[{"data":1,"prerenderedAt":633},["ShallowReactive",2],{"tool-content:rsa-key-converter":3,"published-tool-content":421},{"id":4,"title":5,"body":6,"category":394,"dataVersion":395,"description":396,"extension":397,"featured":398,"icon":399,"keywords":400,"meta":408,"navigation":398,"path":409,"seo":410,"seoTitle":411,"slug":412,"status":413,"stem":414,"updatedAt":415,"usageTips":416,"__hash__":420},"tools\u002Ftools\u002Frsa-key-converter.md","RSA 密钥格式转换与解析工具",{"type":7,"value":8,"toc":373},"minimark",[9,13,17,20,33,36,39,42,45,48,163,185,188,191,216,219,234,237,240,243,246,263,266,269,272,289,292,295,320,323,326,331,334,338,341,345,348,363,366,370],[10,11,12],"h2",{"id":12},"什么时候使用",[14,15,16],"p",{},"适合接口或工具要求不同 RSA 容器格式、需要确认一段内容究竟是公钥还是私钥，或要从 X.509 证书中提取 RSA 公钥时使用。本工具只转换表示形式，不执行加解密。",[10,18,19],{"id":19},"快速使用",[21,22,23,27,30],"ol",{},[24,25,26],"li",{},"粘贴 PEM、JWK 或 Base64 DER，点击“仅解析”。",[24,28,29],{},"确认识别到的类型、模数长度和指纹，再选择页面允许的目标格式。",[24,31,32],{},"点击“解析并转换”并复制结果；输入 X.509 证书时，证书解析成功不代表证书可信。",[10,34,35],{"id":35},"工具说明",[14,37,38],{},"这个工具用于识别、解析和转换常见 RSA 密钥格式。输入可以是 PEM、RSA JWK，或不带 PEM 头尾的 Base64 DER；输出可以选择 PEM、Base64 DER 或格式化 JWK。",[14,40,41],{},"页面可以生成一份新的 2048 位 PKCS#8 PEM 示例私钥。输入解析后会统一生成规范化 SPKI；私钥还会生成规范化 PKCS#8，并通过浏览器 Web Crypto 再次导入校验。",[14,43,44],{},"解析和转换全部在当前浏览器中完成，不会上传或保存输入内容。",[10,46,47],{"id":47},"支持的输入格式",[49,50,51,67],"table",{},[52,53,54],"thead",{},[55,56,57,61,64],"tr",{},[58,59,60],"th",{},"输入内容",[58,62,63],{},"PEM 标记或结构",[58,65,66],{},"解析结果",[68,69,70,85,97,110,122,135,152],"tbody",{},[55,71,72,76,82],{},[73,74,75],"td",{},"SPKI 公钥",[73,77,78],{},[79,80,81],"code",{},"BEGIN PUBLIC KEY",[73,83,84],{},"RSA 公钥",[55,86,87,90,95],{},[73,88,89],{},"PKCS#1 公钥",[73,91,92],{},[79,93,94],{},"BEGIN RSA PUBLIC KEY",[73,96,84],{},[55,98,99,102,107],{},[73,100,101],{},"PKCS#8 私钥",[73,103,104],{},[79,105,106],{},"BEGIN PRIVATE KEY",[73,108,109],{},"RSA 私钥",[55,111,112,115,120],{},[73,113,114],{},"PKCS#1 私钥",[73,116,117],{},[79,118,119],{},"BEGIN RSA PRIVATE KEY",[73,121,109],{},[55,123,124,127,132],{},[73,125,126],{},"X.509 证书",[73,128,129],{},[79,130,131],{},"BEGIN CERTIFICATE",[73,133,134],{},"提取 RSA 公钥和证书元数据",[55,136,137,140,149],{},[73,138,139],{},"RSA JWK",[73,141,142,145,146],{},[79,143,144],{},"kty"," 为 ",[79,147,148],{},"RSA",[73,150,151],{},"按参数判断公钥或私钥",[55,153,154,157,160],{},[73,155,156],{},"Base64 DER",[73,158,159],{},"不带 PEM 头尾",[73,161,162],{},"按 ASN.1 结构自动识别",[14,164,165,166,169,170,169,172,169,175,169,178,169,181,184],{},"工具按 DER 的 ASN.1 结构识别无头尾输入，不依赖文件扩展名。