Home / server / Questions / 1064623
Accepted
Tair
Asked: 2021-05-26 02:27:30 +0800 CST

concatenated PEM file: split private key and certificate chain

  • 772

I have a .pem file with SSL private key and certificate chain for my web-server concatenated into a single file. The file is in following structure:

-----BEGIN PRIVATE KEY-----
...data...
-----END PRIVATE KEY-----

-----BEGIN CERTIFICATE-----
...data...
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
...data...
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
...data...
-----END CERTIFICATE-----

What commands I use to split it to have separate files private.key and fullchain.pem?

ssl-certificate openssl

1 Answers

  1. Best Answer

    Assuming the input file your-file.pem contains only 1 private key and corresponding chain of certificates.

    Extract private key:

    openssl storeutl -keys your-file.pem > private.key

    Extract fullchain certificates:

    openssl storeutl -certs your-file.pem > fullchain.pem

    If the certificate data comes from standard input, use /dev/stdin :

    cat your-file.pem | openssl storeutl -keys /dev/stdin
cat your-file.pem | openssl storeutl -certs /dev/stdin
    • 3