Our helpful SSL hints

Export/Import a SSL certificate with Apache/OpenSSL

Export your SSL certificate

To export your SSL certificate with Apache, you must combine your SSL certificate, the intermediate certificate and your private key in a backup file .pfx.

Run the following command:

openssl pkcs12 -export -out SSL247Backup.pfx -inkey yourprivatekey.txt -in yourSSLcertificate.crt -certfile intermediate.crt

Adapt the command with yourprivatekey.txt (the path to your private key file), yourSSLcertificate.crt (the path to your SSL certificate) and intermediate.crt (the path to your intermediate certificate).

Import your SSL certificate

Once you have your .pfx file, run the following command to get the private key file:

openssl pkcs12 -in SSL247Backup.pfx -out privatekey.txt -nodes

Open the privatekey.txt file and save its content to a .key file. You can now follow our INSTALL.

Export/Import a SSL certificate with Microsoft IIS 5.0, 6.0 & 7.0 and Microsoft Exchange 2007

Export your SSL certificate

1. Launch the Microsoft Management Console (MMC) (Start > Run > mmc).

2. Click File and choose Add/Remove Snap In.

3. Click Add, choose Certificates and click Add.

4. Choose Computer Account, click Next, choose Local Computer and click Finish.

5. Close the two windows and in the MMC, click on + to expand the Certificates (Local Computer) console tree.

6. Find your personal folder and expand Certificates.

7. Right-click on the certificate you want to export and choose All Tasks > Export.

8. Follow the wizard and choose to: "Yes, export the private key", "Include all certificates in certificate path if possible" and "Leave default settings".

9. Choose a path where to save your certificate and the process is finished.

Import your certificate SSL

1. Launch the Microsoft Management Console (MMC) (Start > Run > mmc).

2. Click File and choose Add/Remove Snap In.

3. Click Add, choose Certificates and click Add.

4. Choose Computer Account, click Next, choose Local Computer and click Finish.

5. Close the two windows and in the MMC, click on + to expand the Certificates (Local Computer) console tree.

6. Find your personal folder and expand Certificates.

7. Right-click on the folder "Personal Certificates Store" and choose All Tasks > Import.

8. Select the certificate you wish to import. Choose to "Automatically place the certificates in the certificate stores based on the type of the certificate" when prompted.

Renew your SSL Certificate with Microsoft IIS 5.0 & 6.0

Do not use the Renew the current certificate option in the Server Certificate wizard. This option will make your existing certificate go offline for the duration of the renewal process. Instead, please follow these instructions:

1. In IIS, create a temporary site.

2. Create a new CSR with Microsoft IIS 5.0 & 6.0 and send it to us.

3. Once your order is processed, NSTALLMICROSOFTIIS5AND6 for this temporary site.

4. You must now replace your old certificate in the live site with the new certificate in the temporary site.

5. Right-click on your live site and click Properties. Go to Directory Security and click Server Certificate.

6. Select Replace the current certificate and click Next.

7. Select the new certificate from the list. Click Next and Finish.

Your old certificate has now been replaced with the new certificate.

Convert my certificate file with OpenSSL

.PEM to .DER
openssl x509 -outform der -in certificate.pem -out certificate.der

.PEM to .P7B
openssl crl2pkcs7 -nocrl -certfile certificate.cer -out certificate.p7b -certfile CACert.cer

.PEM tp .PFX
openssl pkcs12 -export -out certificate.pfx -inkey privateKey.key -in certificate.crt -certfile CACert.crt

.DER to .PEM
openssl x509 -inform der -in certificate.cer -out certificate.pem

.PEM to .PFX
openssl pkcs12 -export -out certificate.pfx -inkey privateKey.key -in certificate.crt -certfile CACert.crt

.DER to .PEM
openssl x509 -inform der -in certificate.cer -out certificate.pem

.P7B to .PEM
openssl pkcs7 -print_certs -in certificate.p7b -out certificate.cer

.P7B to .PFX
openssl pkcs7 -print_certs -in certificat.p7b -out certificate.cer

openssl pkcs12 -export -in certificate.cer -inkey privateKey.key -out certificate.pfx -certfile CACert.cer

.PFX to .PEM
openssl pkcs12 -in certificate.pfx -out certificate.cer -nodes