OnlineNIC SSL Certificate tools -
to help you check, generate, verify, convert SSL certificate and
get your job done. It is simple and efficient.

Click on the specific tool tab based on your need below and proceed

SSL Checker
Certificate Decoder
CSR Decoder
Certificate Key Matcher
SSL converter
Server host name port

You may simply paste text of SSL certificate into the box below and our Decoder will check it.
Your Certificate should start with
"-----BEGIN CERTIFICATE-----"
and end with
"-----END CERTIFICATE-----"
If you want to decode certificates on your own server with OpenSSL command, use command below.

OpenSSL> x509 -in example.crt -text -noout

You may simply paste your CSR into the box below and our Decoder will check it.
Your CSR should start with
"-----BEGIN CERTIFICATE REQUEST-----"
and end with
"-----END CERTIFICATE REQUEST-----"
If you want to check CSRs on your own server with OpenSSL command, use command below.

openssl req -in example.csr -noout -text

The Certificate Key Matcher simply compares a hash of the public key from the private key, the certificate, or the CSR and tells you whether they match or not. You can check whether a certificate matches a private key, or a CSR matches a certificate on your own computer by using the OpenSSL commands below:

openssl pkey -in privateKey.key -pubout -outform pem | sha256sum
openssl x509 -in certificate.crt -pubkey -noout -outform pem | sha256sum
openssl req -in CSR.csr -pubkey -noout -outform pem | sha256sum

Your private key is intended to remain on the server. While we try to make this process as secure as possible by using SSL to encrypt the key when it is sent to the server, for complete security, we recommend that you manually check the public key hash of the private key on your server using the OpenSSL commands above.

If your server/device requires a different certificate format other than Base64 encoded X.509, a third party tool such as OpenSSL can be used to convert the certificates into the appropriate format. OpenSSL is an open source tool. You can find some common openssl commands for conversion at the bottom of page. You may also try with our free SSL Converter.

Your private key is intended to remain on the server. While we try to make this process as secure as possible by using SSL to encrypt the key when it is sent to the server, for complete security, we recommend that you manually convert SSL certificate on your server using the OpenSSL commands below.

OpenSSL Commands to Convert SSL Certificates on Your Machine
Common commands are listed below for your reference.
Convert x509 to PEM
openssl x509 -in certificatename.cer -outform PEM -out certificatename.pem
Convert PEM to DER
openssl x509 -outform der -in certificatename.pem -out certificatename.der
Convert DER to PEM
openssl x509 -inform der -in certificatename.der -out certificatename.pem
Convert PEM to P7B

Note: The PKCS#7 or P7B format is stored in Base64 ASCII format and has a file extension of .p7b or .p7c. A P7B file only contains certificates and chain certificates (Intermediate CAs), not the private key. The most common platforms that support P7B files are Microsoft Windows and Java Tomcat.

openssl crl2pkcs7 -nocrl -certfile certificatename.pem -out certificatename.p7b -certfile CACert.cer
Convert PKCS7 to PEM
openssl pkcs7 -print_certs -in certificatename.p7b -out certificatename.pem
Convert PFX to PEM
openssl pkcs12 -in certificatename.pfx -out certificatename.pem
Convert P7B to PFX

STEP 1: Convert P7B to CER

openssl pkcs7 -print_certs -in certificatename.p7b -out certificatename.cer

Step2: Convert CER and Private Key to PFX

openssl pkcs12 -export -in certificatename.cer -inkey privateKey.key -out certificatename.pfx -certfile cacert.cer

By using this website,you agree to and accpet the Service Terms, Disclaimer,Limitation of Liability,and Indemnity

Join our free reseller program with more than 10,000 resellers worldwide

Become Reseller NOW

Join Our Newsletter & Marketing Communication

We'll send you news and offers.

Company Info
About Us
Partners
News Center
Payment Info
Testimonials
Legal Policies
Domain Reseller
Domains
Business Email
Cpanel Demo
SSL certificates
Secure Site Pro
Domain Price
Escrow Service
RapidSSL
Anti-Malware Scan
Support
Value Added Services
Special Offer
Web Hosting
QuickSSL Premium
Symantec SSL
FAQ
Domain Whois
Email Services
Hosting Services
True BusinessID
Secure Site
Open/Track a Ticket
ODNAM
Email Plans
Reseller Hosting
True BusinessID wildcard
True BusinessID EV
Contact Us

   

1998-2019 OnlineNIC is an ICANN-accredited registrar. Please read our Privacy Policy, Service terms , and Dispute Policy

Submit a ticket
livechat