hero-faq-1

Domande frequenti

Tutti Aggiornamenti Autorità di certificazione Cambiamenti Certificate Key Matcher Chiave privata Codice CSR Configurazione Convalida aziendale Convalida del dominio Convalida estesa CPAC DigiCert Firma del codice Generale Generatore di CSR Indirizzo IP Installazione LEI Multi dominio Rinnovo S/MIME Tipi Tutorial sulla generazione di RSI Wildcard
Can I convert to a Java Keystore (JKS)?

Not in this tool. Create a PFX here first, then import it with keytool from the Java JDK. Modern Tomcat also reads PKCS#12 directly, so you may not need a JKS at all.

Copia link

Does this work for any type of SSL certificate?

Yes. DV, OV, EV, wildcard, and multi-domain certificates share the same X.509 structure, so they all convert the same way. Validation level changes what the certificate authority verifies, not the file format.

Copia link

What is the difference between a .cer, .crt, and .pem file?

All three usually hold PEM text, though a .cer can occasionally be DER binary instead. Encoding matters more than the extension, so check the BEGIN/END lines or let the tool detect it.

Copia link

Do I need my private key to convert?

Only when you’re creating a PFX or PKCS#12 file. If you’ve lost the password to an existing PFX, its key cannot be recovered, and reissuing the certificate is the only fix.

Copia link

Is it safe to convert my private key here?

Yes. Every conversion runs inside your browser, and no file reaches SSL Dragon or any server. For a fully offline route, the OpenSSL command line does the same job on your own machine.

Copia link

Can I match a CSR to a certificate as well?

Yes. Fill all three fields and the matcher also compares the CSR with the certificate and with the private key. The CSR field is optional, and you can match a CSR against a private key with no certificate at all.

Copia link

How do I know if my private key matches my certificate?

Paste both into the tool and read the certificate-to-private-key verdict. A match means the public-key fingerprints are identical; a single differing character means they are not a pair.

Copia link

Does the Certificate Key Matcher upload my private key?

No. Your files are read and compared inside your browser, and nothing is transmitted. You can disconnect from the internet before running a check and it still works.

Copia link

Is EV SSL dead?

No, but its most visible feature is gone. Browsers removed the EV company-name indicator from the address bar between 2018 and 2019, so visitors no longer see your organization name without clicking the padlock. The underlying identity verification, the legal name embedded in the certificate, and the warranty are unchanged. See the section above for where that verified identity is still used.

Copia link

Can I switch if I already have an SSL certificate from another provider?

Yes. The bundles include a new SSL certificate alongside the automation agent. If you currently hold a certificate from another provider, you can transition when your existing certificate comes up for renewal. Once configured, the agent manages all future renewals on its own.

Copia link