title: Exporting SSL Certificate in Linux Browser (or Linux Command Line) for Java Certificate Truststore
body: <p><strong>Background:</strong></p>
  
  <p>I am having some trouble consuming a Web Service with ColdFusion 9 (peer not authenticated).</p>
  
  <p>First, I'm going to try <a href="http://helpx.adobe.com/coldfusion/kb/import-certificates-certificate-stores-coldfusion.html" rel="nofollow noreferrer">importing the cert into ColdFusion's underlying Java keystore</a>. If that doesn't work, I'm going to try to <a href="http://www.raymondcamden.com/index.cfm/2011/1/12/Diagnosing-a-CFHTTP-issue--peer-not-authenticated" rel="nofollow noreferrer">fiddle with ColdFusion's security provider</a>.</p>
  
  <p>But my questions are more specific...</p>
  
  <p><strong>Question:</strong></p>
  
  <p>How do I export the cert (at the right level) in Chrome (or Linux CLI), and in which format?</p>
  
  <p><strong>Details</strong></p>
  
  <p>I have seen some instructions for exporting a cert from a browser, but they have been for IE (old versions, at that), and I would prefer to use Chrome, because I'm on Linux.</p>
  
  <p>In order to get to the screen shot, below, I:</p>
  
  <ul>
  <li>Click the lock icon next to the URL</li>
  <li>"Connection" tab (shows "The identity of this website has been verified by Thawte SSL CA")</li>
  <li>Click "Certificate Information Link"</li>
  <li>"Details" tab</li>
  </ul>
  
  <p><img src="https://i.stack.imgur.com/CiaYb.png" alt="Screen Shot of Chrome&#39;s Certificate Export Dialog"></p>
  
  <p>From there, I am able to export at one of four levels:</p>
  
  <ul>
  <li>Builtin Object Token:Thawte Premium Server CA</li>
  <li>thawte Primary Root CA</li>
  <li>Thawte SSL CA</li>
  <li>sb1.geolearning.com</li>
  </ul>
  
  <p>Which one is appropriate?</p>
  
  <p>Also, <a href="http://helpx.adobe.com/coldfusion/kb/import-certificates-certificate-stores-coldfusion.html" rel="nofollow noreferrer">Adobe's documentation</a> says "The certificate must be an X.509 certificate in Distinguished Encoding Rules (DER) format.", and Chrome's export dialog offers these options:</p>
  
  <ul>
  <li>Base64-encoded ASCII, single certificate</li>
  <li>Base64-encoded ASCII, certificate chain</li>
  <li>DER-encoded binary, single certificate</li>
  <li>PKCS #7, single certificate</li>
  <li>PKCS #7, certificate chain</li>
  <li>All Files</li>
  </ul>
  
  <p>I assume "DER-encoded binary, single certificate" is appropriate?</p>