PFX to PEM Converter

Convert PFX/PKCS12 files to PEM format (certificate + private key)

PFX Data (Base64)

Password (optional)

About PFX to PEM Conversion

PFX (also known as PKCS#12) is a binary archive format that stores a server certificate, intermediate certificates, and the private key in a single encrypted file. PEM format uses Base64 ASCII encoding with header and footer lines, making it the standard format for Apache, Nginx, and most Linux-based web servers. Our converter extracts certificate metadata — including subject, issuer, validity dates, SAN entries, and fingerprint — alongside the PEM-encoded output.

How to Use

Export your PFX file and encode it as Base64 text.
Paste the Base64-encoded PFX data into the input field.
Enter the PFX password if the file is password-protected.
Click Convert to PEM and download or copy the result with full certificate metadata.

Use Cases

Server Migration: Convert PFX certificates exported from Windows/IIS to PEM format for use on Linux servers running Apache or Nginx.
Certificate Format Conversion: Transform PKCS#12 archives into individual PEM files for use with OpenSSL, HAProxy, and other tools.
Certificate Inspection: Extract and review certificate metadata including subject, issuer, validity dates, and SAN entries before deployment.
Backup Recovery: Recover readable certificate and key data from encrypted PFX backup files when the original PEM files are lost.

Frequently Asked Questions

PFX (PKCS#12) is a binary format that bundles the certificate chain and private key into a single encrypted file, commonly used on Windows. PEM is a text-based format with Base64-encoded content between header/footer lines, widely used on Linux and Unix servers.

Only if the PFX file was created with a password. Many PFX exports are password-protected to secure the private key. If your PFX file has no password, you can leave the password field empty.

All data is transmitted over HTTPS and processed server-side. We do not store or log your certificate data or private keys. For maximum security, consider running the conversion locally using OpenSSL.

Tips & Best Practices

•Always keep a backup of the original PFX file after conversion
•Use strong passwords for PFX files to protect private keys
•Verify converted PEM files load correctly before deploying to production
•Store PFX passwords securely — you will need them for future conversions

Technical Details

Input: PKCS#12 (.pfx, .p12) files with optional password protection
Output: PEM files for certificate, private key, and chain
Security: Password-protected PFX handling with secure key extraction
Compatibility: Output compatible with Nginx, Apache, HAProxy