FAQs
Why am I unable to export my Sectigo S/MIME certificate as a .PFX file?
Similar Questions:
What prevents the export of a Sectigo S/MIME certificate in .PFX format?
What are the common reasons for failure when exporting a Sectigo S/MIME certificate as .PFX file?
How can I resolve issues when exporting a Sectigo S/MIME certificate as a .PFX file?
Overview:
Exporting your Sectigo S/MIME certificate as a .pfx file requires both the certificate and its private key to be present on the same system. If you are unable to export, it usually means the private key is missing, or the certificate was installed incorrectly.
Why Does This Occur?
Common reasons for being unable to export a Sectigo S/MIME certificate as a .PFX file include:
-
1.The Certificate Signing Request (CSR) was not generated on the same machine where you are attempting to install and export the certificate.
-
2. A different browser or system was used for CSR generation than the one currently in use.
-
3. The certificate is installed in a location that does not permit private key export (e.g., smart card or Hardware Security Module).
Detailed Explanation:
S/MIME certificates can be generated using two methods: Browser-Based and Manual.
(For retail customers, only the manual method is applicable.)
Browser-Based Method
-
The CSR must be generated on the same browser and machine where the certificate will be installed.
Manual Method
-
CSR generation can be performed in multiple ways:
-
Windows: Use MMC Snap-in or certreq.
-
OpenSSL: Use command-line tools.
-
For Windows, ensure the certificate is installed on the same device where the CSR was generated, following the same process.
Creating a .PFX File Using OpenSSL
Use the following command to export the certificate as a .PFX file:
(openssl pkcs12 -export -in my.crt -inkey my.key -certfile my.bundle -out my.pfx)
Steps to exporting S/MIME certificate in .PFX format:
1. Check for Private Key
-
Open Certificate Manager:
-
Press Win + R, type certmgr.msc, and press Enter.
-
Navigate to Personal > Certificates.
-
Locate your S/MIME certificate.
-
If the certificate shows “You have a private key that corresponds to this certificate”, you can export it as .pfx.
2. Export the Certificate
-
Right-click the certificate → All Tasks > Export.
-
Select Yes, export the private key.
-
Choose PFX format and set a strong password.
-
Complete the export wizard.
3. If Private Key Is Missing
-
You cannot export the certificate without the private key.
-
The only solution is to reissue the certificate:
-
Contact Support/Raise a ticket to cancel your order for receiving store credit.
-
Login to Sectigo Account using the link: Sectigo login. Use store credits to purchase a new S/MIME certificate.
-
Generate a new CSR on the system where you plan to use the certificate.
-
Include the Certificate Signing Request (CSR) as part of your certificate order submission.
-
Complete validation and install the new certificate.
4. Best Practices
-
Always generate the CSR and install the certificate on the same machine.
-
Backup the private key securely during installation.
-
Use strong passwords when exporting .pfx files.
Important Note
Sectigo cannot recover your private key because it is never transmitted to Sectigo for security reasons.
Related Articles:
Tags:
Need help?
Need help making a purchase? Contact us today to get your certificate issued right away.
Live chat
Click the button below or click "Chat with an Expert" to start chatting with us now!
