How to convert .P12 Certificate (ECC crypted) to .PEMs

Lynch, Pat Pat.Lynch at
Wed May 25 19:23:02 UTC 2022

Try adding the following command line arguments:   -outform pem

From: openssl-users <openssl-users-bounces at> On Behalf Of Beilharz, Michael
Sent: Wednesday, May 25, 2022 3:10 AM
To: 'openssl-users at' <openssl-users at>
Subject: How to convert .P12 Certificate (ECC crypted) to .PEMs

CAUTION: Email originated externally.  Do not click links or open attachments unless you recognize the sender and know the content is safe.
Hi OpenSSL Community,

actual I have to convert a .P12 certificate (RSA crypted/created) into .PEM certificates,
I use the following commands:
openssl pkcs12 -in "inCert.p12" -clcerts -nokeys -out "outCert.pem" -passin pass:<pw>
openssl pkcs12 -in "outCert.pem" -nocerts -out "outTmpKey.pem" -passin pass:<pw> -passout pass:<pw>
openssl rsa -in "ouTmpKey.pem" -out "outKey.pem" -passin pass:<pw>

I can't say, if these 3 commands are the best way, but they still work fine and I can use the outCert.pem and the outKey.pem.

Now I have to convert a .P12 certificate, which is crypted/created with ECC.

The first command still works (I think so, 'cause there are no errors):
openssl pkcs12 -in "inCert.p12" -clcerts -nokeys -out "outCert.pem" -passin pass:<pw>

But not the rest of the commands. I tried to use the ec or ecparam parameter, but I couldn't figure out how to use them correct.

I am happy about any help or hint


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the openssl-users mailing list