What is a JWKS?
A JSON Web Key Set (JWKS) is an array of public keys published at /.well-known/jwks.json so clients can verify JWTs. Local OIDC development often needs a hand-built JWKS from PEMs exported by openssl or cloud consoles.
This tool converts one or more public PEMs / certificates into a standards-shaped JWKS, optionally setting kid, use (sig/enc), and alg — all in the browser.
How to use this tool
- Paste a public PEM or X.509 certificate (add more keys as needed).
- Set kid / use / alg or leave kid blank for a SHA-256 thumbprint.
- Build and copy the jwks.json for your mock authorization server.
Frequently asked questions
Are private keys supported?
Only public material is included in the JWKS. If you paste a private JWK, private fields are stripped before export.
Is my data sent to a server?
JWKS Builder runs 100% in your browser. Inputs stay on your device and are not logged or stored by stbox servers.