We have to give our Certificate - managed by one of our suppliers to another one of our supplier. from one we got PFX file, another needs PEM files.
I've ran the conversion using OpenSSL and I've uploaded the files, but they say our chain/bundle part is incorrect.
it looks like this:
Bag Attributes Microsoft Local Key set: <No Values> localKeyID: 01 00 00 00 friendlyName: le-4a0ecc93-da0b-4b35-964a-16469b2508cd Microsoft CSP Name: Microsoft RSA SChannel Cryptographic Provider Key Attributes X509v3 Key Usage: 10 -----BEGIN PRIVATE KEY----- -----END PRIVATE KEY----- Bag Attributes localKeyID: 01 00 00 00 friendlyName: *.domain.com subject=/OU=Domain Control Validated/CN=*.domain.com issuer=/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2 -----BEGIN CERTIFICATE----- -----END CERTIFICATE-----
And our supplier requesting certificate says it's incomplete.
Would there be difference between the above and three separate
.KEY files they ask for?
EDIT: Yes, the SP asking for certificate is hosting part of our website, which is not yet encrypted. We need to secure it as some of our customer data is being passed through it. Follow-up question: So is it possible that we were given incomplete pfx file? Command used to extract the data:
openssl pkcs12 -in cert.pfx -out keyStore.pem -nodes