Differences between PEM, DER, P7B/PKCS#7, PFX/PKCS#12 (PKI)

Posted onAuthorHeelpBook2 Comments

Send Us a Sign! (Contact Us!)
Word PDF XPS Text

Different Platforms & Devices requires SSL certificates in different [gs format]s:

  • A Windows Server uses .pfx [gs file]s;
  • An Apache Server uses .crt, .cer files;

    • NOTE: Only way to tell the difference between PEM .cer and DER .cer is to open the file in a text [gs editor] and look for the BEGIN/END statements.

    [tweet]

    [tab:PEM]

    PEM Format

    It is the most common format that Certificate Authorities issue certificates in. It contains the "—–BEGIN CERTIFICATE—–" and "—–END CERTIFICATE—–" statements.

    Several PEM [gs certificate]s and even the Private key can be included in one file, one below the other. But most platforms (example: Apache) expects the certificates and Private key to be in separate files.

  • They are Base64 encoded ACII files;
  • They have extensions such as .pem, .crt, .cer, .key;
  • Apache and similar servers uses PEM format certificates;

    • [tab:DER]

    DER Format

    It is a Binary form of ASCII PEM format certificate. All types of Certificates & Private Keys can be encoded in DER format.

  • They are Binary format files;
  • They have extensions .cer & .der;
  • DER is typically used in Java platform;

    • [tab:P7B - PKCS#7]

    P7B/PKCS#7

    They contain “—–BEGIN PKCS—–” & “—–END PKCS7—–” statements. It can contain only Certificates & Chain certificates but not the Private key.

  • They are Base64 encoded ASCII files;
  • They have extensions .p7b, .p7c;
  • Several platforms supports it. For example: Windows OS, Java Tomcat;

    • [tab:PFX - PKCS#12]

    PFX/PKCS#12

    They are used for storing the Server certificate, any Intermediate certificates & Private key in one encryptable file.

  • They are Binary format files;
  • They have extensions .pfx, .p12;
  • Typically used on Windows OS to import and export certificates and Private keys;

    • [tab:END]

    SOURCE

    LINK

    LANGUAGE
    ENGLISH

    2 thoughts on “Differences between PEM, DER, P7B/PKCS#7, PFX/PKCS#12 (PKI)”

    Comments are closed.