Certificate converter
Convert SSL/TLS certificates between PEM, DER, P7B and PFX, for example from the files a certificate authority sent you to the PFX a Windows server wants.
Your files
The .key file is not password protected. Keep it somewhere only the server can read.
Certificates included, in order
Or do it yourself:
The formats
PEM
Base64 text between BEGIN CERTIFICATE and END CERTIFICATE lines, usually named .pem, .crt, .cer or .key. Most certificate authorities issue in this format, and Apache, nginx and most Linux software use it. Several certificates and the key can sit in one file, one after another.
DER
The same certificate as raw binary instead of text, named .der or sometimes .cer. Common on Java platforms. A DER file holds a single certificate, so a chain becomes one file per certificate.
P7B / PKCS#7
A bundle of a certificate and its chain, named .p7b or .p7c. It never contains the private key. Windows and Tomcat accept it.
PFX / PKCS#12
One password-protected binary file holding the certificate, its chain and the private key, named .pfx or .p12. This is what Windows and IIS import and export. Converting a PFX to PEM here gives you the certificate, the chain and the key as separate files.