Extracting x509 certificates from a p7m file

A client emailed me a new TLS certificate for their server as a p7m file. Normally I’d get this from the CA as a PEM encoded x509 certificate.

Fortunately openssl can easily convert this

openssl pkcs7 -inform DER -in certificate.p7m -print_certs -out certificate.pem

I used a text editor to separate the SSL certificate from the intermediate certificates, since I have Apache configured to expect these in separate file.

Like this:

Be the first to like this post.

Tags: linux, openssl

This entry was posted on April 21, 2010 at 8:10 pm and is filed under linux, openssl. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

One Response to “Extracting x509 certificates from a p7m file”

mp3cut online Says:
January 28, 2011 at 8:35 pm | Reply
Normally I’d get this from the CA as a PEM encoded x509 certificate.?

Leave a Reply Cancel reply

Enter your comment here...

Fill in your details below or click an icon to log in:

Email (required) (Not published)

Name (required)

Website

You are commenting using your WordPress.com account. ( Log Out / Change )

You are commenting using your Twitter account. ( Log Out / Change )

You are commenting using your Facebook account. ( Log Out / Change )

Cancel

Connecting to %s

Foo