OpenSSL, Converting CRT to PEM

Question

I've been trying to use openssl to convert a .crt certificate to a .pem

openssl.exe x509 -in server.crt -out openssl.der -outform DER

After using that command, I get

unable to load certificate
1760:error:0906D06C:PEM routines:PEM_read_bio:no start line:.\crypto\pem\pem_lib.c:703:Expecting: TRUSTED CERTIFICATE

I've tried following https://support.ssl.com/Knowledgebase/Article/View/19/0/der-vs-crt-vs-cer-vs-pem-certificates-and-how-to-convert-them but I'm at a loss and nothing on there is working for me.

Thank you so much for your help,

Brian

Salvucci

DER is Distinguished Encoding Rules, and its also known as ASN.1 encoding. PEM is Privacy Enhanced Mail and uses ----- BEGIN CERTIFICATE ----- and friends. CRT is just a file extension used on occasion, and I've seen it used with both DER and PEM encoded objects. Use -inform DER and -outform PEM. – Stylographic

This question appears to be off-topic because it is not about programming. Perhaps Super User would be a better place to ask. – Stylographic

@Stylographic I tried typing in openssl.exe x509 -in server.crt -out openssl.pem -inform der -outform pem And I ended up getting a different error unable to load certificate 8764:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:.\crypto\asn1\tasn_dec.c:1319: 8764:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:.\crypto\asn1\tasn_dec.c:381:Type=X509 – Salvucci

When you look at the certificate under a text editor, is it ASCII text or is it unreadable binary? And are you sure you have a certificate (versus a key)? – Stylographic

Answer 1

may the following post well be helpful for others: How to get .pem file from .key and .crt files?

openssl x509 -inform DER -outform PEM -in server.crt -out server.crt.pem

Tolerate