Export an intermediate certificate

  • Release version: Washingtondc
  • Updated February 1, 2024
  • 1 minute to read

    • Export an active directory (AD) intermediate certificate in your Windows machine to register the exported certificate on the ServiceNow instance.

    Before you begin

    Do this task in your Windows machine.

    Role required: admin

    About this task

    If your organization doesn't require an intermediate certificate, skip this task.

    Procedure

    1. In your Windows machine, from the Search menu, enter Manage computer certificates.
    2. To export the intermediate certificate based on your business requirement, do the following actions:
      1. In the Certificate Manager tool, navigate to Certificates - Local Computer > Personal > Certificates.
      2. Double-click the required client authentication-based certificate.
      3. On the Certification Path tab, double-click the intermediate certificate.
      4. On the Details tab, verify the serial number and select OK.
      5. Navigate to Certificates - Local Computer > Intermediate Certification Authorities > Certificates.
      6. To match the intermediate certificate with the serial number, double-click an intermediate certificate.
      7. On the Details tab, verify that the serial number matches and select OK.
        Repeat this step until you find a match.
      8. After you identify the intermediate certificate, right-click the intermediate certificate, select All Tasks, and then select Export....
      9. In the Welcome to the Certificate Export Wizard dialog box, select Next.
      10. In the Export File Format dialog box, select the Base-64 encoded X.509 (.CER) file format, and select Next.
      11. In the File to Export dialog box, select the file name location in the File name field or click Browse to save the certificate file, and then select Next.
      12. In the Completing to the Certificate Export Wizard dialog box, select Finish.
      13. After the export is complete, in the Certificate Export Wizard dialog box, select OK.
    3. To rename the file extension of the exported intermediate certificate, do the following actions:
      1. Locate the exported certificate file.
      2. Right-click the certificate file and select Rename.
      3. In the file name, rename the file extension from .cer to .pem.
        For example, change the Intermediate CA.cer file name to Intermediate CA.pem.
      4. In the confirmation dialog box, select Yes.

    What to do next

    Register the intermediate certificate to make it available for authentication. For more information, see Register the CA certificate.