RSA 私钥 JWK 必须包含完整的 ",[79,167,168],{},"d","、",[79,171,14],{},[79,173,174],{},"q",[79,176,177],{},"dp",[79,179,180],{},"dq",[79,182,183],{},"qi"," 参数。",[10,186,187],{"id":187},"支持的输出格式",[14,189,190],{},"公钥输入可以导出：",[192,193,194,200,205],"ul",{},[24,195,196,197,199],{},"SPKI 公钥：PEM 标记为 ",[79,198,81],{},"。",[24,201,202,203,199],{},"PKCS#1 公钥：PEM 标记为 ",[79,204,94],{},[24,206,207,208,169,210,169,213,199],{},"RSA 公钥 JWK：格式化 JSON，仅保留 ",[79,209,144],{},[79,211,212],{},"n",[79,214,215],{},"e",[14,217,218],{},"私钥输入除上述公钥格式外，还可以导出：",[192,220,221,226,231],{},[24,222,223,224,199],{},"PKCS#8 私钥：PEM 标记为 ",[79,225,106],{},[24,227,228,229,199],{},"PKCS#1 私钥：PEM 标记为 ",[79,230,119],{},[24,232,233],{},"RSA 私钥 JWK：包含完整 CRT 参数。",[14,235,236],{},"ASN.1 密钥可以选择 PEM 或标准 Base64 DER。JWK 固定输出为格式化 JSON。",[14,238,239],{},"公钥输入不会出现任何私钥目标格式；私钥输入可以派生并导出对应的公钥格式。",[10,241,242],{"id":242},"解析信息",[14,244,245],{},"所有输入都会展示：",[192,247,248,251,254,257,260],{},[24,249,250],{},"原始输入格式。",[24,252,253],{},"公钥或私钥类型。",[24,255,256],{},"RSA 模数长度。",[24,258,259],{},"十进制公钥指数。",[24,261,262],{},"规范化 SPKI DER 的 SHA-256 指纹。",[14,264,265],{},"规范化 SPKI 指纹只由 RSA 公钥决定。同一把密钥的 SPKI、PKCS#1、PKCS#8、JWK 和证书输入应得到相同指纹，可用于核对格式转换前后是否仍为同一把公钥。",[10,267,126],{"id":268},"x509-证书",[14,270,271],{},"输入 X.509 证书时，还会展示：",[192,273,274,277,280,283,286],{},[24,275,276],{},"Subject 和 Issuer。",[24,278,279],{},"序列号。",[24,281,282],{},"生效和失效时间。",[24,284,285],{},"签名算法。",[24,287,288],{},"原始证书 DER 的 SHA-256 指纹。",[14,290,291],{},"页面只根据当前设备时间标记证书是否处于有效期内，不校验证书链、根证书信任、吊销状态、Key Usage 或 Extended Key Usage。证书解析成功不等于证书可信。",[10,293,294],{"id":294},"不支持的格式",[192,296,297,304,307,310,313],{},[24,298,299,300,303],{},"加密 PKCS#8 私钥和带 ",[79,301,302],{},"Proc-Type: 4,ENCRYPTED"," 的传统加密 PEM。",[24,305,306],{},"OpenSSH 公钥或私钥。",[24,308,309],{},"PFX \u002F PKCS#12。",[24,311,312],{},"EC、SM2、DSA、Ed25519 等非 RSA 密钥。",[24,314,315,316,319],{},"包含 ",[79,317,318],{},"oth"," 的多素数 RSA JWK。",[14,321,322],{},"需要处理加密私钥时，应先在可信环境中使用专门的密钥管理工具解密，再把未加密密钥放入本工具。生产私钥不应在不可信设备上处理。",[10,324,325],{"id":325},"常见问题",[327,328,330],"h3",{"id":329},"pkcs1-和-pkcs8-有什么区别","PKCS#1 和 PKCS#8 有什么区别？",[14,332,333],{},"PKCS#1 是 RSA 专用结构；PKCS#8 是通用私钥容器，会额外记录密钥算法。公钥侧常用 SPKI 通用结构，PKCS#1 公钥则只保存 RSA 参数。",[327,335,337],{"id":336},"base64-der-为什么没有-pem-头尾","Base64 DER 为什么没有 PEM 头尾？",[14,339,340],{},"PEM 是 DER 字节经过 Base64 编码后再加上类型标记。