[USG Flex H] - Export the CA trusted certificate

Maverick87

Hello everyone,

I try to use the internal certificate functionality; I've tried to create a cert and download it, all works.

But, when I try to export the CA certificate from the "Trusted Certificates" tab, the downloaded file seems to be corrupted.

Anyone that uses this functionality? Can you help me to export the CA cert?

Thank you

zyman2008

Hi @Maverick87

It's about the certificate file format.

PEM format: Text-based (Base64 encoded)

DER format: Binary

Zyxel firewall exported format is DER.

You need using tool to convert the format. (e.g. openssl or some online convert, https://certificatetool.com/ssl-converter/der/der-to-pem)

Maverick87

Hi @zyman2008,
OK but ….

Seems that the default name have ".CRT" into the file name; also the saving window show me only ".CRT" or "*.*" as filter.

So, ok can be a DER file, but if not specified we cannot say it.

@Zyxel_Melen could you checking for this?

Thank you

Zyxel_Judy

Hi @Maverick87 ,

We are currently looking into this issue and will keep you updated as soon as we have any news.

Zyxel_Judy

Hi @Maverick87 ,

It looks like you opened the .crt file as a text file after downloading it, which is why the contents appear as unreadable characters. Typically, on Windows, you can view the certificate correctly by double-clicking the file and Open button, which will display the proper issuer information.

To better assist you, could you share more details about what you're trying to accomplish with this certificate?

Maverick87

Hi @Zyxel_Judy,
teorically, a certificate can be opened with notepad.

PeterUK

so if you want the

-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----

you can double click certificate in FLEX H to view this and save in notpad

Maverick87

Hi @PeterUK,
OK so for the Trusted Certificate, the export is not in CRT format (but as explain some posts ago, why you should propose to save the cert in CRT format, but is not in CRT format?) but if I click on the certificate, I can take the BEGIN-END certificate and use it? Is the same things?

Thank you

PeterUK

yes

Maverick87

Thank you @PeterUK

Maverick87

Hi @Zyxel_Judy,

for me is all clear, but remains one open point about why the file extension during save is .CRT if the file is in a DER format?
Could you change the save filter from *.CRT to *.DER?

Thank you