<no title> — xca 2.9.0 documentation

> - PEM: (*.crt) PEM Text format with headers

> - PEM selected: (*.pem) Concatenated list of all selected certificates in one PEM text file

> - PEM chain: (*.pem) Concatenated text format of the complete certificate chain in one PEM file

> - OpenVPN: (*.ovpn) The complete certificate chain and the private key of the selected certificate with tags usable in OpenVPN configuration files

> - PEM + key: (*.pem) Concatenation of the certificate and the unencrypted private key in one PEM file

> - PEM + PKCS#8: (*.pem) Concatenation of the certificate and the encrypted private key in PKCS#8 format in one file

> - All unusable: (*.pem) Concatenation of all expired or revoked certificates in one PEM file

> - PKCS #7: (*.p7b) PKCS#7 encoded single certificate

> - PKCS #7: (*.p7b) All selected certificates encoded in one PKCS#7 file

> - PKCS #7 chain: (*.p7b) PKCS#7 encoded complete certificate chain

> - PKCS #7 unusable: (*.p7b) PKCS#7 encoded collection of all expired or revoked certificates

> - DER: (*.cer) Binary DER encoded certificate

> - PKCS #12 chain: (*.pfx) The complete certificate chain and the private key as encrypted PKCS#12 file

> - PKCS #12: (*.pfx) The certificate and the private key as encrypted PKCS#12 file

> - Certificate Index file: (*.txt) OpenSSL specific Certificate Index file as created by the ‘ca’ command and required by the OCSP tool

> - vCalendar: (*.ics) vCalendar expiry reminder for the selected items

> - CA vCalendar: (*.ics) vCalendar expiry reminder containing all issued, valid certificates, the CA itself and the latest CRL

> - OpenSSL config: (*.conf) OpenSSL configuration file to create a certificate or request with the openssl commandline tool

> - OpenVPN tls-auth key: (*.key) The OpenVPN tls-auth key is a secret key shared between endpoints

> - JSON Web Kit: (*.jwk) The public key of the certificate in JSON Web Kit format with X.509 Certificate Thumbprint (x5t)

> - JSON Web Kit chain: (*.jwk) The public key of the certificate in JSON Web Kit format with X.509 Certificate Thumbprint (x5t) and certificate chain (x5c)