A .PFX (Personal Information Exchange) File is used to store Certificate and its private and public keys. For example, if we need to transfer SSL certificate from one windows server to other, You can simply export it as .pfx file using IIS SSL export wizard or MMC console.
Sometimes we need to extract private key and certificate from .pfx file, but we can’t directly do it. This article can be helpful for you to do the same. This article will also helpful for you to migrate SSL certificate to AWS ELB because ELB required private key and certificate separately.
In order to use below commands, you must have OpenSSL installed on your Windows or Linux system
Extract Private Key from PFX
The following command will extract the private key from the .pfx file. A new file private-key.pem will be created in current directory. This command required password set on the pfx file.
openssl pkcs12 -in myfile.pfx -nocerts -out private-key.pem -nodes Enter Import Password:
Extract Certificate from PFX
Then extract the certificate file. The following command will extract the certificate from the .pfx file. You can find the certificate in file named certificate.crt.
openssl pkcs12 -in myfile.pfx -nokeys -out certificate.crt Enter Import Password: