Server Load Balancer supports PEM certificates only. Certificates in other formats must be converted to PEM before they can be uploaded to Server Load Balancer. We recommend that you use Open SSL for conversion.

Convert DER to PEM

DER: This format is usually used on a Java platform.

  • Run the following command to convert the certificate format.
    openssl x509 -inform der -in certificate.cer -out certificate.pem
  • Run the following command to convert the private key.
    opensslrsa -inform DER -outform PEM -in privatekey.der -out privatekey.pem

Convert P7B to PEM

P7B: This format is usually used in Windows Server and Tomcat.

Run the following command to convert the certificate format.
openssl pkcs7 -print_certs -in incertificat.p7b -out outcertificate.cer

Convert PFX to PEM

PFX: This format is usually used in Windows Server.

  • Run the following command to extract the certificate format.
    openssl pkcs12 -in certname.pfx -nokeys -out cert.pem
  • Run the following command to extract the private key.
    openssl pkcs12 -in certname.pfx -nocerts -out key.pem -nodes