Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I am working on moving a site from Rackspace Cloud Sites onto a server running IIS and need to get the SSL certificate imported into IIS. All I have at the moment for the SSL certificate is what Rackspace gives me.
The text of the certificate -----BEGIN CERTIFICATE----- etc. -----END CERTIFICATE-----

And the text of the private key -----BEGIN RSA PRIVATE KEY----- etc. -----END RSA PRIVATE KEY-----

From what I've found I need to have a .pfx file to import the certificate. How would I get one from having the text of the certificate + the text of the key?

share|improve this question

2 Answers 2

up vote 5 down vote accepted

You need to combine your issued certificate and unencrypted private key into a .pfx file (PKCS#12 format) in order to import it into IIS.

Use the following OpenSSL command:

openssl pkcs12 -export -out "output.pfx" -inkey "Unencrypted_Private_Key.pem"
-in  "Issued_Certificate.cer" -certfile CACert.crt

The certificate and key files are just text files with .cer and .pem extensions, respectively.

How to decrypt an encrypted private key:

openssl rsa -in "Encrypted_Private_Key.pem" -out "Decrypted_Private_Key.pem"

See more OpenSSL commands and this helpful online SSL tool.

If your PFX file was created correctly, but you receive an error like "Connection Interrupted" when browsing SSL on your website after installing the certificate, try rebooting the server. It has worked for me in the past. If it doesn't, your private key probably does not match your certificate.

share|improve this answer
+1 Much better presented answer. –  Helvick Aug 21 '10 at 0:40
Don't give your private key to some random website on the Internet. You may as well not even bother with encryption. –  Adam Lassek Jul 25 '14 at 3:29

OpenSSL will do this for you, given the cert and keys like this you can combine them into a PKCS#12 format which should work in most cases where .PFX is specified. The documentation for OpenSSL has detailed examples.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.