PFX to PEM converter
To convert PFX to PEM, drop your PFX file in the box below. It converts straight away; press Download to save the PEM. It all happens in your browser, so your file stays on your device.
Convert to
What changes
| PFX to PEM | What happens |
|---|---|
| Password | Typed in the settings, used on this device; an empty password is tried first |
| Encryption read | AES (OpenSSL 3, current Windows and macOS) and the older 3DES, RC2 and RC4 |
| Certificates | In chain order, leaf first |
| Private key | Left out unless you switch it on; then written unencrypted as PKCS#8 (BEGIN PRIVATE KEY) |
How to convert PFX to PEM
- Add your PFX. Drop the file in the box, or click to choose it. It becomes PEM straight away.
- Check the result. Look at the preview and the size. The defaults are right for most files.
- Download. Press Download to save the PEM.
Take the certificate and chain out of a Windows or macOS PFX export for servers that read PEM, and the private key too when you need it.
Questions
Drop the .pfx, type its password and download the PEM: it holds the certificate and its chain. Switch on Include the private key for a second file with the key, and keep that one safe.
No. It is written unencrypted, which is what nginx and Apache read. Anyone with that file can use the key.
A wrong password says so. Files protected with a certificate instead of a password are not read.
No. The file is read and converted in your browser, so it stays on your device.
No. The conversion happens right in your browser, so your file stays on your device. There is no account to make, either.