Working with SSL certificates in different formats is common when you work with a lot of different types of web servers. A common request for me, users have an Apache web server they want the certificate in PEM format, since 99% of my servers are Windows servers I typically only issue SSL certs in PFX format (a type of windows format). When I need to send one of these other certs there are a few ways to get the PFX into PEM format, but they can be tedious. I found a site that does all the work for me and it is free.
I am all about efficiency in my work, if there is an easier faster way to get things done I try to find it. That was the case with the requests I was getting to convert PFX files to PEM format for the few Apache servers I encounter. I was doing this process using OpenSSL and a bunch of commands, this method worked but wasn’t as fast as using a simple website to convert my files. People will balk at the idea of using a website for this purpose but I have been doing it for a long time now and have never had an issue with them. If you want to quickly convert a PFX file to PEM format follow these instructions.
- Go to https://www.sslshopper.com/ssl-converter.html
- Click Choose file button
- Navigate to your PFX you want to convert
- Click Type of current certificate (for me it detected the right format, only change if you need to)
- Click Type to convert to (again only if it isn’t correct, for me it was already PEM)
- Type in the PFX password
- Click Convert Certificate Button
After you click the Convert Certificate button the new PEM certificate will automatically download for you. Your certificate should now be PEM formatted, and the certificate will work with your Apache server (or whatever you need this PEM certificate for). This method is so much faster than having to use OpenSSL to slice up the cert, it’s a simple point and click solution. Hopefully you find this method as an efficient alternative to whatever you are doing to convert your PFX to PEM format.