{
  "title": "Public key fingerprint calculator",
  "human_url": "https://happytails.ai/en/developer-tools/public-key-fingerprint-calculator/",
  "agent_url": "https://happytails.ai/agents/en/developer-tools/public-key-fingerprint-calculator/",
  "language": "en",
  "markdown_url": "https://happytails.ai/en/developer-tools/public-key-fingerprint-calculator.md",
  "content": "Public key fingerprint calculator\nCalculate the standard fingerprints of a public key, certificate or OpenSSH key in your browser. Compare SPKI pins, OpenSSH SHA256 values, JWK thumbprints and certificate fingerprints in one report.\nHow can we improve this tool?\nReport a problem or share an idea.\nPlease leave out private information. Your message and the tool name go to our team via PostHog.\nHow to use Public key fingerprint calculator\nPaste a PEM public key, certificate or certificate request, an OpenSSH public key line or a public JWK.\nRun the tool.\nCompare the fingerprint in the format your other tool shows, then download the report.\nUseful next steps\nRSA key generator\nFile hash\nSSL checker\nFingerprint formats\nSPKI SHA-256 in Base64 is the pin-sha256 value from RFC 7469 (April 2015). OpenSSH SHA256 is unpadded Base64 of the SHA-256 of the key blob, as printed by ssh-keygen -l. The JWK thumbprint follows RFC 7638 (September 2015). Certificate fingerprints hash the whole DER certificate, matching openssl x509 -fingerprint.\nSupported keys\nRSA, EC P-256, P-384 and P-521, and Ed25519 keys are supported. Other keys still get SPKI fingerprints where the structure is valid. Key sizes match ssh-keygen -l and OpenSSL, so an Ed25519 key shows 256 bits. Legacy OpenSSH MD5 fingerprints are not offered.\nWhat it does not do\nA fingerprint identifies a key; it does not prove who owns it. Certificates are decoded, not validated against any trust store, and nothing is fetched from the network.",
  "content_format": "text/plain",
  "visibility": "public",
  "links": [
    {
      "name": "RSA key generator",
      "url": "https://happytails.ai/en/developer-tools/rsa-key-generator/"
    },
    {
      "name": "File hash",
      "url": "https://happytails.ai/en/developer-tools/file-hash/"
    },
    {
      "name": "SSL checker",
      "url": "https://happytails.ai/en/web-tools/ssl-checker/"
    }
  ],
  "tool": {
    "id": "public-key-fingerprint-calculator",
    "category": "developer-tools",
    "built": true,
    "requirements": "Input is exactly one key, certificate or certificate request of up to 200000 characters, with DER data up to 65536 bytes. Text with more than one PEM block, such as a full chain, is refused. Parsing and hashing run locally in your browser with Web Crypto. Download the JSON report with every fingerprint format.",
    "implementation": {
      "fields": [],
      "registrationFamily": "crypto-formats-reference",
      "inputMaxLength": 200000,
      "inputErrorCode": "CRYPTO_FORMATS_REFERENCE_TOO_LONG",
      "note": "Runs in your browser. Accepts one PEM public key, certificate or certificate request, an OpenSSH public key line or a public JWK of up to 200000 characters.",
      "experience": {
        "automatic": false,
        "single": false,
        "inputMaxLength": 200000,
        "inputMode": "text",
        "label": "Public key or certificate",
        "placeholder": "-----BEGIN PUBLIC KEY-----",
        "help": "Paste PEM text, an ssh-ed25519 or ssh-rsa line, or a public JWK. Up to 200,000 characters. Review the settings before running.",
        "action": null
      },
      "mode": "explicit",
      "interactive": false
    },
    "execution": "Browser interface",
    "api": null,
    "browser_agent": {
      "supported": true,
      "name": "run_current_tool",
      "discovery": "WebMCP on the human page in a supporting browser",
      "verification": "See audit/API-AUDIT.md; availability is not verification"
    }
  },
  "markdown": "# Public key fingerprint calculator\n\n- Human page: https://happytails.ai/en/developer-tools/public-key-fingerprint-calculator/\n- Markdown: https://happytails.ai/en/developer-tools/public-key-fingerprint-calculator.md\n- Structured JSON: https://happytails.ai/agents/en/developer-tools/public-key-fingerprint-calculator/index.json\n- Visibility: public\n\n## Tool capabilities\n\n| Property | Value |\n| --- | --- |\n| Tool ID | `public-key-fingerprint-calculator` |\n| Category | developer-tools |\n| Implementation | Registered implementation. Registration alone is not a production-quality guarantee. |\n| Browser execution | Use the visible action or interactive controls. |\n| Browser processing | Browser; see tool notes for network behavior. |\n| HTTP API | Not callable through HTTP. |\n| Browser-agent interface | run_current_tool |\n\n### Implementation notes\n\nRuns in your browser. Accepts one PEM public key, certificate or certificate request, an OpenSSH public key line or a public JWK of up to 200000 characters.\n\n### Inputs and settings\n\nText input: Public key or certificate.