Examine a File

---

To examine a file (certificate, CSR, CRL, keystore or JWT):

1. From the Examine menu, choose Examine File. Alternatively click on the Examine File tool bar button:     
2. Select the drive and folder where the file is stored.
3. Click on the file or type the filename into the File Name text box.
4. Click on the Examine button.
5. The Certificate/CSR/CRL Details dialog will appear.
6. After viewing the details close the dialog by clicking on the OK button.

Examine Clipboard Content

---

To examine the content of the system clipboard (PEM encoded certificate, CSR, CRL or JWT):

1. From the Examine menu, choose Examine Clipboard. Alternatively click on the Examine Clipboard tool bar button:     
2. Either the Certificate/CSR/CRL Details dialog will appear or a message that the system clipboard does not contain any of the supported data types.
3. After viewing the details close the dialog by clicking on the OK button.

View and Verify a JWT

---

When Examine File or Examine Clipboard content is recognized as a JWT (JSON Web Token), the View JWT dialog is displayed instead of the Certificate/CSR/CRL Details dialog:

1. The Encoded, Header and Payload views show the raw and decoded JWT.
2. To verify the JWT's signature, paste the corresponding public key, PEM or Base64 DER encoded, into the Public key field and press the Verify button.
3. A message will confirm whether the signature was verified, invalid, or that the supplied public key was itself invalid.
4. Optionally press the Copy button to copy the JWT to the clipboard.
5. After viewing the details close the dialog by clicking on the OK button.

Supported signature algorithms for verification are the RSA ("RS..."/"PS...") and EC ("ES...") families, as well as EdDSA/Ed25519 and Ed448.

Examine an TLS/SSL Connection

---

To examine a Transport Layer Security (TLS) connection's certificates:

1. From the Examine menu, choose Examine TLS/SSL. Alternatively click on the Examine TLS/SSL tool bar button:     
2. The Examine TLS/SSL dialog will appear.
3. Enter the TLS Host and Port of the connection to be examined. Your last ten input values are saved and available via the drop down box.
4. Optionally you can activate client authentication. You have just to select a KeyStore and the private key from KeyStore is used to authenticate against the TLS/SSL server. If there is more than one private key in the KeyStore that could be used for client authentication, then standard Java mechanisms are used to find the right one.
5. Click on the OK button.
6. The Certificate Details for TLS/SSL Connection dialog will appear.
7. After viewing the details close the dialog by clicking on the OK button.

Detect a Cryptographic File's Type

---

To detect a cryptographic file's type:

1. From the Examine menu, choose Detect File Type. Alternatively click on the Detect File Type tool bar button:     
2. The Detect File Type dialog will appear.
3. Select the drive and folder where the file is stored.
4. Click on the required certificate file or type the filename into the File Name text box.
5. Click on the Detect Type button.
6. The Cryptographic File Type dialog will appear.
7. After viewing the file type details close the dialog by clicking on the OK button.

Note: KeyStore Explorer can detect files of the following cryptographic types:

• JKS KeyStore
• JCEKS KeyStore
• PKCS #12 KeyStore
• BKS KeyStore
• BKS-V1 KeyStore
• UBER KeyStore
• Certificate
• Certificate Signing Request (CSR)
• Certificate Revocation List (CRL)
• Encrypted PKCS #8 Private Key
• Unencrypted PKCS #8 Private Key
• Encrypted Microsoft PVK Private Key
• Unencrypted Microsoft PVK Private Key
• Encrypted OpenSSL Private Key
• Unencrypted OpenSSL Private Key
• OpenSSL Public Key