Certificate format conversion load balancing Only PEM format is supported Certificates in other formats need to be converted before they can be uploaded to the load balancer. We use Openssl tool Convert. The certificate at the end of. crt is actually in PEM format, just paste the content into it. PFX to PEM PFX format is usually used in Windows Server Extract private key: openssl pkcs12 -in certname.pfx -nocerts -out key.pem -nodes Extract certificate: openssl pkcs12 -in certname.pfx -nokeys -out cert.pem P7B to PEM P7B format is usually used in Windows Server and Tomcat Certificate conversion: openssl pkcs7 -print_certs -in incertificate.p7b -out outcertificate.cer DER to PEM The DER format is usually used in the Java platform Certificate conversion: openssl x509 -inform der -in certificate.cer -out certificate.pem Private key conversion: openssl rsa -inform DER -outform PEM -in privatekey.der -out privatekey.pem |