Skip to content
{ claus.conrad }

Convert SSL certificate from Apache to IIS

Created July 6, 2009 · Updated June 27, 2026 · 1 min read · 70 words

Problem:

Section titled “Problem:”

You have generated a CSR using OpenSSL and submitted it to a CA. Your certificate has been issued, but you now want to import it into Windows for use with IIS.

Solution:

Section titled “Solution:”
  1. Convert the received public key from its PKCS7 format to PEM format:
    openssl pkcs7 -outform PEM -in public.p7b -out public.pem -print_certs
  2. Combine the public keys and the private key into a password-protected PKCS12 file:
    openssl pkcs12 -export -out publicandprivate.pfx -in public.pem -inkey private.key

Hope this helps someone (or at least me next year…).