and DER formats with ease.
Inspect the request details, ensuring the included Public Key and Subject Name are correct before submission to a Certificate Authority (CA).
Guaranteed full functionality without any internet connection. Perfect for classified, restricted, or isolated networks.
Click any screenshot to open a full-size preview without leaving the page.
SslDecoder operates completely offline. The product itself NEVER sends any data over a network, including Certificate Signing Requests (CSRs), Certificates, private keys, or the decoded information.
All cryptographic material and analysis remain strictly within your controlled environment—making it the ideal choice for:
Need an Enterprise Site License? Contact us.