Convert the certificate format

Last Updated: Dec 01, 2017

Server Load Balancer only supports certificates in the PEM format. You must convert certificates in other formats to PEM format before uploading them to the Certificate Management system of Server Load Balancer. We recommend using Open SSL to convert certificate formats.

DER to PEM

The DER format is preferred on Java platforms.

  • Run the following command to convert the certificate:

    openssl x509 -inform der -in certificate.cer -out certificate.pem

  • Run the following command to convert the private key:

    openssl rsa -inform DER -outform PEM -in privatekey.der -out privatekey.pem

P7B to PEM

The P7B format is preferred in Windows Server and Tomcat.

Run the following command to convert the certificate:

openssl pkcs7 -print_certs -in incertificate.p7b -out outcertificate.cer

PFX to PEM

The PFX format is preferred in Windows Server.

  • Run the following command to convert the certificate:

    openssl pkcs12 -in certname.pfx -nokeys -out cert.pem

  • Run the following command to convert the private key:

    openssl pkcs12 -in certname.pfx -nocerts -out key.pem -nodes

Thank you! We've received your feedback.