New wildcard certificate from 123 reg but no key....

[AJWhite1970]

Ok, so brain hurts with this one. I have a new wildcard domain from 123reg which I want to use in IIS but as far as I can see, they have only given me the .cer and no key to create a usable .pfx file?

 

 

I know I once did something very clever in openssl when faced with this before but can't find my notes and have started going round in circles finding the solution.

 

Can someone more clever with certificates then me (frankly not hard...) tell me what I've missed?

 

Thanks

Andrew

[AJWhite1970]

Hi

 

Thanks for your reply, glad to know it's not me going mad. When you say export the private key from the server, which one is that as I'm not seeing any private keys to export either from mmc certificates or anywhere else for that matter!!

 

Cheers

[AJWhite1970]

No problem - greatly appreciate the help already given

[Domino]

My usual workflow for external certs is to create a request on a Windows server, rekey the cert from that CSR, Download it and import it onto the server the request was created on.

 

you can then export it as the Cert with Private Key.

[AJWhite1970]

Would you have a doc you could share regarding the steps for that? I freely admit certificates is one thing I'm absolutely rubbish at...

 

Creating a new request is fine, it's the rest I got lost at!!!

 

Cheers

Andrew

Edited December 13, 2018 by AJWhite1970

[Domino]

No, but it's pretty simple.

 

• Create CSR on a windows server
  
• rekey/reissue certificate with your provider, copy the contents of the CSR into the box provided when prompted (this'll depend on the cert issuers process)
  
• Download rekeyed certificate when it's ready
  
• Import certificate into the Cert store on the machine you created the CSR on (Run> MMC > add snapin "Certificates" > choose 'computer account' > add to 'Personal' store)
  
• Export certificate, choosing "include private key" when prompted
  

[AJWhite1970]

Thanks Domino, all worked fine and the new wildcard certificate is now on all the servers.

 

If you are at BETT, remind me that I owe you a drink

 

Andrew