Converting Certificates Using OpenSSL on Windows Platform

Download and install Win64/Win32 OpenSSL first

The Win64/Win32 OpenSSL Installation Project is dedicated to providing a simple installation of OpenSSL for Microsoft Windows. It is easy to set up and easy to use through the simple, effective installer. No need to compile anything or jump through any hoops, just click a few times and it is installed, leaving you to doing real work.

• Conversion of CRT file to PEM file
  • Execute the following commands to convert an .crt file to a .pem file:

openssl x509 -in input.crt -out input.der -outform DER
openssl x509 -in input.der -inform DER -out output.pem -outform PEM

• Convert PFX file to PEM file
  • Conversion to a combined PEM file
  • To convert a PFX file to a PEM file that contains both the certificate and private key, the following command needs to be used:

openssl pkcs12 -in input.pfx -out cert.pem -nodes

• Conversion to separate PEM files
  • Extract the private key form a PFX to a PEM file with this command:

openssl pkcs12 -in input.pfx -nocerts -out key.pem

• Exporting the Certificate ONLY:

openssl pkcs12 -in input.pfx -clcerts -nokeys -out cert.pem

• Removing the password from the extracted Private Key:

openssl rsa -in key.pem -out server.key

• Check the PEM Key

openssl rsa -in key.pem -check