Certificate Files: Common Extensions and Conversions (2024)

This section briefly explains common extensions for SSL certificate and keystore files, as well as how to convert these files between formatting types.

Common File Extensions

Certificate

Certificate files: .crt, .cer, .ca-bundle, .p7b, .p7c, .p7s, .pem

Keystore Files: .key, .keystore, .jks

Combined certificate and key files: .p12, .pfx, .pem

Converting Files

To set up SSL for your MicroStrategy environment, you will need to have your certificates and key files in .pem, .crt, and .key formats. If you have files from your IT administrator that do not have these extensions, they must be converted.

The following commands to convert between file types:

• Convert a DER format file to PEM format

  Copy

  openssl x509 -inform der -in certificate.cer -out certificate.pem

• Convert a .pfx or .p12 containing a private key and certificates to PEM

  Copy

  openssl pkcs12 -in certkey.pfx -out certkey.pem -nodes

  • Add -nocerts to only output the private key.
  • Add -nokeys to only output the certificates.
• Convert .keystore or .jks to .key: Requires two commands to be run.

  1. Convert the file to the .p12 extension

     Copy

     keytool -importkeystore -srckeystore privatekey.keystore -destkeystore privatekey.p12 -srcstoretype jks -deststoretype pkcs12 -srcstorepass password -deststorepass password

  2. Convert to the .key extension

     Copy

     openssl pkcs12 -nocerts -nodes -in newkeystore.p12 -out keyfile.key