PEM to JWK Converter
Import RSA or EC PEM public and private keys and export RFC 7517 JSON Web Keys in your browser with Web Crypto.
Convert PEM keys to RFC 7517 JSON Web Keys
OAuth providers, OpenID Connect issuers, and API gateways often publish verification keys as
JSON Web Keys (JWKs) inside a JWKS document at /.well-known/jwks.json.
If you only have a PKIX PEM public key or PKCS#8 private key, this tool imports the PEM with the
browser Web Crypto API and exports a standards-shaped JWK plus a SHA-256 thumbprint.
How to use this converter
- Paste a PEM block (
PUBLIC KEY,PRIVATE KEY, or PKCS#8). - Read the JWK JSON on the right and copy it into your JWKS or test fixture.
- Use the thumbprint to match keys during JWKS rotation reviews.
For the reverse direction, try the JWK PEM Viewer. To verify JWT signatures with PEM or JWK material, use JWT Verify RSA ES.
Frequently Asked Questions
Which PEM formats are supported?
SPKI public keys and PKCS#8 private keys for RSA, NIST P-curves (P-256, P-384, P-521), and Ed25519. Legacy PKCS#1 RSA PRIVATE KEY blobs are not imported.
Is my private key uploaded?
No. Import and export run entirely in your browser through crypto.subtle; PEM text never leaves the page.
What is the thumbprint?
It is the RFC 7638 JWK thumbprint: SHA-256 over the canonical JSON of required RSA or EC members, Base64URL-encoded. It helps compare two keys with different kid values.
Related Tools
Sun Angle Calculator
Find Date Difference
Triflake Curve Generator
Protobuf Binary Decoder
Grass Seed Calculator
Markdown to JSX
Retirement Withdrawal Calculator
Lens and Mirror Equation Calculator
Rip Rap Calculator
Seconds to Hours Converter
Add Compression Effect To Image
Email Extractor
POJO Tools
Ratio to Fraction Calculator
Webp To Png Converter
Molecular SO2 Calculator
Standard Notation Calculator
Humans Vs Vampires
Standing Desk Height
AND Hex Numbers