derdump - Man Page

Dumps C-sequence strings from a DER encoded certificate file


derdump [-r] [-i input-file] [-o output-file]


This documentation is still work in progress. Please contribute to the initial review in Mozilla NSS bug 836477[1]


derdump dumps C-sequence strings from a DER encode certificate file



For formatted items, dump raw bytes as well

-i DER encoded file

Define an input file to use (default is stdin)

-o output file

Define an output file to use (default is stdout).

Additional Resources

NSS is maintained in conjunction with PKI and security-related projects through Mozilla dn Fedora. The most closely-related project is Dogtag PKI, with a project wiki at PKI Wiki[2].

For information specifically about NSS, the NSS project wiki is located at Mozilla NSS site[3]. The NSS site relates directly to NSS code changes and releases.

Mailing lists: and

IRC: Freenode at #dogtag-pki


The NSS tools were written and maintained by developers with Netscape, Red Hat, Sun, Oracle, Mozilla, and Google.

Authors: Gerhardus Geldenhuis <>. Elio Maldonado <>, Deon Lackey <>


Licensed under the Mozilla Public License, v. 2.0. If a copy of the MPL was not distributed with this file, You can obtain one at


  1. Mozilla NSS bug 836477
  2. PKI Wiki
  3. Mozilla NSS site


19 May 2021 nss-tools NSS Security Tools