ToolsSSL to PFX converter

SSL to PFX converter

Turn certificate, key and CA bundle into a .pfx file

Paste your domain certificate in PEM format, or pick a .crt / .pem / .cer file.

Accepts BEGIN PRIVATE KEY and BEGIN RSA PRIVATE KEY, an RSA key without a passphrase.

The intermediate certificates your SSL provider sent (often a ca-bundle file). You can paste several.

Use plain letters, digits and symbols, ideally 8 or more. You need it when installing the PFX file.

Your private key and password are processed on your own device and never sent to our server.

Convert an SSL certificate to a PFX file

SSL providers usually send the certificate as PEM (.crt) with a private key (.key) and a CA bundle. Windows servers want a single .pfx file holding all three. This tool checks that the certificate matches the key and is still valid, then builds a password-protected .pfx right in your browser.

What is a PFX file?

PFX (also called PKCS#12, with a .pfx or .p12 extension) is one file that bundles the SSL certificate, the private key and the CA chain, locked with a password. Because it is all in one file, you install it once instead of piece by piece.

When do I need a PFX file?

When you install SSL on Windows: IIS, Plesk on Windows (it uses the Windows certificate store), Exchange, Remote Desktop, and when importing a certificate into IceWarp. Linux servers (Apache, Nginx, cPanel) usually take the .crt and .key files directly.

What is the PFX password for?

It locks the private key inside the file, so the file is useless without it. You type it when installing the file on your server. Your private key and password are processed on your own device and never sent to our server, so keep the password somewhere safe.