Extract keys & certificates from PFX, in PEM
Choose a .pfx file and get the private key and
certificate as ready-to-use PEM files. The conversion runs in your browser, so your file and
password never leave your device.
- PKCS#12
- Standard format
- 2 files
- Key + certificate
- Free
- No sign-up
Convert a PFX file
Conversion complete
Converted in your browser. Your file and password never left this device.
private.pem
Keep your private key secret. Store it somewhere safe and never share it.
cert.pem
fullchain.pem
Your certificate followed by its intermediates. Use this for Nginx ssl_certificate and most hosting panels.
ca-chain.pem
Intermediate & root certificates, in order from your certificate up. For Apache SSLCertificateChainFile.
What happens to your file
Your .pfx file is read and converted by JavaScript in your browser. The file,
the password and the private key never leave your device. If your browser cannot read a file, you can choose to
convert it on our server instead: it is sent over HTTPS, processed in a temporary folder outside the website,
and deleted in the same request. Nothing is stored or logged either way.
Private by design
Your file is converted on your own device. Nothing is uploaded, so there is nothing for us to store.
Fast & in-browser delivery
No upload and no waiting on a server. Your PEM files are ready to copy or download as soon as you click.
Server ready
Output works with Apache, Nginx, IIS, and other servers expecting PEM-formatted keys and certificates.
Everything you need to convert with confidence
Secure processing
The conversion runs in your browser, so your private key never travels over the internet. We never see your file or password.
Simple process
Choose your PFX file, enter your password, and download the converted files. No command line, no technical skills required.
Certificate & key extraction
Get both the private key and the certificate in PEM format, ready for immediate use with your web server.
Instant downloads
Copy each file or grab everything in a convenient ZIP package with properly named files.
Three steps to your PEM files
1. Choose your file
Pick your .pfx file or drop it on the form. It stays on your device; your browser does the work.
2. Enter password
Enter the password associated with your .pfx file to unlock its contents.
3. Download files
Receive your private key and certificate in PEM format — copy them or download as a ZIP.
Pro tips
- Make sure you have the correct password for your PFX file before starting.
- Keep your private key secure and never share it with unauthorized parties.
- For web servers, you'll typically need both the certificate and the private key files.
Frequently asked questions
A .pfx file (Personal Information Exchange) is a PKCS#12 archive that stores the server certificate, any intermediate certificates, and the private key in a single encrypted file. It's commonly used for securing websites, email, and other resources that require SSL/TLS.
Many web servers like Apache and Nginx, plus various applications, expect certificates and private keys in PEM format. Converting from PFX to PEM lets you use your certificate with these systems. PEM is a widely supported base64-encoded format.
The password is required to decrypt the contents of the .pfx file, which is encrypted to protect the sensitive private key it contains. Without the correct password, the file cannot be decrypted and the conversion will fail.
No. The conversion runs in your browser, so your file, password and private key stay on your device. The only exception is a file your browser cannot read: then you can choose to convert it on our server, where it is processed in a temporary folder and deleted in the same request. We never store certificate files or private keys.
You'll receive a ZIP containing cert.pem (your SSL/TLS certificate) and private.pem (your unencrypted private key), both in PEM format.
Related articles
How to extract SSL certificates from PFX: a complete guide
Extract SSL certificates from a PFX file using OpenSSL — a step-by-step guide to converting your certificates quickly and securely.
Read moreHow to renew your SSL certificates: a quick guide
Renew your SSL certificates and keep your website secure — a quick, step-by-step guide for easy certificate renewal.
Read moreReady to convert your PFX files?
Extract private keys and certificates from your PFX files in seconds. Free, private, and nothing leaves your device.
Convert now