Create a PFX to Import a SSL Certificate

Overview

When the CSR is not generated through Everleap and the certificate authority does not provide a PFX, the CRT and KEY files can be combined into a PFX using OpenSSL or a site based converter like the one found on SSL Shopper. The latter also contains the OpenSSL Commands to combine the files.

A note on the online converter: using it means uploading your private key to a third-party website. If your certificate protects anything sensitive, use the OpenSSL commands on your own machine instead. The SSL Shopper page lists those commands alongside the converter.

Steps

  1. Click Choose File below Certificate File to Convert and select the .crt file.
  2. Click the Type to Convert To dropdown and change it to PFX/PKCS#12. The page will update with more options.
The converter with the Certificate File to Convert file picker and the Type to Convert To dropdown set to PFX/PKCS#12
  1. Click Choose File below Private Key File and select the .key file.
  2. Enter a PFX Password.
  3. Click Convert Certificate to complete the process.
The converter with the Private Key File picker, the PFX Password field and the Convert Certificate button

Next step

After saving the PFX file, import it through the Everleap Control Panel. See Importing a SSL certificate (PFX).

Notes

  • Remember the PFX password you set. The Control Panel asks for it during import, and the file cannot be imported without it.
  • Importing the certificate is not the last step. It still has to be bound to your domain name before HTTPS works. See Binding an SSL certificate.

Related Articles