Solved

identifying the proper extensions for .txt SSL certificates

Posted on 2014-01-27
1
347 Views
Last Modified: 2014-03-05
Hello, I have some SSL certs in ASCII format and I am trying to identify what was the proper file type so I can save them and upload them in my systems

The three files I have are all opened in notepad , the filenames are :

root certificate.txt
chain certificate.txt
server certificate.txt

every other time i've worked with SSL I had the files either in .crt , or .cer format, or .pfx. I tried to decode them on the SSLshopper SSL decoder which uses openssl, but it does not show me what extension i need to use.

Thank you
0
Comment
Question by:sk391
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 3

Accepted Solution

by:
cristiantm earned 500 total points
ID: 39812039
Extensions are just something to give a hint to your system on what the system will find inside that file.

Certificate files can be basically in two formats: DER or PEM. DER is ANS.1 binary encoded, and PEM is base64 encoded with some header and footer (all printable chars, probably this is what you mean with ASCII format).

Windows will identify CER and CRT extensions as certificates, no matter if the file is in DER or PEM.

Openssl will assume the file is PEM, no matter the extension. If you want to inform a DER file, you need to use the -inform DER parameter when calling it.

From [1] it seems that you need them in PEM for the tool you cite. But the extension does not matter. In fact, if you are talking about that tool, the extension really can not even be seen by the tool since you can only paste the content of the file.

For the system that you want to upload the files, it will depend on the system you are talking about.

Side note about PFX: .PFX usually is a PKCS#12 file, that is not a certificate file. It is another format, that is used for Key transport and may contain a certificate inside. Nut it is not a *certificate* extension/format.

[1] http://www.sslshopper.com/certificate-decoder.html
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Debug Tools to analyse IIS process: This article focus on taking memory dumps from IIS to determine which code is taking more time and to analyse which calls hangs/causes more CPU usage. To take dumps,download the following. Install1: To st…
A phishing scam that claims a recipient’s credit card details have been “suspended” is the latest trend in spoof emails.
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question