How to Export Certificate from Chrome on a Mac?

SecurityGoogle ChromeCertificateExportPinning

Security Problem Overview


How do I export a security certificate from Chrome v37 on a Mac?

Previously I could click on the little lock icon next to the URL, select "Connection," select the certificate, and an "Export" button would appear.

Not so anymore!

Security Solutions


Solution 1 - Security

Edit 4/3/19: I have found a workaround. This is tested on Chrome for Mac 73.0.3686.86 64-bit, platform: macOS 10.14.4:

  1. Open a new TextEdit document.
  2. In TextEdit, click Format | Make Plain Text.
  3. Arrange windows so that the TextEdit window and the Chrome window are both visible.
  4. In Chrome, click the icon to the left of the URL in the address bar.
  5. In the dropdown list, click Certificate.
  6. Hold down Option and drag from the large certificate icon to the body of the TextEdit document. Note: If you did not follow the steps above in exactly the order stated, you may need to first single-click within the Chrome window so that TextEdit doesn't become hidden when you Option-click.
  7. Save the TextEdit document with a .pem extension.

If you don't hold down Option when you drag, then you will instead get the certificate contents in human-readable form, which can also be handy.

(Edited 2/24/19: @RichardTopchiy is correct, this no longer works. Testing on Chrome 72.0.3626.119 64-bit. I don't know of any workaround at the present.)

(Edited 2/10/17: I have added a more up-to-date answer in a comment: https://stackoverflow.com/questions/25940396/how-to-export-certificate-from-chrome-on-a-mac/30177897#comment71501487_30177897)

  1. Click the icon to the left of the URL.
  2. In the box that pops up, click the Connection tab.
  3. Click the Certificate Information link.
  4. A box pops up showing information about the certificate. Drag the large certificate icon to a Finder window. A .cer file will be created in the location you drag it to.

This is based on Chrome 42.0.2311.135 (64-bit) for Mac.

Solution 2 - Security

You should make flowing steps,

show certificate detail on chrome browser on macOS

domain-detail

drag big certificate icon on certificate detail window

certificate-detail

drop the icon to desktop and ta-ta! created the domain certificate .cer file on the desktop

certificate-on-desktop

Solution 3 - Security

As of Chrome 72 the certificate icon cannot be dragged/exported from Chrome as @RichardTopchiy stated in his comments.

However Safari does still allow the certificate icon to be dragged from the browser.

So the easiest way to export the certificate from Chrome is... to use a different browser to export the SSL certificate. Once the certificate is trusted, it will work on any browser on that device's user account. You're just using Safari to export the certificate easily.

Solution 4 - Security

@Simon Zuckerbraun's answer is correct. My workaround is almost the same as Simon's. But don't need to use Text Editor, just drag the certificate to the Desktop Window then the certificate will be created immediately. Follow these steps :

  1. Open Google Chrome, go to the site.
  2. Click the icon to the left of the URL in the address bar.
  3. Click Certificate
  4. Arrange windows so that the Chrome window and the Desktop window are both visible.
  5. If you want to get a .cer certificate, drag from the large certificate icon to the desktop. If you want to get a .pem certificate, hold down option, and drag from the large certificate icon to the desktop.

Click here for more details

Solution 5 - Security

I found a workaround and tested by Chrome Version 73.0.3683.103 (Official Build) (64-bit) on Macos 10.14.3.

When open the site with unsafe certificate, Chrome will show an error page 'Your connection is not private', follow the below steps:

  1. Click the text 'NET::ERR_CERT_AUTHORITY_INVALID', the content of the certificate will be shown.
  2. Copy the content from the line '-----BEGIN CERTIFICATE-----' to '-----END CERTIFICATE-----'.
  3. Paste them into a text editor, and save as a .crt file with plain text format.
  4. Import the .crt file into Keychain Access.

Solution 6 - Security

I was able to start it with --ignore-certificate-errors --incognito. Incognito so that it doesn't use any open sessions.

Solution 7 - Security

New browsers process is different. Please follow the below steps Inspect the chrome browser-> You can find Security tab -> Click on the View Ceritificate button then i will open the popup Click on the details tab and press Copy to file button

Then press the buttton Next->Next->Browse->Save the file in your local directory. The file will save with .cer extension.

Attributions

All content for this solution is sourced from the original question on Stackoverflow.

The content on this page is licensed under the Attribution-ShareAlike 4.0 International (CC BY-SA 4.0) license.

Content TypeOriginal AuthorOriginal Content on Stackoverflow
QuestionkmiklasView Question on Stackoverflow
Solution 1 - SecuritySimon ZuckerbraunView Answer on Stackoverflow
Solution 2 - SecurityalikadirView Answer on Stackoverflow
Solution 3 - SecurityGavin KempView Answer on Stackoverflow
Solution 4 - SecurityRico ArdiansyahView Answer on Stackoverflow
Solution 5 - Securityuser2606091View Answer on Stackoverflow
Solution 6 - SecurityJose H. MartinezView Answer on Stackoverflow
Solution 7 - SecurityGIRI KUMAR PANEMView Answer on Stackoverflow