SSL certificate change e private.key

Fabio Brigoni 0
Viewed 35

I need help in the following situation:

My company renewed the SSL certificate, and I need to change it in server IIS. The file that the certifier sent is a .crt, and as the server is windows I believe that for installation it must be a .pfx So far so good, I thought of converting via openssl using the command below:

openssl pkcs12 –export –out certificate.pfx –inkey rsaprivate.key –in certificate.crt –certfile fileca.crt

The problem is that I don't have the .key file In contact with the certifier, she informed that because it is a renewal, the .key is the same used in the first installation, only that the team that did the first installation is no longer in the company, and we did not find the .key file in no repository.

My question is:

Would there be any way to convert to .pfx without the .key? or would it be possible to find out the .key already used before? Does anyone have any idea what can be done in this case?

private-key ssl-certificate openssl
1 Answers

You can't generate the private key of the .crt file. If you could, the internet would be completely insecure!

Since the certificate is a renewal, you should already have the provider root/intermediary certificate installed on your system.

Convert your .crt file to .cer using openssl.

Then in IIS, click "Complete Certificate Request", and navigate to your newly create .cer file and import.

Then you need to bind your new certificate to your website...

exception0
Related