When converting and installing a public-key cryptography standards (PKCS) #7 certificate (which has .p7b file extension) to Privacy Enhanced Mail (PEM) format by using OpenSSL toolkit, the “unable to load PKCS7 object” error message is displayed.

To resolve this issue, complete the following procedure:

1. Save a copy of the .p7b certificate file on the computer.

2. Open the certificate file.

3. Expand the node in the left-pane which displays path where the certificate is stored as shown in the following screen shot.

   

   The certificates stored on the computer are displayed in the right-pane.

4. Open the required certificate from the right-pane. The certificate opens as shown in the following screen shot.

   

5. Activate the Details tab.

6. Click Copy to File as shown in the following screen shot.

   

7. Click Next in the Certificate Export Wizard as shown in the following screen shot.

   

8. Select the Base-64 encoded X.509 (.CER) option and then click Next as shown in the following screen shot.

   

9. Click Browse and specify the file name to which you want to export the certificate as shown in the following screen shot.

   

10. Click Next.

11. Click Finish as shown in the following screen shot.

    

12. Click OK as shown in the following screen shot.

    

13. Transfer the exported certificate to the /nsconfig/ssl directory of the NetScaler appliance as shown in the following screen shot.

    

14. Install the certificate.

CTX124783 - How to Convert a PKCS #7 Certificate to PEM Format