PEM

PEM (Privacy-Enhanced Mail) wraps binary DER data in base64 with BEGIN/END markers. Used for TLS certificates, private keys, public keys, CSRs, and SSH keys. Decode extracts the binary payload and shows it as hex. Encode wraps hex data in PEM armor with the specified type label.