SSL Converter

Convert SSL certificates between different formats

Certificate File (.crt)

File Paste text

Select the certificate file you want to convert.

Source Format

→

Target Format

Private Key File (optional)

Required for conversion to PFX/PKCS#12.

Chain Certificate 1 (optional)

Intermediate/chain certificate for PFX bundles.

Chain Certificate 2 (optional)

Additional chain/root certificate.

PFX Password

Password to decrypt a PFX file or to encrypt the new PFX file.

PEM

.pem, .crt, .cer, .key

Base64-encoded ASCII format. Standard for Apache, Nginx and most Linux/Unix servers.

DER

.der, .cer

Binary certificate format. Commonly used with Java-based platforms like Tomcat.

P7B / PKCS#7

.p7b, .p7c

Contains certificates and chain, but no private key. Used by Windows and Java Tomcat.

PFX / PKCS#12

.pfx, .p12

Binary bundle with certificate, chain and private key in one password-protected file. Standard for Windows/IIS.

What is an SSL Converter?

An SSL Converter converts SSL certificates between different formats. Different web servers and platforms require different certificate formats. Our tool converts between PEM, DER, P7B/PKCS#7 and PFX/PKCS#12.

What formats exist?

PEM (.pem, .crt, .cer, .key) — Base64-encoded, used by Apache, Nginx and most Linux servers. DER (.der, .cer) — Binary format, common with Java platforms. P7B/PKCS#7 (.p7b, .p7c) — Contains certificates and chain, but no private key. PFX/PKCS#12 (.pfx, .p12) — Binary bundle with certificate, chain and private key, used by Windows/IIS.

When do I need a conversion?

When migrating an SSL certificate from one server to another that expects a different format. For example: From Apache (PEM) to IIS (PFX) or from Tomcat (P7B) to Nginx (PEM).