.pfx files
.pfx file
PKCS #12 Certificate Bundle
A password-protected binary bundle of a certificate plus its private key.
What opens a .pfx file
- Windows
- Certificate Import Wizard (built in — double-click), OpenSSL, certutil
- macOS
- Keychain Access (built in), OpenSSL
- Linux
- openssl pkcs12 -in file.pfx, GNOME Seahorse
What a .pfx file is
PFX, also seen as .p12, packages a certificate, its chain and the private key into one encrypted file so it can be moved between servers or imported into Windows. Because it contains the private key it is always password-protected and should be handled like a credential. Double-clicking on Windows launches the Certificate Import Wizard; openssl pkcs12 splits it back into PEM files.
Converting it
A .pfx file is commonly converted to .pem, .p12, .crt or .key. It is a binary format, so a text editor will show unreadable characters rather than its contents.
Details
- Extension
- .pfx
- Full name
- PKCS #12 Certificate Bundle
- Category
- Data
- MIME type
- application/x-pkcs12
- Created by
- RSA / IETF (PKCS #12)
- Format
- Binary
Common questions
- How do I open a .pfx file?
- On Windows use Certificate Import Wizard (built in — double-click); on macOS use Keychain Access (built in); on Linux use openssl pkcs12 -in file.pfx. A password-protected binary bundle of a certificate plus its private key.
- What is a .pfx file?
- PKCS #12 Certificate Bundle. PFX, also seen as .p12, packages a certificate, its chain and the private key into one encrypted file so it can be moved between servers or imported into Windows. Because it contains the private key it is always password-protected and should be handled like a credential.
- Can I convert a .pfx file?
- Yes. It is usually converted to .pem, .p12, .crt or .key, either by exporting from one of the programs listed above or with a format converter.
Related pages
- .csv — Comma-Separated Values A spreadsheet as plain text, one row per line — the universal data exchange form
- .json — JavaScript Object Notation The standard text format for structured data on the web and in config files.
- .xml — Extensible Markup Language A tag-based text format for structured data, still everywhere in enterprise syst
- .yaml — YAML Data File An indentation-based configuration format, readable but unforgiving about whites
- .log — Log File A plain-text record of what a program did, newest events usually at the bottom.
- .torrent — BitTorrent Metainfo File A few kilobytes of metadata describing what to download and from whom — not the
- .dat — Generic Data File A meaningless extension — .dat says only that some program stored data here.
- .vcf — vCard Contact File One or more contacts as plain text — the standard way to move an address book.
- .sql — SQL Script A text file of database commands — often a full database dump.
- .ics — iCalendar Event A calendar invitation or event feed in a plain-text standard format.
- .sqlite — SQLite Database A complete relational database in a single file — the most deployed database in
- .db — Generic Database File An extension many programs use for their data — it does not identify one format.
Sources
- Media Types Registry — IANA
- Official vendor product documentation — At One Place