Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have received a p7b file from my co-worker and he asked me to install it on one of our servers. It looks like p7b is same as .cert file. I looked up google to find out how to install the file and it looks like I also need to have .key file.

Is it possible to make the key file with .cert or .p7b file?

share|improve this question
No, there is no way to create a private key when you only have the public key. The entire encryption systems rests on idea that you cannot do this. – Zoredache Sep 10 '12 at 21:52
up vote 7 down vote accepted

Is it possible to make the key file with .cert or .p7b file?


Some administrators keep the private key in the same file as the public portion of the certificate, however .p7b files do not contain private keys: they only contain the public key certificate & certificate chain.
You need the corresponding .key file to use the certificate.

As Zoredache said the entire point of public key cryptography is that you have two parts: A public half (.cert file) which encrypts data, and a private half (.key file) which lets you decrypt it again.

The contents of the cert file are given to everyone who connects to your server. It would defeat the purpose of encrypting data if that information were usable to decrypt the traffic too.

For more information refer to the Wikipedia page on public-key cryptography and/or the page on SSL/TLS

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.