title: Can I combine multiple certs into one without the private key?
body: <p>I need to have up to date cert trust stores in many devices, so I would like to be able to combine them into on cert that I can then just push that one file. I only want to bundle the public keys of the many CA's but I do not want to add the private file because I want a cert that I push to all of my devices. I was thinking that this feature was called a chain but openssl will not take the command without a private file. Can this be done? I have tried several different things and I have looked at many threads here but I don't know what I am doing.</p>
  
  <h2>Edit</h2>
  
  <p>The command that I was trying to use was:</p>
  
  <pre><code>openssl -export -pkcs12 -out output.pem -cafile intermediate.pem
  </code></pre>
  
  <h2>Edit</h2>
  
  <p>I tried "openssl crl2pkcs7 -certfile bundle.pem -out p7.pem" but it produced an error:</p>
  
  <pre><code>openssl crl2pkcs7 -certfile bundle.pem -out p7.pem
  unable to load CRL
  9460:error:0906D06C:PEM routines:PEM_read_bio:no start line:.\crypto\pem\pem_lib.c:701:Expecting: X509 CRL
  </code></pre>
  
  <p>I also tried:</p>
  
  <pre><code>openssl pkcs7 -in bundle.pem -out p7.pem
  unable to load PKCS7 object
  3676:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:.\crypto\asn1\tasn_dec.c:1201:
  3676:error:0D06C03A:asn1 encoding routines:ASN1_D2I_EX_PRIMITIVE:nested asn1 error:.\crypto\asn1\tasn_dec.c:765:
  3676:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error:.\crypto\asn1\tasn_dec.c:697:Field=type, Type=PKCS7
  3676:error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib:.\crypto\pem\pem_oth.c:83:
  </code></pre>