SSL Certificate / Export your private key

Follow the steps below to export your Certificate and Private Key.


  1. Start the Microsoft Management Console  > Run mmc.exe

  2. Click the 'Console' menu and then click 'Add/Remove Snap-in'.

  3. Click the 'Add' button and then choose the 'certificates' snap-in and click on 'Add'.

  4. Select 'Certificates' and click 'Add'.


  5. Select 'Computer Account' then click 'Next'.

  6. Select 'Local Computer' and then click 'OK'.

  7. Click 'Close' and then click 'OK'.

  8. Expand the menu for 'Certificates' and click on the 'Personal' folder.

  9. Right click on the certificate that you want to export and select 'All tasks' > 'Export'.

  10. A wizard will appear. Make sure you check the box to include the private key and continue through with this wizard until you have a .PFX file.

Next run OpenSSL to extract the private key, and the cert file

Export the private key file from the pfx file

openssl pkcs12 -in filename.pfx -nocerts -out key.pem

Export the certificate file from the pfx file

openssl pkcs12 -in filename.pfx -clcerts -nokeys -out cert.pem

Remove the passphrase from the private key

openssl rsa -in key.pem -out server.key

Thawte.nl is owned by Networking4all B.V.. The website is created by a collaboration with thawte Inc.. Apart from the strategic agreements that thawte Inc. and Networking4all B.V. have concluded, the organizations act independently. All prices are in euros and exclude VAT.