---
title: "Converting certificate file formats"
canonical: "https://docs.aryaka.com/space/KNOW/1642632/Converting%20certificate%20file%20formats"
format: markdown
---
Before uploading a server certificate to MyAryaka, it must be bundled with the server private key to make a p12/pfx file. To create a P12 certificate file on Linux or Mac Run the following openssl command to create the bundle: openssl pkcs12 -export -in servercert.crt -inkey serverprivatekey.key -out servercert.p12 If the server private key specified with the  inkey  attribute has a password associated with it, you are prompted to enter it. You are also prompted to encrypt the generated p12 file with a password. You are prompted for this password when  uploading the certificate  in MyAryaka.  To create a P12 certificate file on Windows Click  Start  then search for  certmgr.msc , then run the program.  Locate the folder containing the server certificate on the left tab, then expand the certificate's folder.  Right-click the server certificate you want to upload, then select  All Tasks  >  Export . Select  Yes, export the private key , then click  Next . Select  Include all certificates in certificate path if possible . Clear the  Delete the private key if the export is successful  option, then click  Next .  Enter a certificate password, then click  Next . You are prompted for this password when  uploading the certificate  in MyAryaka.  Specify the file name and location to save the file, then click  Next .  Click  Finish . A message confirms the export was successful. The .pfx file is saved to the specified location.  To convert a CA certificate to PEM extension on Linux or Mac Run the following openssl command to convert formats: openssl x509 -inform der -in certificate.cer -out certificate.pem To convert a CA certificate to PEM extension on Windows Click  Start  then search for  certmgr.msc , then run the program.  Locate the folder containing the CA certificate on the left tab, then expand the certificate's folder.  Right-click the CA certificate you want to upload, then select  All Tasks  >  Export . Select  Base-64 encoded X.509 (.CER) , then click  Next . Specify the file name and location to save the file, then click  Next .  Click  Finish . A message confirms the export was successful. The file is saved to the specified location as  <fileName> .cer  Rename the  <fileName> .cer file to  <fileName> .pem. The PEM file can be uploaded to MyAryaka as described in  Add static certificates . Related topics Add static certificates Manage static certificates