SSL

Sun, 02 Sep 2018 00:00:00 +0000

References

RSA vs. DSA for SSH authentication keys
RSA Key Sizes: 2048 or 4096 bits?
How To Secure Apache with Let’s Encrypt on Debian 9
Importing LetsEncrypt into Java and Glassfish
How to install a SSL certificate on GlassFish

Difference between the certificate files

.key is the private key. This is accessible the key owner and no one else.
.csr is the certificate request. This is a request for a certificate authority to sign the key. (The key itself is not included.)
.crt is the certificate produced by the certificate authority that verifies the authenticity of the key. (The key itself is not included.) This is given to other parties, e.g. HTTPS client.
.pem is a text-based container using base-64 encoding. It could be any of the above files.
Copy
1 2 3

-----BEGIN EXAMPLE----- ... -----END EXAMPLE-----
.p12 is a PKCS12 file, which is a container format usually used to combine the private key and certificate.

Note that there isn’t only one extension for the certificate produced by the certificate authority. For example you may see certificates with either the .crt or a .pem extension.

Certificates on ARI Systems

SSL

References

Difference between the certificate files