Convert PFX to PEM and upload the certificate to Plesk: A step-by-step guide

This article shows how an SSL certificate can be uploaded through AWS CLI (Command Line Interface) to the following services: Identity and Access Manager (IAM) Amazon Certificate Manager (ACM) Elastic Load Balancing (ELB) The necessary files you will need for a successful import are: Certificate issued for a particular domain name CA bundle of the ..

Once a CSR code is generated and the certificate is issued, the codes with your domain certificate and CA bundle will be emailed to you by Certificate Authority, or you can download them from SSLs.com dashboard. The installation implies performing 2 steps: uploading the required files to a needed directory on a server and creating ..

Convert PFX to PEM and upload the certificate to Plesk

Download Zip

This tutorial will guide you through the certificate installation process on the Microsoft Azure Web App. The SSL certificate can be downloaded from the SSLs.com account or the email from the Certificate Authority; it should be converted into PKCS#12 (PFX) format containing a private key.The ways to convert an SSL certificate are described below. The ..

Different servers and control panels may require SSL certificates in different file formats. In order to convert the certificates from one format to another, you can use OpenSSL package generally available on Linux machines.

You will be asked to specify the password that was used when creating the PFX file you are converting. The obtained PEM file will contain the certificate, chain certificates (optionally) and the private key.

Export the Private Key:# openssl pkcs12 -in filename.pfx -nocerts -out key.pemRemove the password from the SSL certificate (unencrypted is needed for plesk):# openssl rsa -in key.pem -out server.keyExport the certificate:# openssl pkcs12 -in filename.pfx -clcerts -nokeys -out cert.pem

Instead to the ASCII PEM format, the DER format is merely a binary representation of a certificate. The only method to discern the difference between a DER.cer file and a PEM.cer file is to open it in a text editor and look for the BEGIN/END statements. It sometimes has a file extension of.der, but it typically has a file extension of.cer. The DER format can be used to encode any sort of certificate or private key. DER is most commonly associated with Java systems. Only the DER format can be converted via the SSL Converter. Please use the OpenSSL commands on this page to convert a private key to DER.

When converting a PFX file to PEM format, OpenSSL creates a single file that contains all of the certificates and the private key. Open the file in a text editor and copy each certificate and private key (including the BEGIN/END instructions) to a separate text file, saving them as certificate.cert, CACert.cert, and privateKey.key, respectively.

By default, OpenSSL generates keys and CSRs using the PEM format. However, there might be occasions where you need to convert your key or certificate into a different format in order to export it to another system.

Multiple domains or sub-domains are allowed and can be added to your certificate in the second step. Before entering multiple domains, please aleays first enter your primary domain (common name) above and click "Create Free SSL Certificate". If the multiple domains or sub-domains pertain to multiple directories then you must use email verification or manual HTTP verification and upload verification files to the correct directories or use DNS verification.

Sometimes it is required to transfer your domains from one server to another and a related concern that often arise is, What to do with the SSL certificates?. Yes, it is possible to transfer SSL certificates used with the domain in one server to another along with the domain. Interestingly, it is possible to transfer the certificates used with your Linux/Apache/nginx servers to a Windows/IIS server and vice versa. Every server require its SSL certificate in a specific format for the server to process it, the Windows/IIS setup require the SSL in .pfx format but the Linux/Apache or Nginx servers require the certificate in .crt format and other servers like Haproxy require it in .pem format. All you need to do is export the certificates from its currently installed server and convert them to the correct certificate format as per the destination server requirement. Make sure you are exporting the certificates with its private key and any intermediate certificates used along with that certificate. We are going to discuss the exporting of SSL certificates from different server types, their conversion and installation of the converted certificates in their destination. 2ff7e9595c