PKCS#12 to PEM

Once you have obtained your certificate, you will be able to export it from your web browser as a PKCS#12 file, usually with the .p12 extension. Most tools will require you to convert this to PEM format, which you can do using the following commands:

openssl pkcs12 -in <P12_FILENAME> -out usercert.pem -clcerts -nokeys
openssl pkcs12 -in <P12_FILENAME> -out userkey.pem -nocerts -nodes

Grid Certificates

If you need a grid certificate, you can obtain one through the UK Certificate Authority Portal:

https://portal.ca.grid-support.ac.uk/caportal/

The portal includes a link to the CA helpdesk, which provides help and advice regarding obtaining and managing your certificate. John Watt in IT Services is the local Registration Authority (RA), and can provide support with this process; you will also need to visit John to show identification when you first request a certificate. PPE IT support can also provide some assistance with this process.