Convert the certificate format

Last Updated: Jun 27, 2017

Server Load Balancer only supports certificates in the PEM format. Certificates in other formats must be converted to PEM before uploading to the certificate management system of the Server Load Balancer service. OpenSSL is recommended for format conversion.


The DER format is usually used on Java platforms.

  • Certificate conversion: openssl x509 -inform der -in certificate.cer -out certificate.pem
  • Private key conversion: openssl rsa -inform DER -outform PEM -in privatekey.der -out privatekey.pem

P7B to PEM

The P7B format is usually used in Windows Server and Tomcat.

  • Certificate conversion: openssl pkcs7 -print_certs -in incertificate.p7b -out outcertificate.cer

  • Obtain the content of [-----BEGIN CERTIFICATE-----,-----END CERTIFICATE-----]from outcertificate.cer and upload the content as a certificate.


The PFX format is usually used in Windows Server.

  • Private key extraction: openssl pkcs12 -in certname.pfx -nocerts -out key.pem -nodes
  • Certificate extraction: openssl pkcs12 -in certname.pfx -nokeys -out cert.pem
Thank you! We've received your feedback.