On This Page
REST API

Extracting the Private Key from the PKCS12 Certificate

When you have your PKCS12 certificate, extract the private key from the certificate. Use this key to sign your header at a later time.

Prerequisite

You must have a tool such as OpenSSL installed on your system.

Extracting the Private Key

Follow these steps to extract the private key using OpenSSL:
  1. Open the command-line tool and navigate to the directory that contains the PKCS12 certificate.
  2. Enter this command:
    openssl pkcs12 -in [certificate name] -nodes -nocerts -out [private key name]
  3. Enter the passcode for the certificate. The passcode is the organization ID for the account.
The new certificate will be added to the directory using the private key name you supplied in Step 2.