Previous Topic: In PKCS#12 FormatNext Topic: Using a Utility to Generate Certificate Request


In PEM Format

You cannot directly export the certificate in PEM format from the browser certificate store, therefore you must first download it in DER format and then convert to PEM.

Preform the following steps to download certificate in DER format using Microsoft CA 2008, and then convert it to PEM:

  1. Open an Internet Explorer window.
  2. Navigate to Tools and then Internet Options.

    The Internet Options dialog appears.

  3. Activate the Content tab, in the Certificates section click Certificates.

    The Certificates dialog appears.

  4. Select the certificate that you want to download and click Export.

    The Certificate Export Wizard appears.

  5. Click Next on the Welcome screen.
  6. Choose No, do not export the private key option and then Next.
  7. Ensure that the DER encoded binary X.509 (.CER) option is selected.
  8. Click Next.
  9. Enter the File name with which you want to download the certificate and click Next.
  10. Click Finish to complete the wizard.

    The certificate is now available on your system in the specified location.

  11. Convert the certificate from DER to PEM format. You can use open source tools such as OpenSSL. Use the following command to convert using OpenSSL tool:

    openssl x509 -inform der -in <certificate>.cer -out <certificate>.pem