WhyCrashed

.pfx · application/x-pkcs12

What is a .pfx file?

PKCS#12 Bundle

Got a .pfx file right now?

Our Certificate Decoder reads it in your browser — no upload, no install.

Open the Certificate Decoder →

About the format

A .pfx file (PKCS#12, same as .p12) is the container Windows uses to move a certificate TOGETHER WITH ITS PRIVATE KEY — plus, usually, the intermediate chain — in one password-protected file. That private key is what makes .pfx different in kind from .cer/.crt/.pem certificates: whoever has the file and its password can impersonate the certificate's subject, decrypt its traffic, or sign code as its owner. Treat a .pfx like a credential: strong password, careful storage, delete stray copies after import. You create one when exporting from certmgr.msc with 'include private key', or with openssl pkcs12 -export; you consume one when installing a certificate onto a Windows server, an IIS site, or a code-signing setup. Two eternal .pfx problems: forgotten export passwords (there is no recovery — reissue the certificate) and modern AES-256-encrypted bundles that older tools can't open (re-export with compatible settings, or use current tooling).

How to open a .pfx file

Windows

  • WhyCrashed Certificate Decoder (browser, needs the password)
  • double-click (Certificate Import Wizard)
  • certutil

macOS

  • Keychain Access
  • openssl pkcs12

Linux

  • openssl pkcs12

Is a .pfx file dangerous?

It's not malware — it's SENSITIVE. It contains a private key; leaked, it compromises everything that key protects.

Related file types

.p12.cer.key.pem

Not sure what a file is? Check its bytes.

File names lie; magic numbers don't. Drop any file into the identifier — nothing is uploaded.

Identify a file →