Certificate and keystore guides

Practical guides for inspecting PFX and P12 archives, diagnosing Java keystores, and fixing OpenSSL 3 errors with reproducible commands.

• How to Open a PFX/P12 File and Inspect Its Certificates

  Inspect a PFX or P12 file with OpenSSL or PKIScope. Check its certificate, private-key presence, validity dates, DNS names and issuer chain.

• How to Inspect a JKS Keystore with keytool

  List JKS aliases, check private-key and trusted certificate entries, and convert a Java keystore entry to PKCS#12 using keytool.

• Fix OpenSSL 3 Legacy PFX Errors (RC2-40-CBC)

  Diagnose RC2-40-CBC and unsupported errors in OpenSSL 3, open a legacy PFX with the legacy provider, and repack it with modern encryption.