Netscape Certificate Management System 6.0, Manual

Page: 61 / 377

Enrollment Forms
Chapter 1 Authentication Plug-in Modules 61
4.
Scroll down the page (that shows the certificate information in detail) to find
the certificate in base-64 encoded format. It looks like this:
-----BEGIN CERTIFICATE-----
MIICJzCCAZCgAwIBAgIBAzANBgkqhkiG9w0BAQQFADBCMSAwHgYDVQQKExdOZXRzY2FwZSBD
b21tdW5pY2F0aW9uczngjhnMVQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTk4MDgyNzE5MDw
MFoXDTk5MDIyMzE5MDAwMnbjdgngYoxIDAeBgNVBAoTF05ldHNjYXBlIENvbW11bmljYXRpb
25zMQ8wDQYDVQQLEwZQZW9wbGUxFzAVBgoJkiaJkIsZAEBEwdzdXByaXlhMRcwFQYDVQQDw5
TdXByaXlhIFNoZXR0eTEjMCEGCSqGSIb3DbndgJA
-----END CERTIFICATE-----
5.
Create an ASCII file named
cert.b64
.
6.
Copy and paste the base-64 encoded certificate blob, including the marker lines
-----BEGIN CERTIFICATE-----
and
-----END CERTIFICATE-----
to the file.
7.
Convert the text-based certificate to its DER-encoded format using the ASCII to
Binary tool, explained in CMS Command-Line Tools Guide.
For example, the command
<server_root>/bin/cert/tools/AtoB cert.b64 cert.der
converts the base-64 encoded certificate in the
cert.b64
file to its
DER-encoded format and writes the DER-encoded certificate to a file named
cert.der
.
8.
Next, use the Microsoft tool named
cert2spc
to convert the DER-encoded
certificate to SPC format. For example, the command
cert2spc cert.der cert.spc
converts the DER-encoded certificate in the
cert.der
file to its SPC format and
writes the certificate to a file named
cert.spc
.
For additional information, check these links:
•
http://www.lantimes.com/ltparts/connect/shoptalk1.htm
•
http://www.thawte.com/certs/developer/msauthenticode.html
•
http://www.drh-consultancy.demon.co.uk/pkcs12faq.html