How to extract certificate from .p12 (PFX) file using KEYTOOL commands

ssl certificate keytool pfx
Vaibhav Dwivedi picture Vaibhav Dwivedi · Mar 21, 2016 · Viewed 20.9k times · Source

I want to extract certificate from a .p12 file. I can't use openssl as it is not allowed in my organization.

Is keytool able to extract the certificate, or is there any other way by which I can get this certificate extracted?

Do I require the password for the private key for this?

Answer

always_a_rookie picture always_a_rookie · Mar 21, 2016

You can use this Keytool command to export certificate from a KeyStore.

keytool -exportcert -keystore KEYSTORE_ABSOLUTE_PATH.p12 -storetype PKCS12 -storepass KEYSTORE_PASSWORD -alias ALIAS -file EXPORTED_CERT_NAME.crt

Related questions

keytool error bash: keytool: command not found

I have tried to execute keytool from Java bin directory but I get an error with warning bash: keytool: command not found. root@xxxxxx]# keytool -genkey -alias mypassword -keyalg RSA bash: keytools: command not found

Read More
Find the alias name in the keystore file

I have a key store file cacerts under jre/lib/security in which i added a Certicate by using the import command. There are more than 50 certificates in my keystore. How do i find the alias name of the last …

Read More
How to generate, sign and import SSL certificate from Java

Possible Duplicate: Generate certificates, public and private keys with Java I need to generate a self signed certificates at run time, sign them and import to the Java keystore. I can do this using "keytool" and "openssl" from command line …

Read More