\n\nExample or placeholder shown in the interface (not a validated fixture):\n\n```text\n-----BEGIN PUBLIC KEY-----\n```\n\nPaste PEM text, an ssh-ed25519 or ssh-rsa line, or a public JWK. Up to 200,000 characters. Review the settings before running.\n\nNo additional settings are declared for this tool.\n\n### Browser-agent workflow\n\n1. Open the human page in a browser that supports WebMCP.\n2. Discover the interface exposed by that page; use its actual schema.\n3. Select files on the page first when the tool requires files.\n4. Call `run_current_tool` with valid input and settings.\n5. Inspect the returned result or error and the displayed output. Retrieve files from the displayed download links.\n\nCalls do not automatically copy or download results. Browser permissions still apply. Interface availability alone is not proof of successful execution.\n\n### Planning specification\n\nInput is exactly one key, certificate or certificate request of up to 200000 characters, with DER data up to 65536 bytes. Text with more than one PEM block, such as a full chain, is refused. Parsing and hashing run locally in your browser with Web Crypto. Download the JSON report with every fingerprint format.\n\nThis describes intended requirements. Use the implementation notes, interface schema and observed output to determine current support.\n\n### Complete machine-readable capability record\n\n```json\n{\n  \"id\": \"public-key-fingerprint-calculator\",\n  \"category\": \"developer-tools\",\n  \"built\": true,\n  \"requirements\": \"Input is exactly one key, certificate or certificate request of up to 200000 characters, with DER data up to 65536 bytes. Text with more than one PEM block, such as a full chain, is refused. Parsing and hashing run locally in your browser with Web Crypto. Download the JSON report with every fingerprint format.\",\n  \"implementation\": {\n    \"fields\": [],\n    \"registrationFamily\": \"crypto-formats-reference\",\n    \"inputMaxLength\": 200000,\n    \"inputErrorCode\": \"CRYPTO_FORMATS_REFERENCE_TOO_LONG\",\n    \"note\": \"Runs in your browser. Accepts one PEM public key, certificate or certificate request, an OpenSSH public key line or a public JWK of up to 200000 characters.\",\n    \"experience\": {\n      \"automatic\": false,\n      \"single\": false,\n      \"inputMaxLength\": 200000,\n      \"inputMode\": \"text\",\n      \"label\": \"Public key or certificate\",\n      \"placeholder\": \"-----BEGIN PUBLIC KEY-----\",\n      \"help\": \"Paste PEM text, an ssh-ed25519 or ssh-rsa line, or a public JWK. Up to 200,000 characters. Review the settings before running.\",\n      \"action\": null\n    },\n    \"mode\": \"explicit\",\n    \"interactive\": false\n  },\n  \"execution\": \"Browser interface\",\n  \"api\": null,\n  \"browser_agent\": {\n    \"supported\": true,\n    \"name\": \"run_current_tool\",\n    \"discovery\": \"WebMCP on the human page in a supporting browser\",\n    \"verification\": \"See audit/API-AUDIT.md; availability is not verification\"\n  }\n}\n```\n\n## Page guide\n\nCalculate the standard fingerprints of a public key, certificate or OpenSSH key in your browser. Compare SPKI pins, OpenSSH SHA256 values, JWK thumbprints and certificate fingerprints in one report.\n\nHow can we improve this tool?\n\nReport a problem or share an idea.\n\nPlease leave out private information. Your message and the tool name go to our team via PostHog.\n\n### How to use Public key fingerprint calculator\n\n1. Paste a PEM public key, certificate or certificate request, an OpenSSH public key line or a public JWK.\n2. Run the tool.\n3. Compare the fingerprint in the format your other tool shows, then download the report.\n\n## Useful next steps\n\n- [RSA key generator](https://happytails.ai/en/developer-tools/rsa-key-generator/) ([Markdown](https://happytails.ai/en/developer-tools/rsa-key-generator.md))\n\n- [File hash](https://happytails.ai/en/developer-tools/file-hash/) ([Markdown](https://happytails.ai/en/developer-tools/file-hash.md))\n\n- [SSL checker](https://happytails.ai/en/web-tools/ssl-checker/) ([Markdown](https://happytails.ai/en/web-tools/ssl-checker.md))\n\n## Fingerprint formats\n\nSPKI SHA-256 in Base64 is the pin-sha256 value from RFC 7469 (April 2015). OpenSSH SHA256 is unpadded Base64 of the SHA-256 of the key blob, as printed by ssh-keygen -l. The JWK thumbprint follows RFC 7638 (September 2015). Certificate fingerprints hash the whole DER certificate, matching openssl x509 -fingerprint.\n\n### Supported keys\n\nRSA, EC P-256, P-384 and P-521, and Ed25519 keys are supported. Other keys still get SPKI fingerprints where the structure is valid. Key sizes match ssh-keygen -l and OpenSSL, so an Ed25519 key shows 256 bits. Legacy OpenSSH MD5 fingerprints are not offered.\n\n### What it does not do\n\nA fingerprint identifies a key; it does not prove who owns it. Certificates are decoded, not validated against any trust store, and nothing is fetched from the network.\n"
}