选择 Base64 DER 时只输出中间的标准 Base64 内容，适合需要自行保存为二进制 DER 的场景。",[327,342,344],{"id":343},"为什么公钥不能转换成私钥","为什么公钥不能转换成私钥？",[14,346,347],{},"RSA 公钥只包含模数和公钥指数，无法从中恢复私钥参数。只有输入本身包含私钥时，页面才会提供私钥输出格式。",[327,349,351,352,169,355,358,359,362],{"id":350},"私钥-jwk-中的-alguse-和-key_ops-去哪里了","私钥 JWK 中的 ",[79,353,354],{},"alg",[79,356,357],{},"use"," 和 ",[79,360,361],{},"key_ops"," 去哪里了？",[14,364,365],{},"这些字段描述用途或应用约束，不属于 RSA 数学参数。转换结果只输出规范化的 RSA 密钥参数，避免把输入系统的用途声明误带到另一个系统。",[327,367,369],{"id":368},"工具会保存私钥吗","工具会保存私钥吗？",[14,371,372],{},"不会。输入、解析信息和输出都只保存在当前页面内存中，刷新或关闭页面后无法恢复。",{"title":374,"searchDepth":375,"depth":375,"links":376},"",2,[377,378,379,380,381,382,383,384,385],{"id":12,"depth":375,"text":12},{"id":19,"depth":375,"text":19},{"id":35,"depth":375,"text":35},{"id":47,"depth":375,"text":47},{"id":187,"depth":375,"text":187},{"id":242,"depth":375,"text":242},{"id":268,"depth":375,"text":126},{"id":294,"depth":375,"text":294},{"id":325,"depth":375,"text":325,"children":386},[387,389,390,391,393],{"id":329,"depth":388,"text":330},3,{"id":336,"depth":388,"text":337},{"id":343,"depth":388,"text":344},{"id":350,"depth":388,"text":392},"私钥 JWK 中的 alg、use 和 key_ops 去哪里了？",{"id":368,"depth":388,"text":369},"crypto","rsa-key-converter-v1","识别 RSA 密钥或证书的实际格式，在 PEM、DER、JWK 之间转换，并用指纹核对是否为同一公钥。","md",true,"i-lucide-file-key-2",[401,402,403,404,75,405,406,407],"RSA 密钥转换","PEM 转 JWK","JWK 转 PEM","PKCS#1 转 PKCS#8","DER 解析","X.509 证书解析","RSA 指纹",{},"\u002Ftools\u002Frsa-key-converter",{"title":5,"description":396},"RSA 密钥格式转换与解析 - PEM、DER、JWK、PKCS#1、PKCS#8、X.509","rsa-key-converter","published","tools\u002Frsa-key-converter","2026-07-25",[417,418,419],"先粘贴并解析输入，页面会按公钥或私钥自动限制可选的输出格式","转换前后核对规范化 SPKI SHA-256 指纹，可确认仍是同一把 RSA 公钥","不支持加密私钥、OpenSSH、PFX \u002F PKCS#12、EC 或 SM2","YeUIfTiaX18Sve0cxviDHlzjmM-A3RCEPhdv9-4iYD8",[422,436,448,459,473,485,497,509,521,533,535,546,559,572,584,598,610,621],{"slug":423,"title":424,"description":425,"status":413,"icon":426,"keywords":427,"featured":398},"asymmetric-encryption","RSA 非对称加解密工具","使用 RSA 公钥加密、私钥解密短文本；支持常见 PEM、JWK、X.509 公钥和旧系统兼容参数。","i-lucide-key-round",[428,429,430,431,432,433,434,139,435,126],"RSA 加密","RSA 解密","RSA-OAEP","PKCS1Padding","OAEPWithSHA-256AndMGF1Padding","RSA 密钥生成","PEM 密钥","PKCS#1 密钥",{"slug":437,"title":438,"description":439,"status":413,"icon":440,"keywords":441,"featured":398},"base58-converter","Base58 编解码工具","在线使用 Bitcoin Base58 编解码 UTF-8 