Feed any PEM-formatted private key or certificate into the converter, choose how the output should be protected, and download a clean binary DER artifact without touching the terminal.
Upload & configure
Conversion guardrails
Certificates and keys auto-detected. Mixed PEM bundles are parsed, and strict mode lets you fail fast when extra blocks appear.
AES-256 when you re-encrypt. Reuse the original passphrase or pick a new one; otherwise the tool delivers an unencrypted DER for tooling compatibility.
No clipboard leaks. Passphrases never leave memory, and the workspace that holds your upload is shredded after the download starts.
Full transparency. Enable verbose mode to see exactly which PEM block type was converted and what the CLI reported.