# OpenSSL - CheatSheet

{% embed url="<https://knowledge.digicert.com/generalinformation/INFO2824.html>" %}

```bash
## Common Valid Windows Certificate Extensions: ## 

# *.PFX or *.P12  -  Personal Information Exchange Format
Supports storage of private and public keys and all certificates in the path. 
*If you wish to export a certificate and retain full private key functionality you must use the *.PFX or *.P12 extension*  

# *.CER or *.CRT  -  Base64-encoded or DER-encoded binary X.509 Certificate
Storage of a single certificate.  This format does not support storage of private keys.
 
# *.CRL  -  Certificate Revocation List
Designates a certificate that has been revoked.

# *.CSR  -  Certificate Signing Request
This file type is issued by applications to submit requests to a Certification Authority or CA.

# *.DER - DER-encoded binary X.509 Certificate
Storage of a single certificate.  This format does not support storage of private keys.

# *.P7B or *.P7R or *.SPC  -  Cryptographic Message Syntax Standard
Supports storage of all certificates in path and does not store private keys.
```

![](https://3391461163-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-M-SeUOaaky_0dmtDTFu%2F-M4r1qYPrBWcWA3VuqO3%2F-M4ulG3euk3FZDsxi3xt%2Fimage.png?alt=media\&token=fd3bdd0b-d7b5-4e1b-9c90-e22f00f7363a)

## Using OpenSSL Commands

{% embed url="<https://www.thesslstore.com/blog/openssl-commands-cheat-sheet/>" %}