文本或 Hex 字节，并以文本、Hex 或二进制文件查看解码结果。","i-lucide-binary",[442,443,444,445,446,447],"Base58 编解码","Base58 编码","Base58 解码","Bitcoin Base58","Hex 转 Base58","Base58 在线工具",{"slug":449,"title":450,"description":451,"status":413,"icon":399,"keywords":452,"featured":398},"base64-converter","Base64 编解码工具","在线转换标准 Base64 与 Base64URL，支持 UTF-8 文本、Hex 字节、文件编码及二进制解码下载。",[453,454,455,456,457,458],"Base64 编解码","Base64URL","文件转 Base64","Hex 转 Base64","Base64 解码","Base64 在线工具",{"slug":460,"title":461,"description":462,"status":413,"icon":463,"keywords":464,"featured":398},"chacha20-poly1305","ChaCha20-Poly1305 加解密工具","使用 ChaCha20 或 XChaCha20-Poly1305 安全加解密文本，适合现代 AEAD 或对接 RFC 8439 的场景。","i-lucide-shield-check",[465,466,467,468,469,470,471,472],"ChaCha20-Poly1305","XChaCha20-Poly1305","ChaCha20 加密","Poly1305","RFC 8439","AEAD","AAD","PBKDF2",{"slug":474,"title":475,"description":476,"status":413,"icon":477,"keywords":478,"featured":398},"hex-converter","Hex 编解码工具","在线转换 UTF-8 文本与十六进制字节，支持大小写、0x 前缀以及空格或冒号分隔格式。","i-lucide-hash",[479,480,481,482,483,484],"Hex 编解码","十六进制编码","十六进制解码","文本转 Hex","0x Hex","Hex 在线工具",{"slug":486,"title":487,"description":488,"status":413,"icon":489,"keywords":490,"featured":398},"hybrid-encryption","RSA + AES 混合加解密工具","使用接收方 RSA 公钥加密较长文本：RSA 包装随机 AES-256 密钥，正文由 AES-GCM 保护。","i-lucide-package-check",[491,492,430,493,494,495,496],"混合加密","RSA AES","AES-256-GCM","数字信封","会话密钥","Hybrid Encryption",{"slug":498,"title":499,"description":500,"status":413,"icon":501,"keywords":502,"featured":398},"json-formatter","JSON 格式化与校验工具","在线校验、格式化和压缩 JSON 数据，支持 JSONC 单行与块注释，可准确定位格式错误，内容仅在浏览器本地处理。","i-lucide-braces",[503,504,505,506,507,508],"JSON 格式化","JSON 校验","JSON 压缩","JSONC","JSON 在线工具","JSON 注释",{"slug":510,"title":511,"description":512,"status":413,"icon":513,"keywords":514,"featured":398},"md5-generator","MD5 哈希工具","在线计算文本或文件的 MD5 摘要，支持十六进制大小写和 Base64 输出，内容仅在浏览器本地处理。","i-lucide-fingerprint",[515,516,517,518,519,520],"MD5 工具","MD5 哈希","文件 MD5","MD5 Base64","文本 MD5","MD5 摘要",{"slug":522,"title":523,"description":524,"status":413,"icon":525,"keywords":526,"featured":398},"qr-code","二维码生成与识别工具","在线生成二维码并下载 PNG 或 SVG，也可上传图片识别二维码内容；文本和图片只在浏览器本地处理。","i-lucide-qr-code",[527,528,529,530,531,532],"二维码生成","二维码识别","二维码解析","QR Code","在线二维码工具","二维码图片",{"slug":412,"title":5,"description":396,"status":413,"icon":399,"keywords":534,"featured":398},[401,402,403,404,75,405,406,407],{"slug":536,"title":537,"description":538,"status":413,"icon":463,"keywords":539,"featured":398},"sha256-generator","SHA-256 