What is a pfx certificate

what is a pfx certificate

Entrust Certificate Services Support Knowledge Base

Audience: General

Last Modified: 2009-11-20 11:34:53.0

TN 7924 - How do I convert a .pfx to be used with an Apache server?

Question: How do I convert my .pfx file to be used with an Apache server?


The Apache server will require the following two files:

1 - Server.ker. the private key associated with the certificate

2 - Server.crt. the public SSL certificate issued by Entrust

Using Open SSL, you can extract the certificate and private key.

To extract the private key from a .pfx file, run the following OpenSSL command:

openssl.exe pkcs12 -in myCert.pfx -nocerts -out privateKey.pem

The private key

that you have extract will be encrypted. To unencrypt the file so that it can be used, you want to run the following command:

openssl.exe rsa -in privateKey.pem -out private.pem

The resulting private.pem file should be the key file that you want. Open it up using notepad to make sure there is not additional information showing up as text in the file. There may be some additional lines displaying the DN and Bag Attributes. Remove all of this from the file so that you end up with something like this:







To get the corresponding Server Certificate, you will run the following OpenSSL command:

Source: www.entrust.net

Category: Forex

Similar articles: