X 509 certificates and PFX files

Hello everyone,

Can someone explain this to me?

I work with Aladdin's eToken, and at some point I must insert a X509
certificate stored in a .PFX file on one eToken (I do it using MS CAPI)

I have one PFX file for tests purposes. The file size is 6k.

At first it didn't work, so I tried a little something: I installed the
certificate by double-clicking it, so I can see it through Internet
Explorer's Content tab.

There, I export the certificate with its private key into a new PFX
file, and the result is indeed a PFX file...but its size is *3k*, not 6
as I would expect.

With that 3k file, it works just fine, no matter if I check the strong
protection checkbox or not!!

I don't have any clue about what's going on here, can someone possibly
help me to understand why the result of the export is differnet from the
original PFX file?

Thanks a lot

Vincent Kirsch

Vincent Kirsch wrote:
> Can someone explain this to me?
> I have one PFX file for tests purposes. The file size is 6k.
> There, I export the certificate with its private key into a new PFX
> file, and the result is indeed a PFX file...but its size is *3k*, not 6
> as I would expect.

There can be a number of reasons. One of them not including CA
certificates in the px file.

Groetjes
John

John