Decode X.509 certificates, CSRs and JKS or PKCS#12 keystores to see subject, issuer, validity, SANs, key details and fingerprints. Nothing leaves this device.