Support Center - FAQ

Domain
SSL Certificates
Reseller Hosting
Website Builder
Email Solution
Value Added Service

Browse by Category: Keywords:
How to convert a certificate into the appropriate format
| Views: 20508

Solution

If your server/device requires a different certificate format other than Base64 encoded X.509, a third party tool such as OpenSSL can be used to convert the certificates into the appropriate format.

For information on OpenSSL please visit: www.openssl.org

Note: OpenSSL is an open source tool that is not provided or supported by GeoTrust

Some common conversion commands are listed below:

Note: The PEM format is the most common format used for certificates. Extensions used for PEM certificates are cer, crt, and pem. They are Base64 encoded ASCII files. The DER format is the binary form of the certificate. DER formatted certificates do not contain the "BEGIN CERTIFICATE/END CERTIFICATE" statements. DER formatted certificates most often use the '.der' extension.


Convert x509 to PEM

openssl x509 -in certificatename.cer -outform PEM -out certificatename.pem



Convert PEM to DER

openssl x509 -outform der -in certificatename.pem -out certificatename.der



Convert DER to PEM

openssl x509 -inform der -in certificatename.der -out certificatename.pem



Note: The PKCS#7 or P7B format is stored in Base64 ASCII format and has a file extension of .p7b or .p7c. 
A P7B file only contains certificates and chain certificates (Intermediate CAs), not the private key. The most common platforms that support P7B files are Microsoft Windows and Java Tomcat.

Convert PEM to P7B

openssl crl2pkcs7 -nocrl -certfile certificatename.pem -out certificatename.p7b -certfile CACert.cer



Convert PKCS7 to PEM

openssl pkcs7 -print_certs -in certificatename.p7b -out certificatename.pem




Note: The PKCS#12 or PFX format is a binary format for storing the server certificate, intermediate certificates, and the private key in one encryptable file. PFX files usually have extensions such as .pfx and .p12. PFX files are typically used on Windows machines to import and export certificates and private keys.

Convert pfx to PEM

openssl pkcs12 -in certificatename.pfx -out certificatename.pem



Convert PFX to PKCS#8
Note: This requires 2 commands

Step 1: Convert PFX to PEM

openssl pkcs12 -in certificatename.pfx -nocerts -nodes -out certificatename.pem



Step 2: Convert PEM to PKCS8

openSSL pkcs8 -in certificatename.pem -topk8 -nocrypt -out certificatename.pk8



Convert P7B to PFX
Note: This requires 2 commands

Step 1: Convert P7B to CER

openssl pkcs7 -print_certs -in certificatename.p7b -out certificatename.cer



Step 2: Convert CER and Private Key to PFX

openssl pkcs12 -export -in certificatename.cer -inkey privateKey.key -out certificatename.pfx -certfile  cacert.cer


OnlineNIC's mission is to help you grow business, no matter you are small or big.

Join our free reseller program with more than 10,000 resellers worldwide

Become Reseller NOW

Join Our Newsletter & Marketing Communication

We'll send you news and offers.

Company Info
About Us
Partners
News Center
Payment Info
Testimonials
Legal Policies
Domain Reseller
Domains
Business Email
Cpanel Demo
SSL certificates
Secure Site Pro
Domain Price
Escrow Service
RapidSSL
Anti-Malware Scan
Support
Value Added Services
Special Offer
Web Hosting
QuickSSL Premium
Symantec SSL
FAQ
Domain Whois
Email Services
Hosting Services
True BusinessID
Secure Site
Open/Track a Ticket
Domain
Email Plans
Reseller Hosting
True BusinessID wildcard
True BusinessID EV
Contact Us




1998-2024 OnlineNIC is an ICANN-accredited registrar. Please read our Privacy Policy, Service terms , and Dispute Policy