Analyze PKCS#7/CMS file structure

Introspects PKCS#7/CMS binary data and returns structured metadata including
signers, recipients, algorithms, certificates, and conversion feasibility.

Supports SignedData, EnvelopedData, and SignedAndEnvelopedData.
Provides actionable guidance for migration to JOSE (JWE/JWS).

Current support: Single signer and single recipient only
Multi-actor support: Planned for future release (multi-signer/multi-recipient with JSON serialization)

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params

PKCS#7/CMS analysis request with Base64-encoded DER data

Request for analyzing PKCS#7/CMS file structure and extracting metadata.

string
required

PKCS#7/CMS data encoded as Base64 (DER format)

string

Optional key identifier for decrypting EnvelopedData to analyze inner SignedData.
Required only if the PKCS#7 structure is encrypted and inner content analysis is needed.
Must reference a key imported via /api/migration/private-keys.

boolean
Defaults to false

Policy flag: validate certificate chains using PKIX (default: false).
If true, performs full certificate chain validation including:

  • Validity period checks (notBefore/notAfter)
  • KeyUsage extension validation
  • CRL/OCSP revocation checking (if available)
boolean
Defaults to false

Policy flag: validate RFC 3161 timestamps (default: false).
If true, verifies timestamp token signature and messageImprint.
Not yet available.

Headers
string
enum
Defaults to application/json

Generated from available response content types

Allowed:
Responses

Language
Credentials
Bearer
JWT
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json
application/problem+json