---
title: Viewing key pairs
description: Learn how to view key pairs in PingOne, including their details, usage, and associated applications and identity providers.
component: pingone
page_id: pingone:settings:p1_viewing_key_pairs
canonical_url: https://docs.pingidentity.com/pingone/settings/p1_viewing_key_pairs.html
revdate: December 1, 2025
keywords: ["view key pairs", "key pair details", "key pair usage"]
section_ids:
  steps: Steps
---

# Viewing key pairs

Use the **Key Pairs** tab of the **Certificates and Key Pairs** page to view key pairs for your environment.

## Steps

1. In the PingOne admin console, go to **Settings > Certificates and Key Pairs**.

2. On the **Key Pairs** tab, browse or search for the key pair you want to view.

   ![A screenshot of the view of the certificates page.](_images/p1-cert-keypairs-page-keypair-tab.png)

3. Click the key pair to open the details panel.

   ![A screenshot of the view of the certificates page.](_images/p1-keypairs-overview-tab.png)

   The key pair overview page shows the following information on the **Overview**, **Applications**, **CSR**, and **Identity Providers** tabs.

   * **Overview**

     | Field                    | Description                                                                                                                                                                      |
     | ------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
     | **Usage Type**           | The primary usage for the certificate, such as signing and verification, encryption, SSL, or issuance.                                                                           |
     | **Subject DN**           | The subject distinguished name (DN) of the certificate. It includes attribute-value pairs such as common name (CN), organizational unit (OU), organization (O), and country (C). |
     | **Serial**               | Unique serial number generated by the certificate authority.                                                                                                                     |
     | **Issuer**               | The certificate authority that issued the certificate. The issuer value includes attribute-value pairs such as CN, OU, O, and C.                                                 |
     | **Issued Date**          | The date on which the certificate was issued.                                                                                                                                    |
     | **Expiration Date**      | The date on which the certificate will expire.                                                                                                                                   |
     | **Download Certificate** | Click to download the public certificate in either X.509 PEM (.crt) or PKCS7 DER (.p7b) format.                                                                                  |

   * **Applications**

     Lists applications that are currently using the key pair.

   * **CSR**

     Use the **CSR** tab to generate certificate signing requests (CSRs) and import the certificate authority (CA) response. Learn more in [Generating a CSR](p1_generate_csr.html).

   * **Identity Providers**

     Lists identity providers that are currently using the certificate.