Convert PEM to PKCS#12

Package cert + key + CA into a .p12 file

openssl pkcs12 -export -in cert.pem -inkey key.pem -certfile ca.pem -out bundle.p12 -name myalias
tool
openssl27 commands
tags
opensslsecurity

More openssl commands

  • Extract cert from PKCS#12
    openssl pkcs12 -in bundle.p12 -nokeys -out cert.pem && openssl pkcs12 -in bundle.p12 -nocerts -nodes -out key.pem

    Split .p12 into separate cert and key PEM files

  • Check live TLS cert
    echo | openssl s_client -connect example.com:443 -servername example.com 2>/dev/null | openssl x509 -noout -dates -subject -issuer

    Show expiry and issuer of a live TLS certificate

  • Check full cert chain
    openssl s_client -connect example.com:443 -showcerts 2>/dev/null | openssl crl2pkcs7 -nocrl | openssl pkcs7 -print_certs -noout -text | grep -E 'Subject:|Issuer:'

    Display full chain: leaf → intermediate → root

  • Encrypt file with AES-256
    openssl enc -aes-256-cbc -pbkdf2 -in secret.txt -out secret.enc

    Password-encrypt a file with AES-256-CBC + PBKDF2

  • Decrypt AES-256 file
    openssl enc -d -aes-256-cbc -pbkdf2 -in secret.enc -out secret.txt

    Decrypt a file encrypted with the enc command above

all 27 openssl commands