In this post, I have explained how to Convert .crt certificate to use with IIS. Just browse the existing .cer certificates, in one click you will get .pfx certificate to use with IIS, with the help of SSL shopper.
To install the SSL certificate of “Let’s encrypt” in IIS, first we need to convert multiple .crt files into a single certificate.pfx file. This post will explain the easiest way to convert .crt certificate to use with IIS using a third-party tool.
PFX is an archive file that contains several cryptographic objects in a single file. So after following this post these “.crt” files will be merged into a single pfx file.
To obtain a free SSL certificate from Let’s encrypt follow this – Generate Free SSL Certificate.
After following this post you will have 3 files ca_bundle.crt, certificate.crt and private.key
Navigating the website
To convert go to sslshopper to convert your SSL certificate. You will have the screen like shown below .
Convert .crt file to use with IIS
Click on the Browse button and select the certificate.crt file which you have after extracting the SSL certificate package of Let’s encrypt.
Then in “Type of Current Certificate” leave it to Standard PEM ( Already selected by default )
After that In “Type To Convert To” section select PFX/PKCS#12 type.
Some new fields will appear after selecting the PFX/PKCS#12 type in the “Type to Convert To” option.
First In the “Private Key File” field select the “private.key” file which you already have.
Select ca_bundle.crt in Chain Certificate File filed using the browse button in front of it.
Then Leave blank the “Chain Certificate File 2” field.
After that Leave the Password field blank.
Now Click on the “Convert Certificate” button.
After that a file will be downloaded with the name certificate.pfx and it is the file that will be compatible with IIS.
We have successfully completed the conversion of SSL certificate for IIS.
Now we can use the pfx file with the IIS web server.
Finally to install this certificate in IIS, follow this “Install in IIS” after converting it for IIS.