ASK SSL Support Desk – Why Can I not Create a PFX From a Citrix Netscaler?

What is Ask SSL Support Desk? It is a summary of random questions that have one to the attention of Acmetek’s most awesome technical support reps. Answered and shared for the SSL Support Desk’s SSL Library which is designed to teach and educate the community. Question: I’m trying to create a pfx file for wildcard cert *.example.com in Citrix Netscaler but I am Failing to do so. Ive crosses checked with the following directions. What am I doing wrong? https://www.digicert.com/csr-creation-ssl-installation-citrix-netscaler.htm#netscaler_vpx_create_csr Short Answer: That is because Citrix Netscaler cannot create pfx files. Netscaler cannot Create pfx format files. It creates pem apache format. Netscaler systems do on the other hand have the ability to import a pfx file, but that pfx […]

Read More

How To Import Email (S/MIME) Certificate – Mozilla Thunderbird?

Before following these instructions, please make sure that you have a copy of your Client (S/MIME) Email Certificate in a PFX/P12 (PKCS#12) format. Typically this file will have a .p12 or .pfx extension consisting of both your public and private keys. When exporting your Client/Email Certificate from wherever it resides there may be a option to export the private key. This option will give you your pfx file. Some applications by default will automatically include the private key  thus giving you a pfx file. Note: These instructions are based on a Windows Operating System. Locations of the options presented below may vary in other operating systems. Step 1: Importing your Email Certificate into Thunderbird: Open Thunderbird. Click on the menu […]

Read More

How to Export a Certificate From Internet Information Services (IIS) Manager.

Depending on the situation you may have to install your SSL Certificate on multiple systems. Since no SSL Certificate will work without it’s private key this scenario is based on the CSR being generated from an IIS system and the SSL Certificate has already been installed back into the system.. This will give you a PFX file that you can then perform a binding with to a website on the system or more importantly Export as a PFX/p12 file used to be imported into other server systems with pfx capability. Note: This method of of exporting the SSL Certificate with its private key off an IIS system will not append any Intermediate Chain certificates that go along with the SSL Certificate […]

Read More

How To Import A Certificate Into Mac OS

Depending on the circumstance you may need to import an SSL or Code Signing Certificate into a Mac system. Typically all Mac OS systems refer to the Mac’s Keychain Access for all things pertaining to digital certificates, unless by a different design on whatever application the you are using. Mac Systems use pfx/p12 files that contain both the public & private key to perform its signing, encryption, etc.. similar to Microsoft.  Therefore, if you need to import a functional SSL or Code Signing certificate into Mac you will need a .pfx/.p12 To import your SSL or Code Signing Certificate into you Mac system perform the following. Importing your  PKCS#12 .pfx/.P12 file on Mac OS X To open Keychain Access, start by clicking on […]

Read More

How to Convert an SSL Server Certificate from Apache to PKCS12/PFX

Depending on your network you may have to move your SSL/TLS server certificate and its private key from one system to another. This article covers how to move your SSL certificate, its private key, and its intermediate CA from Apache to pfx also known as a pkcs#12 file. This will require a conversion using OpenSSL that is on the Apache System. Apache systems are very customizable. The directory location and naming of the individual files needed vary depending on your personalized system. Below are generalized instructions. We will start by assuming that you have already successfully installed the SSL certificate on the Apache web server. To move your certificate keypair from Apache to PFX perform the following: Step 1: Finding your […]

Read More

How to export a certificate from Internet Explorer

Depending on the circumstance you may need to export a certificate that has been installed in your browser. Code Signing and Mail Signing certificates purchased from a Certificate Authority (CA) usually use browsers to generate the keypair and install the certificate on the browser. After which you can then export the certificate, and distribute it to whoever or apply it to your signing application that requires it. We will assume that you have successful installed/picked-up or already have a certificate in your Internet Explorer browser. To export/backup your certificate from your Internet Explorer browser perform the following. Step 1:  Exporting your certificate from Internet Explorer: In your Internet Explorer browser click on the gear  in the upper right of the browser. Click Internet Options. Click […]

Read More

How To Export A Certificate From Firefox.

Depending on the circumstance you may need to export a certificate that has been installed in your browser. Code Signing and Mail Signing certificates purchased from a Certificate Authority (CA) usually use browsers to generate the keypair and install the certificate on the browser. After which you can then export the certificate, and distribute it to whoever or apply it to your signing application that requires it. We will assume that you have successful installed/picked-up or already have a certificate in your Firefox browser. To export/backup your certificate from your Firefox browser perform the following. Step 1:  Exporting your certificate from Firefox: In the upper right of your Firefox browser click  Click Options. In the left pain click Advanced. Under Advanced click […]

Read More