My server type is not on the list of available servers, how can I make sure I receive the certificate in an appropriate format?

At the second step of the SSL certificate activation (Step 2 - CSR info confirmation) you can check if our system detected your server type correctly. It is possible to change the server type by selecting a corresponding radio button.

You can get the CSR code as well as the type of the web server from your hosting provider.

There are two possible options: Windows IIS or Java Tomcat and Any other server (cPanel, Apache, NGINX, etc.).


The server type choice defines the format of the certificate files that will be sent to you from Sectigo Certificate Authority (former Comodo CA).

If you select Windows IIS or Java Tomcat as your webserver, you will get the certificate in PKCS#7 format from Sectigo CA. The PKCS#7 / P7B format has a file extension of .p7b and .cer. P7B certificates contain "-----BEGIN PKCS7-----" and "-----END PKCS7-----" header/footer. A P7B file only contains the certificate and chain certificates, without the private key. Windows and Java Tomcat server support SSL certificates in P7B format.

Choosing Any other server (cPanel, Apache, NGINX, etc.), you receive the certificate in PEM format. The PEM format is the most common format that Certificate Authorities have for certificates. It is suitable for Apache, Nginx and other Linux-based servers. PEM certificates usually have extensions such as .pem, .crt. They contain "-----BEGIN CERTIFICATE-----" and "-----END CERTIFICATE-----" headers.

The PKCS#12 or PFX format is a binary format which consists of a server certificate, a CA Bundle (Intermediate and Root certificates), and a private key in one encrypted file. PFX files usually have extensions such as .pfx and .p12. PFX files are typically used on Windows machines to import and export certificates and private keys. Certificate Authorities do not issue certificates in PFX format.
If you need to create a PFX file, you can convert files you have here or using Openssl command line utility tool.

    The server type can be changed only during the reissue process.

However, you can download your certificate in the required format in your account with us. Article Can I download an issued certificate on your site? may provide you with the instructions on how to get the certificate in a required format, if you received it in a wrong one.


19490 times


We welcome your comments, questions, corrections and additional information relating to this article. Your comments may take some time to appear. Please be aware that off-topic comments will be deleted.

If you need specific help with your account, feel free to contact our Support Team. Thank you.

Need help? We're always here for you.

× Close