Information Regarding Certificates

Using a Certificate Signed by a Certificate Authority

Follow the CA instructions to install your certificate on your server.

Once a valid certificate is installed, export it in PKCS12 format and convert it to PEM format using a tool like "openssl."

Instructions for Exporting an Existing Certificate

1. Open "mmc" in "Windows Run."

2. Select "File" → "Add or Remove Snap-ins."

3. Add certificates → choose "Computer Account" → click "Next" → click "Finish" → click "OK."
4. Navigate to the folder where the certificate is installed.

5. Right click the certificate and select "All Tasks" → "Export" to launch the "Certificate Export Wizard."
6. Choose to export the private key with the certificate.

7. Save the certificate and private key in the PKCS12 (.PFX) format.

8. Protect the private key to a security principal or by using a password.

9. Enter a certificate name then click "Next" and "Finish."

Converting a PKCS12 Certificate to PEM

1. (Optional) Install the openssl command line utility.
2. Open a command prompt and type the following command, replacing the certificate names and password:

Generating a Self-Signed Certificate with openssl

1. Open a command prompt and type the following command, replacing the inputs with valid local paths:

Note: The entries starting from "Country Name" may be ignored.