SSL Certificate
Digital Certificate
Domain
Hosting
Support
About Us
USD
English
Create account

SSL Converter

Convert your SSL cert to different formats

Select Convert Formats

Select Formats
Convert Formats
JDK Version

Certificate File:

Upload certificate
Upload

Private Key:

Upload private key
Upload

Private Key Password:

New Password:

Notice

  • Currently, paid certificates on the market (including Geotrust, Symantec, Digcert, Entrust, Comodo, etc.) basically support Chinese. If requesting for OV and EV certificates, it is recommended in Chinese, so that the company information will be displayed in Chinese. If for a DV certificate, English is OK.
  • Encryption Algorithm& Key Size:RSA algorithm and 2048-bit key size are the new international industry standard and enough to ensure security well without special need.
  • Domain Name:
    • Please fill in "*.yourdomain.com" if website will be secured by a wildcard SSL certificate.
    • Please input a domain name or a subdomain name for the single domain certificate.
    • Only input a main domain name secured for a multi-domain SAN SSL certificate, and then enter the rest domain names when submitting the certificate.
  • In addition to generating a CSR, the web server will also export another file called a private key. Please save the two files used in the installation of SSL certificate. If the private key is lost or compromised, you need to regenerate the CSR and reissue your SSL Certificate.
  • The SSL online tool provided by NicSRS does not generate any local temporary files. Don't worry about information leakage.
  • All users of the SSL online tool provided by NicSRS can use it for free. NicSRS assumes no responsibility for any errors or losses caused by the user during and after use. Using this online tool means you accept this agreement.
  • If there is any bug in the process of using this online tool, please feel free to feedback to us, and we will continue to improve it.

FAQs for SSL‑Certificate Format Conversion

01/

What are the common SSL certificate formats and which servers do they apply to?

DER: Binary‑encoded certificate format, binary variant of PEM. File extensions: .DER .CER .CRT. Primarily used for Java platforms.
PEM: Base64‑encoded format. It starts with “-----BEGIN CERTIFICATE-----” and ends with “-----END CERTIFICATE-----”. File extensions: .PEM .CER .CRT. Mainly for Apache and Nginx web servers.
PKCS#7: Cryptographic Message Syntax Standard. No private key included; certificate chain & end‑user certificate are stored separately. Extensions: .P7B .P7C .SPC. Used for Tomcat and Windows Server.
PKCS#12: Personal Information Exchange Syntax Standard. Contains private key, certificate chain, end‑user certificate, and password‑protected. Extensions: .P12 .PFX. Mainly for Windows Server (IIS).
JKS: Short for Java KeyStore. Contains private key, certificate chain, end‑user certificate with password protection. File extension: .jks. Used for Tomcat servers.

02/

What format do you normally receive for an issued SSL certificate?

Normally, CA‑issued SSL certificates are delivered to your email, mostly in .pem or .crt format. If your server cannot accept these formats, use a certificate converter tool. For SSL certificates purchased on NicSRS platform, you may directly download certificates in your required format for server deployment.