Convert the certificate format

Last Updated: Sep 12, 2017

Server Load Balancer only supports certificates in the PEM format. Certificates in other formats must be converted to PEM before uploading them to the Certificate Management system of Server Load Balancer. We recommend using Open SSL to convert certificate formats.

DER to PEM

The DER format is preferred on Java platforms.

  • Run the following command to convert the certificate:

    openssl x509 -inform der -in certificate.cer -out certificate.pem

  • Run the following command to convert the private key:

    openssl rsa -inform DER -outform PEM -in privatekey.der -out privatekey.pem

P7B to PEM

The P7B format is preferred in Windows Server and Tomcat.

Run the following command to convert the certificate:

openssl pkcs7 -print_certs -in incertificate.p7b -out outcertificate.cer

PFX to PEM

The PFX format is preferred in Windows Server.

  • Run the following command to convert the certificate:

    openssl pkcs12 -in certname.pfx -nokeys -out cert.pem

  • Run the following command to convert the private key:

    openssl pkcs12 -in certname.pfx -nocerts -out key.pem -nodes

Thank you! We've received your feedback.