1. In PingFederate, go to Security > Signing & Decryption Keys & Certificates and click Create New.
  2. Enter the values for the required fields then click Next and Done.
  3. Locate your certificate and select Export from the Select Action menu.
  4. Go to Certificate Only > Next > Export.

    Note the location of your downloaded certificate on your file system.

  5. Open your terminal application and change the directory to the location containing your exported certificate.
  6. To convert your certificate to .p7b format, run openssl crl2pkcs7 -nocrl -certfile <your original certificate filename>.crt -out <your desired new filename>.p7b -outform DER .
  7. Note the location of your new .p7b certificate.