To clarify which certificate formats are supported, this post introduces the concepts and descriptions of these certificate formats.
Three certificate formats are supported, as described in the table.
Format | Definition | Description |
PKCS#12 | Saves certificate files in binary format, including or excluding the private key. The commonly used file name extensions include .P12 and .PFX. | If the file name extension of a certificate is .CER or .CRT, use the Notepad to open this certificate and check the certificate content to differentiate the certificate format. l If the certificate starts with "-----BEGIN CERTIFICATE-----" and ends with "-----END CERTIFICATE-----", the certificate format is PEM. l If the certificate content is displayed as garbled characters, the certificate format is DER. |
DER | Saves certificate files in binary format, excluding the private key. The commonly used file name extensions include .DER, .CER, and .CRT. | |
PEM | Saves certificate files in ASCII format, including or excluding the private key. The commonly used file name extensions include .PEM, .CER, and .CRT. |
For details, see the USG6000E Firewall Product Documentation.