Convert Comodo cert to PKS#12?

Question

I followed KB115976 to generate a CSR and private key. I submitted my CSR to my parent organization, who purchased a SSL certificate from Comodo on my behalf. 
 
 I received the following files: intermediate1.cer, intermediate2.cer, asg.sub.domain.com_cert.cer, and root.cer 
 
 I've done some Googling and it appears that I need to run openssl with some switches, including my private key, but I'm not sure of the syntax. 
 
 TIA

brunomc · Accepted Answer

hi, 
 
 openssl pkcs12 -export -in certificatename.cer -inkey privateKey.key -out certificatename.pfx -certfile cacert.cer 
 root.cer = cacert.cer 
 certificatename.cer = asg.sub.domain.com_cert.cer 
 privatekey.key the privatekey file you had. 
 if on a windowsbox you will need the openssl tools. ( https://slproweb.com/products/Win32OpenSSL.html ) 
 or an onlineconverter like bob said.

BAlfson · Answer

Yes you do need the intermediate cert(s). When I worked with two different Comodo certs, I only had to use a single intermediate cert with the root CA, but maybe that's changed in the last two years. I've been more successful with the Windows version: OpenSSL-Win64\bin\openssl.exe pkcs12 -export -in -certfile -certfile sub.domain.com.cer -inkey sub.domain.com.private.key -out sub.domain.com.p12 Alternatively, you can concatenate the certs , and sub.domain.com.cer and then do: OpenSSL-Win64\bin\openssl.exe pkcs12 -export -in -certfile -inkey sub.domain.com.private.key -out sub.domain.com.p12 Cheers - Bob