How to generate and export certificates

In this article we will show you how you can create an RSA 2048-bit PEM certificate and how you can export it.

To start off, download and install OpenSSL SDK. Generate RSA private key:

>> openssl genrsa -out key.pem 2048

Create PVK certificate

Generate PVK withhelp makecert.exe tool:

>> makecert.exe -r -pe -n "CN=AkademRulit" -sv Certificate.pvk key.pem

Create PFX container

Download and install pvk2pfx.exe. Execute it via commandline with pair of keys generated on a previous step (see at certificate storage):

>> C:\Program Files (x86)\Microsoft SDKs\Windows\v7.0A\Bin>pvk2pfx.exe -pvk "c:\Certificate.pvk" -spc "c:\key.pem" -pfx "c:\MyCertificate.pfx"

Create PDF file with MyCertificate.pfx

Pkcs12Store ks = null;
using (FileStream file = new FileStream(@"c:\MyCertificate.pfx", FileMode.Open, FileAccess.Read))
{
   ks = new Pkcs12Store(file,"");//without password            
}

Now that you’ve created your own certificate store, you can immediately use it for signing PDFs using PDFKit, but you can also export it:

To export, please do the following (assuming that you have IE on your machine):

  1. In Internet Explorer select Tools (menu) –> Internet Options (item in menu)
  2. Content (tab) –> Certificates (button)
  3. Select the certificate you want to expect (selection) –> Export… (button)
  4. Yes, Export the private key (selection) – notice that if this selection is not available the key is imported without export rights.
  5. Select Personal Information Exchange – PKCS #12 (.pfx):
    • select include all certificates in the certification path if possible
    • deselect strong protection (however strong protection is supported by our code, for testing I recommends the weaker option)
    • deselect delete the key
  6. Type the same password trice (e.g. “Test”), and keep this password available
  7. Provide a filename (e.g. “C:\temp\test.pfx” )
  8. Finish (button)
  9. Check if the message says: successful
Download PDFKit.NET 4.0
We will send you a download link
Why do we ask your email address?
We send tips that speed up your evaluation
We let you know about bug fixes
You can always unsubscribe with one click
We never share your address with a 3rd party
Thank you for your download

We have sent an email with a download link.