I have imported a .p12 file inside Firefox/Thunderbird, now I would like to export its public key (without using openssl or whatever command line code), so I can distribute it and people can encrypt/verify my signature.

Is it possible to do this only using builtin tools ? ie : from the certificate manager found in Firefox/TB (Options > Advanced/Certificates) ?

I'm a bit confused with all these different formats :

What I see from the aforementionned window in the "your certificates" tab, is that I can 'save' my certificate (which outputs a .p12). So both public & private key right ?

Now if I click on "show" for a given certificate, and I go to the details Tab, there is an export button that opens a save dialog with several possible formats (crt, pem, pem-chained, der, pkcs#7, ...). Will this also export the private key ? Or is it safe to export (no private key) to any of these format and distribute the output file ?

migrated from security.stackexchange.com Feb 2 '15 at 10:39

This question came from our site for information security professionals.


This article is quite helpful

PKCS#7 is definitely what I want in my case (public certificate dissemination for signature/encryption).

So from the certificate view tab of Firefox : click on "show" for a given certificate, then switch to the other tab and export in pkcs#7 format

However the fastest way to share the public key is probably to send a signed email

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.