Initializing WebAssembly...

Convert PEM to PFX

Bundle your Certificate, Private Key, and optional Intermediate CA Certificates into a single PKCS#12 (.pfx) file.

Step 1: Private Key

Provide the Private Key used to generate the original CSR.

Note: You can skip this if your ZIP file in Step 2 already contains the private key.

Step 2: Certificates (Auto-detect via ZIP)

Did you receive a ZIP file from your Certificate Authority (CA)? Drop it here and we will automatically sort the Primary and CA certificates!

Drag & drop a ZIP file here or click to upload
OR MANUALLY PASTE CERTIFICATES

How does the ZIP auto-detection work?

When you drop a ZIP file, the magic happens entirely within your browser:

  1. It unzips the file in your browser's memory.
  2. It scans all files for standard extensions (like .crt, .pem, .key, .ca-bundle, .p7b) or filenames containing "bundle".
  3. It reads the text of those files and uses a pattern matching algorithm (Regex) to extract any Private Keys and Certificates it finds, regardless of the filename.
  4. It uses the built-in WebAssembly crypto module to test every certificate against the Private Key until it finds the exact mathematical match (the Primary Certificate).
  5. All remaining certificates are assumed to be Intermediate CAs.

Security Note: All of this processing happens locally. Your private keys and certificates are never uploaded to our servers.