PFX Certificate Bundle Generator

Created by Aleksandr Sukhov (0xff5.com)

Client-side processing • Memory-only storage • Automatic chain validation • AIA fetching • Azure WAF Ready

Step 1: Provide Certificate(s)

No file selected

Step 2: Provide Private Key

No file selected

Step 3: Validate Certificate Chain

Step 4: Generate PFX Bundle

About This Tool

Features:
Automatic Chain Validation: Verifies certificate chain completeness
AIA Fetching: Automatically downloads missing intermediate CA certificates
Multiple Input Formats: Supports .crt, .cer, .pem, .key files and text paste
Encrypted Key Support: Handles password-protected private keys
Azure WAF Ready: Generates PFX files compatible with Azure Application Gateway/WAF
Memory-Only Storage: All data stored in memory, cleared after download
Client-Side Processing: 100% browser-based, no server uploads
Supported Certificate Formats:
• PEM-encoded (.crt, .cer, .pem)
• Base64-encoded certificates
• DER-encoded (will be converted automatically)
• Multiple certificates in single file (chain)
Supported Private Key Formats:
• RSA Private Key (-----BEGIN RSA PRIVATE KEY-----)
• PKCS#8 Private Key (-----BEGIN PRIVATE KEY-----)
• EC Private Key (-----BEGIN EC PRIVATE KEY-----)
• Encrypted Private Key (-----BEGIN ENCRYPTED PRIVATE KEY-----)
Usage Instructions:
1. Load Certificate: Upload your certificate file or paste the PEM-encoded certificate
2. Load Private Key: Upload your private key file or paste it (provide password if encrypted)
3. Validate Chain: Check if certificate chain is complete. Use auto-fetch if intermediates are missing
4. Generate PFX: Set a strong password and generate the PFX bundle
5. Download: Download the PFX file and upload it to Azure Portal