About PFX / PEM Converter
This free converter turns a PEM certificate and private key into a password-protected PFX (PKCS#12, .pfx or .p12) file for Windows, IIS, Azure or Java, and extracts the private key, certificate and intermediate certificates from a PFX file back into PEM. It also converts single certificates, CSRs and keys between PEM text and binary DER.
New PFX files use AES-256 encryption; tick the compatibility option for Windows Server 2016 and earlier or Java 8. Older PFX files protected with 3DES or RC2 are read too. Everything runs in your browser, so your private key is never uploaded.
How to use PFX / PEM Converter
- 01
Choose the conversion.
- 02
Paste the PEM certificate and key, or drop the .pfx, .p12 or .der file.
- 03
Download the result. PFX files are protected with the password you choose.
When to use it
- Installing a certificate on IIS or Windows Server.
- Moving a certificate from Windows to Nginx or Apache.
- Uploading a certificate to Azure, AWS or a load balancer.
- Converting a .cer DER file to PEM for Linux.
- Extracting the intermediate certificates from a PFX.
Frequently asked questions
Which PFX format is created?
A modern PFX with AES-256 by default, readable by Windows 10 and later, Windows Server 2019 and later, macOS and OpenSSL 3. Use the compatibility option for older systems.
Can it open old PFX files?
Yes. Files protected with 3DES or RC2, as made by older Windows and OpenSSL 1.x, are read as well.
Is my private key uploaded?
No. The conversion happens entirely in your browser.