To convert a Java keystore certificate to .pem format, follow these steps:
- Download and run the KeyTool IUI.
- Export the private key and certificate chains file from the keystore to a .pem file. This can be done by selecting Export > Keystore’s Entry > Private Key from the KeyTool IUI. Choose a target private key file and a target certificate chains file, and select .pem as the export format for both. Note that you will need to know the keystore password in order to perform the extraction.
- Using a text editor, append the private key file to the certificate chains file.
- Verify that the resulting certificate is readable via openssl as described in this support article: How do I display the contents of a SSL certificate?
You should now have a .pem formatted certificate which you can use with CDRouter. For more information on using alternate certificates with CDRouter, please see our support page: How do I use my own certificates for CDRouter’s ACS?