SSL Certificate Converter
Convert between PEM, DER, PFX/P12, P7B, CSR formats — 100% client-side
Conversion result will appear here
Fill in the input panel and click Convert
What is the difference between PEM and DER?
PEM (Privacy Enhanced Mail) is a Base64-encoded text format with header/footer lines. DER (Distinguished Encoding Rules) is the raw binary ASN.1 encoding. PEM is human-readable and widely used in Apache/Nginx; DER is used in Java keystores and some Windows applications.
What is a PFX/P12 file?
PFX (Personal Information Exchange) or PKCS#12 (.p12) is an archive format that bundles a certificate with its private key and optionally intermediate certificates, all protected by a password. It is commonly used with IIS and Windows servers.
Is it safe to convert certificates in the browser?
Yes. This tool uses the node-forge library to perform all operations entirely in your browser. No data is transmitted to any server. Your private keys never leave your device.
Why do I need a private key for PFX conversion?
The PFX/PKCS#12 format is designed to bundle a certificate together with its corresponding private key. Without the private key, the PFX file cannot be created.
What is a P7B / PKCS#7 file?
P7B (PKCS#7) is a Base64-encoded container that holds one or more certificates (usually a certificate chain). It does not contain private keys. It is commonly used in Windows and Java environments.
What is a CSR?
A Certificate Signing Request (CSR) is a block of encoded text containing information about your organization and the public key. You submit it to a Certificate Authority (CA) to obtain a signed certificate. CSRs can be in PEM (Base64 text) or DER (binary) format.