Shulou(Shulou.com)05/31 Report--

This article mainly introduces "what is the certificate format of the server". In the daily operation, I believe that many people have doubts about the certificate format of the server. The editor consulted all kinds of materials and sorted out simple and easy-to-use methods of operation. I hope it will be helpful for you to answer the question of "what is the certificate format of the server?" Next, please follow the editor to study!

Depending on the server and the version of the server, we need to use different certificate formats. As far as the mainstream servers in the market are concerned, there are probably the following formats:

.DER .CER, the file is in binary format, saving only the certificate, not the private key.

.PEM, usually in text format, can save certificates and private keys.

.CRT, which can be in binary format or text format, is the same as .der format and does not save the private key.

.PFX .P12, binary format, contains both certificate and private key, generally password protected.

.JKS, binary format, contains both certificate and private key, generally password protected.

DER

This format is binary file content, and Java and Windows servers prefer to use this encoding format.

OpenSSL View

Openssl x509-in certificate.der-inform der-text-noout

Convert to PEM:

Openssl x509-in cert.crt-inform der-outform pem-out cert.pem

PEM

Privacy Enhanced Mail, usually in text format, with-BEGIN... Start with-END... The end. The middle content is BASE64 encoding. This format can save certificates and private keys, and sometimes we change the suffix of the private key in PEM format to .key to distinguish the certificate from the private key. You can look at the contents of the document for details.

This format is commonly used on Apache and Nginx servers.

OpenSSL View:

Openssl x509-in certificate.pem-text-noout

Convert to DER:

Openssl x509-in cert.crt-outform der-out cert.der

CRT

The abbreviation of Certificate may be in PEM format or DER format. Please refer to the first two formats for viewing.

PFX

Predecessor of PKCS#12, which is binary, and the certificate and private key are stored in a PFX file. It is commonly used for IIS servers on Windows. Reformatted files usually have a password to ensure the security of the private key.

OpenSSL View:

Openssl pkcs12-in for-iis.pfx

Convert to PEM:

Openssl pkcs12-in for-iis.pfx-out for-iis.pem-nodes

JKS

Java Key Storage, it is easy to know that this is the proprietary format of JAVA, which can be converted using a tool called keytool in JAVA. Commonly used for Tomcat servers.

At this point, the study of "what is the certificate format of the server" is over. I hope to be able to solve your doubts. The collocation of theory and practice can better help you learn, go and try it! If you want to continue to learn more related knowledge, please continue to follow the website, the editor will continue to work hard to bring you more practical articles!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.