Comments on: Converting SSL-certificates from CRT format to PEM

By: Twirrim

Twirrim — Tue, 20 Jul 2010 20:41:51 +0000

Thanks for the blog. Not sure that you need to do this in two stages though?

Just specifying “-outform PEM” in the first command created an identical file to doing it in two stages.

By: Jamie

Jamie — Wed, 03 Mar 2010 19:28:50 +0000

Many thanks

By: piri

piri — Sat, 30 Jan 2010 18:59:38 +0000

Leandro, that’s not necessarily true. Some CRT files might even use DER format

By: Leandro

Leandro — Tue, 01 Dec 2009 18:55:46 +0000

CRT is just a common extension, but the format is PEM in both cases. For a prove of that just take a CRT certificate, apply the commands listed above and compare the resultant file with the original. You will see that they are exactly the same.

By: ppsk8358

ppsk8358 — Wed, 18 Nov 2009 14:55:05 +0000

Thanks for your help. It function now….

By: admin

admin — Wed, 03 Jun 2009 07:00:33 +0000

Hi James,

This seems to imply that the file you use for input does not
contain a “—–BEGIN CERTIFICATE—–”-line, which means
the previous command didn’t work or that your syntax is
incorrect. Could you paste the exact commands that you ran and what your original filenames were?

By: James

James — Tue, 02 Jun 2009 19:30:24 +0000

Tried this on a GoDaddy certificate. The first command worked, but the second one returned:

unable to load certificate
12085:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: TRUSTED CERTIFICATE

(OpenSSL 0.9.8k)

By: Mike Hall

Mike Hall — Tue, 04 Nov 2008 17:02:48 +0000

Thanks, your steps also worked for Network Solution’s CRT files.