哈希工具","在线计算文本或文件的 SHA-256 摘要，支持十六进制大小写和 Base64 输出，内容仅在浏览器本地处理。",[540,541,542,543,544,545],"SHA-256 工具","SHA256 哈希","文件 SHA256","SHA256 Base64","文本 SHA256","SHA-256 摘要",{"slug":547,"title":548,"description":549,"status":413,"icon":426,"keywords":550,"featured":398},"sm2-encryption","SM2 公钥加解密工具","面向国密公钥加密生成 SM2 密钥对并处理文本，支持常见 C1C3C2 与旧式 C1C2C3 排列。",[551,552,553,554,555,556,557,558],"SM2 加密","SM2 解密","C1C3C2","C1C2C3","国密算法","SM2 密钥生成","压缩公钥","Hex 密文",{"slug":560,"title":561,"description":562,"status":413,"icon":563,"keywords":564,"featured":398},"sm4-encryption","SM4 对称加解密工具","面向国密系统使用 SM4-CBC 或 SM4-ECB 加解密文本，并与 Hex、Base64 密文接口联调。","i-lucide-lock-keyhole",[565,566,567,568,569,570,555,558,571],"SM4 加密","SM4 解密","SM4-CBC","SM4-ECB","PKCS7","NoPadding","Base64 密文",{"slug":573,"title":574,"description":575,"status":413,"icon":576,"keywords":577,"featured":398},"social-insurance","五险一金计算器","按城市、逐月工资、个人缴费基数和专项附加扣除，估算个人五险一金、累计预扣个税与税后收入。","i-lucide-calculator",[578,579,580,581,582,583],"五险一金","社保计算","公积金计算","缴费基数","税后工资","个税计算",{"slug":585,"title":586,"description":587,"status":413,"icon":563,"keywords":588,"featured":398},"symmetric-encryption","AES 对称加解密工具","使用共享密钥或口令加解密文本；默认采用 AES-256-GCM，并保留 CBC、CTR、CFB、ECB 等兼容模式。",[589,590,591,592,593,594,595,472,596,597],"AES 加密","AES 解密","AES-GCM","AES-CBC","AES-ECB","PKCS7Padding","ZeroPadding","AES AAD","AES 原始参数",{"slug":599,"title":600,"description":601,"status":413,"icon":602,"keywords":603,"featured":398},"timestamp-converter","时间戳转换工具","在线完成 Unix 时间戳与日期时间互转，自动识别秒或毫秒，支持 IANA 时区和多行批量转换。","i-lucide-clock-3",[604,605,606,607,608,609],"时间戳转换","Unix 时间戳","timestamp","日期转时间戳","时间戳转日期","毫秒时间戳",{"slug":611,"title":612,"description":613,"status":413,"icon":440,"keywords":614,"featured":398},"unicode-converter","Unicode 转换工具","在线将中文、Emoji 等普通文本转换为 \\uXXXX Unicode 转义，或把 Unicode 转义还原为可读文本，内容仅在浏览器本地处理。",[615,616,617,618,619,620],"Unicode 转换","Unicode 转中文","中文转 Unicode","Unicode 编码","Unicode 解码","Unicode 在线工具",{"slug":622,"title":623,"description":624,"status":413,"icon":625,"keywords":626,"featured":398},"yaml-json-converter","YAML 校验与 JSON 互转工具","在线校验 YAML 或 JSON 格式，并在 YAML 与标准 JSON 之间双向转换，可定位常见语法错误，内容仅在浏览器本地处理。","i-lucide-file-json-2",[627,628,629,630,631,632],"YAML 校验","YAML 转 JSON","JSON 转 YAML","YAML JSON 互转","YAML 在线工具","YAML 格式检查",1784957143881]