Certificate Converter
Convert between .pfx, PEM, DER and .p7b, split or join chains, extract or add the private key. Old and new .pfx files. Runs in your browser.
Every server wants certificates in a different shape: IIS and Windows want a .pfx with the key inside, nginx wants
one PEM with the full chain, Apache wants the chain separately, Java wants a .p7b, and appliances want DER. Doing
it with OpenSSL means remembering flags like -legacy, -nodes and -certfile.
Drop in whatever you have (a .pfx, PEM files, a .p7b, a key) and download it in the format you need, with the
chain in the right order. The equivalent OpenSSL command is shown for each output.
Converted in your browser. Your private keys, passwords and files never leave your device.
Everything runs on your device (WebAssembly and your browser's Web Crypto API): opening .pfx files, decrypting keys and building new files. Nothing is uploaded, stored or logged. To confirm, open your browser's developer tools (F12), go to the Network tab and convert a file: no request is made.