Full Chain PFX File Creation Guide

Offers a guide for creating PFX files, which are used for secure communications within the platform.

1. CSR (Certificate Signing Request)

First, you need to create a CSR file. You can use OpenSSL for this process. The following command creates the CSR and private key using a 2048-bit RSA key:

Linux Bash Code

openssl req -new -newkey rsa:2048 -nodes -keyout privatekey.key -out myrequest.csr

Windows CMD Code

1. OpenSSLInstall (For example, Win64 OpenSSL).

2. Open Command Prompt and run the following command:

Cmd Code

openssl req -new -newkey rsa:2048 -nodes -keyout privatekey.key -out myrequest.csr

After running the command, you will be asked to enter your certificate information as follows:

PlainText

Country Name (2 letter code) [OTHER
State or Province Name (full name) [Some-State]:Istanbul
Locality Name (eg, city) []:Istanbul
Organization Name (eg, company) [Internet Widgits Pty Ltd]:My Company
Organizational Unit Name (eg, section) []:IT Department
Common Name (e.g. server FQDN or YOUR name) []:www.example.com
Email Address []:[email protected]


Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

Once these steps are completed, `privatekey.keyA private key file named ` and `myrequest.csrA CSR file named ` will be created.

---

2. Submitting the CSR File to the GlobalSign Certificate Authority (CA)

Send the CSR file you created to GlobalSign. GlobalSign will provide you with a certificate using your CSR file. After completing the GlobalSign checking processes, it will provide you with the necessary certificates.

---

3. Get Certificates

GlobalSign will provide you with the following files:

• Your own certificate (example.com.crt)

• Intermediate certificates (intermediate1.crt, intermediate2.crt)

• Root certificate (root.crt)

---

4. Merge Certificates

You need to combine all certificates into a single file. This can be done using the `cat` command:

Linux Bash Code

cat example.com.crt intermediate1.crt intermediate2.crt root.crt > fullchain.crt

This command returns all certificates to `fullchain.crt Combines into a file named `.

Windows

1. Open Notepad and follow these steps:

   • example.com.crt copy and paste its contents.

   • intermediate1.crt, intermediate2.crt ve root.crt copy and paste its contents sequentially.

   • Combine all content fullchain.crt Save as.

2. Alternatively, WindowsPowerShell You can combine files using:

Powershell

Get-Content example.com.crt, intermediate1.crt, intermediate2.crt, root.crt | Set-Content fullchain.crt

---

5. Creating the PFX File

Using OpenSSL, create the PFX file using the private key and the merged certificate file:

Linux Bash Code

openssl pkcs12 -export -out fullchain.pfx -inkey privatekey.key -in fullchain.crt -certfile intermediate1.crt -certfile intermediate2.crt -certfile root.crt

Windows

Open Command Prompt and run the following command:

Cmd

openssl pkcs12 -export -out fullchain.pfx -inkey privatekey.key -in fullchain.crt -certfile intermediate1.crt -certfile intermediate2.crt -certfile root.crt

This command is `fullchain.pfx Creates a PFX file named `. You will be asked to enter a password when creating the PFX file. This password is used to secure the PFX file.

---

6. Verifying the PFX File

You can use the following command to verify that the PFX file you created was created correctly:

Linux Bash Code

openssl pkcs12 -info -in fullchain.pfx

Windows Cmd Code

Open Command Prompt and run the following command:

Cmd

openssl pkcs12 -info -in fullchain.pfx

This command displays the contents and information of the PFX file.