Load certificates in Servicenow which are in. cer format

[arohi]

I have a client who has provided an x.509 certificate for using ssl. It has the extension .cer. 

I have a couple of questions maybe someone could assist me with:

In the doc here ( https://express.servicenow.com/support/documentation/install-idp-certificate-exp/ ) is says for the ‘PEM Certificate’ field, ‘Enter the value of the X509 certificate’. In examples, it looks like this should be the contents of the certificate. Where do I find this value, or is it something the client should provide? If I need to read the contents of the file, Express has the option to view the file, but in what reader can this format be read correctly?

When I try to add the cert as an attachment, I get “>Unable to parse certificate, check to be sure it is in X.509 PEM or DER format”

If I try to validate, I get this: “” java.lang.Exception: Invalid trust_store : Unable to load certificateservicenow.clientname.com, pem “.

I would like to convert the .cer to x.509 format or to get PEM value. 

Many thanks for all replies.

[JimmieOdelius]

Hi Arohi.

You can convert the certificate via openSSL. PEM certificates contain base64 encoded certificate so any decent text editor should be able to view it.

openssl x509 -inform der -in certificate.cer -out certificate.pem

The new cert should look something like:

-----BEGIN CERTIFICATE-----
MIIDXTCCAkWgAwIBAgIJAJC1HiIAZAiIMA0GCSqGSIb3Df
BAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVx
aWRnaXRzIFB0eSBMdGQwHhcNMTExMjMxMDg1OTQ0WhcNMT
A .... MANY LINES LIKE THAT ....
JjyzfN746vaInA1KxYEeI1Rx5KXY8zIdj6a7hhphpj2E04
C3Fayua4DRHyZOLmlvQ6tIChY0ClXXuefbmVSDeUHwc8Yu
B7xxt8BVc69rLeHV15A0qyx77CLSj3tCx2IUXVqRs5mlSb
vA==
-----END CERTIFICATE-----

[arohi]

Thanks for your response Jimmie. 

[nidhi chaubey]

Hi Jimmie,

where to run this command , my certificate file format is der. it is showing error der file is not loaded

 

but there is no option of uploading it

[MarioP1]

@nidhi chaubey - Did you find a solution yet? I have a similar requirement to convert ".cer" to "pem" format