# Creating a PKCS#12

**URL:** <https://community.letsencrypt.org/t/creating-a-pkcs-12/157883>\
**Category:** Help\
**Created:** [August 16, 2021, 8:40am UTC](https://community.letsencrypt.org/t/creating-a-pkcs-12/157883 "2021-08-16T08:40:25Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![papalii](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/papalii/32/54105_2.png) [@papalii](https://community.letsencrypt.org/u/papalii)\
**Post date:** [August 16, 2021, 8:40am UTC](https://community.letsencrypt.org/t/creating-a-pkcs-12/157883/1 "2021-08-16T08:40:25Z")

</div>

Hi everyone, I used Certbot on a Centos 8 server to create and install a Lets Encrypt certificate on one of the sites hosted on that server, there are 5 sites, one site uses a certificate from another provider while the other 4 they use Lets Encrypt, so far coexistence is OK.  
Now I would like to use my UTM to add an extra layer of security by configuring reverse proxy but it asks me to load PKCS # 12.  
How can I generate this file considering that the certificate was generated with Certbot?

The version of my client is certbot 1.10.1

Many thanks in advance.

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [August 16, 2021, 8:47am UTC](https://community.letsencrypt.org/t/creating-a-pkcs-12/157883/2 "2021-08-16T08:47:39Z")

</div>

Hi @papalii, and welcome to the LE community forum 🙂

The `fullchain.pem` and `privkey.pem` files created by `certbot` can be converted to PKCS#12 format.  
OpenSSL is one software that can be used to do that quite easily, with:  
`openssl pkcs12 -export -in fullchain.pem -inkey privkey.pem -out domain.pfx`

---

<div class="post-metadata">

**Author:** ![papalii](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/papalii/32/54105_2.png) [@papalii](https://community.letsencrypt.org/u/papalii)\
**Post date:** [August 16, 2021, 9:36am UTC](https://community.letsencrypt.org/t/creating-a-pkcs-12/157883/3 "2021-08-16T09:36:57Z")

</div>

It works! it was very simple, thank thanks you very much!

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [August 16, 2021, 9:54am UTC](https://community.letsencrypt.org/t/creating-a-pkcs-12/157883/4 "2021-08-16T09:54:47Z")

</div>

Glad to help 🙂  
Cheers from Miami 🍻

#FreeCuba

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [September 15, 2021, 9:54am UTC](https://community.letsencrypt.org/t/creating-a-pkcs-12/157883/5 "2021-09-15T09:54:53Z")

</div>

Closed on September 15, 2021, 9:54am UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.