FAQs

To generate a Certificate Signing Request (CSR) for S/MIME certificates enrolled using REST API, perform the following steps:

Step 1: Generate a Private Key
openssl genrsa -out smimeCert.key 2048

Step 2: Generate the CSR. Use your email ID as Common Name while generating CSR
Below snap gives some details.
openssl req -new -key smimeCert.key -out smimeCert.csr




Generating PKCS12 Certificate using x509

1. Save Private Key in a file (cert-privkey.crt)

2. Save x509 Cert in a file (cert-pickup.crt)

3. Run Below command to generate PKCS12 Certificate (certificate.pfx)

openssl pkcs12 -export -out certificate.pfx -inkey cert-privkey.crt -in cert-pickup.crt

Generating PKCS12 Certificate using PKCS7 Certificate

1. Save Private Key in a file (cert-p7b.key)

2. Save PKCS7 Cert in a file (cert-p7b-file.p7b)

3. Run Below commands to generate PKCS12 Certificate (smime-Final.pfx)

openssl pkcs7 -in cert-p7b-file.p7b -out smime-cert.pem -print_certs
openssl pkcs12 -export -inkey cert-p7b.key  -in smime-cert.pem -name Smime-SectigoTest -out smime-Final.pfx