OpsBench

PFX to PEM

Split a .pfx / .p12 back into its certificate, key and chain.

● Runs on our server
— no file chosen
The file is processed in memory on the server and never stored. Files exported from Windows with legacy encryption (which OpenSSL 3 blocks) are handled automatically — no manual conversion needed.

How it works

We read the PKCS#12 file with OpenSSL and split it into certificate, key and chain. Older PFX files created with OpenSSL 1.x use algorithms OpenSSL 3 disables by default, so if the first read fails we retry with the openssl CLI in -legacy mode.

Related tools

Let's Encrypt Wizard SSL Checker PEM to PFX CSR Generator