Supported Features
-
VoiceOver
-
Dark Interface
CertConvert
Offline certificate toolbox
Only for Mac
$9.99
Mac
CertConvert is a self-contained certificate toolbox for macOS. It does the everyday X.509 jobs — converting formats, assembling and validating chains, inspecting certificates and generating keys — entirely on your own machine, with nothing uploaded anywhere.
Unlike the online certificate converters, CertConvert never sends your files or private keys to a server. Everything happens locally.
WHAT IT DOES
• Inspect any certificate, key, CSR or bundle — subject, issuer, validity, SANs, key usage and fingerprints, plus a health check on every one.
• Check whether a certificate covers a host name, and decode signing requests in full — the subject, key and extensions they request.
• Convert between PEM, DER (.cer/.der), PKCS #7 (.p7b) and PKCS #12 (.pfx/.p12), in both directions.
• Build chains — drop root, intermediate and device certificates in any order, have them ordered and validated automatically, then export as a PEM bundle, P7B or PFX.
• Convert private-key formats (PKCS #8, PKCS #1, SEC 1, encrypted or not) and check whether a key matches a certificate.
• Generate keys, certificate signing requests and self-signed certificates (RSA or ECDSA) with SANs and CA options.
BUILT FOR TRUST
All cryptography uses the operating system's own libraries — there is no third-party cryptographic code. The app makes no network connections and collects no data. Private keys loaded from PKCS #12 files are handled in memory and are never imported into your keychain.
Formats are detected from file content, not extensions, so misnamed files just work.
Ratings & Reviews
- This app hasn’t received enough ratings or reviews to display an overview.
Inspect is far more useful in this release. Every certificate and signing request now gets a health check that flags real problems — a missing subject alternative name, a weak key, an expired or SHA-1-signed certificate — and says what to do about each, without raising false alarms on private CA roots. Signing requests are now fully decoded, and you can check whether a certificate covers a particular host name.
The developer, JERMAINE WALKES, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .
Data Not Collected
The developer does not collect any data from this app.
The developer indicated that this app supports the following accessibility features. Learn More
Information
- Seller
- JERMAINE WALKES
- Size
- 31.2 MB
- Category
- Developer Tools
- Compatibility
Requires macOS 13.0 or later and a Mac with Apple M1 chip or later.
- Mac
Requires macOS 13.0 or later and a Mac with Apple M1 chip or later.
- Mac
- Age Rating
4+
- 4+
- Copyright
- © 2026 Jermaine Walkes
