SyntaxFix

[openssl] Export P7b file with all the certificate chain into CER file

The selected answer didn't work for me, but it's close. I found a tutorial that worked for me and the certificate I obtained from StartCom.

  1. Open the .p7b in a text editor.

  2. Change the leader and trailer so the file looks similar to this:

    -----BEGIN PKCS7-----
[... certificate content here ...]
-----END PKCS7-----

For example, my StartCom certificate began with: 

    -----BEGIN CERTIFICATE-----

and ended with: 

    -----END CERTIFICATE-----
  1. Save and close the .p7b.

  2. Run the following OpenSSL command (works on Ubuntu 14.04.4, as of this writing):

    openssl pkcs7 -print_certs –in pkcs7.p7b -out pem.cer

The output is a .cer with the certificate chain.

Reference: http://www.freetutorialssubmit.com/extract-certificates-from-P7B/2206

Examples related to openssl

• dyld: Library not loaded: /usr/local/opt/openssl/lib/libssl.1.0.0.dylib • How to install OpenSSL in windows 10? • SSL_connect: SSL_ERROR_SYSCALL in connection to github.com:443 • How to fix: fatal error: openssl/opensslv.h: No such file or directory in RedHat 7 • Homebrew refusing to link OpenSSL • Solving sslv3 alert handshake failure when trying to use a client certificate • How to install latest version of openssl Mac OS X El Capitan • How to resolve the "EVP_DecryptFInal_ex: bad decrypt" during file decryption • SSL error SSL3_GET_SERVER_CERTIFICATE:certificate verify failed • Can't get private key with openssl (no start line:pem_lib.c:703:Expecting: ANY PRIVATE KEY)

Examples related to certificate

• Distribution certificate / private key not installed • When you use 'badidea' or 'thisisunsafe' to bypass a Chrome certificate/HSTS error, does it only apply for the current site? • Cannot install signed apk to device manually, got error "App not installed" • Using client certificate in Curl command • Convert .cer certificate to .jks • SSL cert "err_cert_authority_invalid" on mobile chrome only • Android Studio - Unable to find valid certification path to requested target • SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch • Verify a certificate chain using openssl verify • Import Certificate to Trusted Root but not to Personal [Command Line]

Examples related to x509certificate

• Authentication failed because remote party has closed the transport stream • curl: (60) SSL certificate problem: unable to get local issuer certificate • How can I generate a self-signed certificate with SubjectAltName using OpenSSL? • How does an SSL certificate chain bundle work? • Importing the private-key/public-certificate pair in the Java KeyStore • How to create a self-signed certificate with OpenSSL • Error Importing SSL certificate : Not an X.509 Certificate • What does the 'Z' mean in Unix timestamp '120314170138Z'? • How to add subject alernative name to ssl certs? • Export P7b file with all the certificate chain into CER file