| Extension(s) | Format | Contains | Header | Related Identification Command |
|---|---|---|---|---|
.crt, .pem, .cer |
PEM (base64) | X.509 Certificate (+ optional chain) | -----BEGIN CERTIFICATE----- |
openssl x509 -in <cert> -text -noout |
.cer, .der |
DER (binary) | X.509 Certificate (unique*) | (binary) | openssl x509 -in <cert> -inform DER -text -noout |
.p7b, .p7c |
PKCS#7 (PEM or DER) | Certificate chain | -----BEGIN PKCS7----- (or binary if in DER) |
openssl pkcs7 -in <cert> -print_certs -noout |
.csr |
PEM (base64) or DER (binary) | Certificate Signing Request | -----BEGIN CERTIFICATE REQUEST----- (or binary if in DER) |
openssl req -in <cert> -text -noout |
.pub |
OpenSSH |