Convert Certificates to different formats

certs_convert_format.sh

#pem to pfx with empty export password: IIS first-time import cert
openssl pkcs12 -export -out yourcert.pfx -inkey yourpemkey.key -in yourcrt.crt -passout pass:

#cer/pem to pfx without private-key and with empty export password:
openssl pkcs12 -export -nokeys -in yourcer.cer -out yourpfx.pfx -passout pass:

#pem to p7b: IIS existing cert renewal
openssl crl2pkcs7 -nocrl -certfile _.yourpem.pem -out yourp7b.p7b -certfile /etc/ssl/certs/ca-certificates.crt

#if pfx is password-protected: this command will prompt for the pfx password and will convert to pem
openssl pkcs12 -in yourpasswordprotectedpfx.pfx -out test.pem -nodes