Find SHA-1 and SHA-256 Fingerprints for the Right Build
An Android certificate fingerprint identifies a signing certificate using a hash algorithm. SHA-1 and SHA-256 fingerprints of the same certificate look.
APK & AAB analysis
Android Signing Certificate Checker
Read embedded signing-certificate metadata: scheme presence, SHA-1/SHA-256 fingerprints, subject, issuer and certificate dates. This does not verify cryptographic integrity or the signer’s real-world identity.
Android Signing Certificate Checker is part of APKLint, an online toolkit for inspecting Android APK files. Read embedded signing-certificate metadata: scheme presence, SHA-1/SHA-256 fingerprints, subject, issuer and certificate dates. This does not verify cryptographic integrity or the signer’s real-world identity. Upload an APK in your browser to view the relevant details; results reflect what the file itself exposes.
Drop your file here
or click to choose from your device
Accepts: .APK · up to 1 GB
Deleted after your scan. Files you upload are processed on our servers over an encrypted connection, then removed by the next hourly cleanup after analysis finishes (long scans are protected while they run). We never share them, and need no account.
About Android Signing Certificate Checker
Read embedded signing-certificate metadata: scheme presence, SHA-1/SHA-256 fingerprints, subject, issuer and certificate dates. This does not verify cryptographic integrity or the signer’s real-world identity.
Android Signing Certificate Checker is part of APKLint’s apk & aab analysis toolkit — Unpack, inspect, and break down Android packages. It’s free to use and needs no account.
Your privacy is the default: files you upload are processed on our servers over an encrypted connection and permanently deleted by a scheduled hourly cleanup after analysis finishes, and never shared.
What Android Signing Certificate Checker checks
- Signature scheme(s): v1 (JAR), v2, v3
- Certificate subject and issuer
- Serial number and validity dates
- SHA-1 and SHA-256 fingerprints
Good to know: Reads embedded certificate metadata. Signature cryptography, APK integrity, real-world identity and Play App Signing upstream are not verified.
When to use Android Signing Certificate Checker
- Best for
- Reading the full signing certificate of an APK: the v1/v2/v3 scheme in use, SHA-1 and SHA-256 fingerprints, issuer/subject, and validity dates.
- Not the right tool for
- Not a general APK breakdown; if you also want size, permissions, and structure use APK Analyzer.
- What you get back
- Certificate-centric detail: signing scheme(s), fingerprints, issuer and subject, and the validity window.
- How it differs from related APKLint tools
- It is a certificate-detail view. APK Signature Checker also reports scheme presence and certificate metadata; neither tool verifies cryptographic signing integrity.
- Limitations
- It reads what the APK presents; it cannot confirm the signer's real-world identity or Play App Signing upstream.
How to use Android Signing Certificate Checker
- Choose your APK file — Drop an .apk file onto the page, or click to select it from your device.
- Send securely — The file is uploaded over an encrypted connection to our analysis servers.
- Read your report — APKLint unpacks and inspects the package and lays out the results on screen.
- Your file is removed — It's deleted by an hourly cleanup job after analysis finishes.
Why use APKLint
Always free
Every tool is free with no login and no paywall. Reasonable file and input limits keep the free service stable.
No on-page ad banners
A clean, focused interface with no third-party ad banners cluttering your results.
Privacy-first
Files you upload are deleted by a scheduled hourly cleanup after analysis finishes, and never shared.
Open-source engines
Built on androguard for APK parsing and manifest/certificate analysis.
No sign-up
Start immediately — no account, login, or email required.
Works anywhere
Runs in any modern browser, on desktop or mobile.
Frequently asked questions
What does Android Signing Certificate Checker do?
Read embedded signing-certificate metadata: scheme presence, SHA-1/SHA-256 fingerprints, subject, issuer and certificate dates. This does not verify cryptographic integrity or the signer’s real-world identity.
Where do I find the SHA-1 for API consoles?
It's in the certificate read-out. Many Google APIs ask for the signing SHA-1 or SHA-256 — both are shown here.
Is it free to use?
Yes. Every tool on APKLint is completely free, with no sign-up and no account.
How is my data handled?
Your uploaded file and its result are processed on our servers over an encrypted connection, then removed by the next hourly cleanup after analysis finishes. We never share them.
What files can I send?
An Android APK — a .apk file — up to 1 GB.
Related tools
All product names, logos, and trademarks are property of their respective owners. APKLint is an independent toolset and is not affiliated with, endorsed by, or sponsored by Google, Android, or any other party.