cert.create.bat unable to add certificate

if i try to open http://192.168.0.249/trailers.cer this in a browser

i have

Error response

Error code 403.

Message: Not Serving Client 192.168.0.249.

Error code explanation: 403 = Request forbidden -- authorization will not help.

im not sure if its normal ?

As I mentioned in my last post the bat you are using is creating a Der not. Cer, change the bat to be .cer and run it again

ok i will try the .bat thing

im not sure if its all you need ?

but how to change the .bat to .cer ???

Change it in the command txt you put into the cmd prompt to create the file.

ok, that is what iv use

C:\OpenSSL-Win32\bin\openssl.exe req -new -nodes -newkey rsa:2048 -out C: railers.pem -keyout C: railers.key -x509 -days 7300 -subj "/C=US/CN=trailers.apple.com" -config C:\OpenSSL-Win32\bin\openssl.cfg

C:\OpenSSL-Win32\bin\openssl.exe x509 -in C: railers.pem -outform der -out C: railers.cer

type C: railers.key >> C: railers.pem

i have put that in a .bat file and double click

and the only things i have got is a .rnd

and im not sure how tou  use cmd prompt.

If you’ve installed ssl then just open cmd and run as administrator then copy and paste the command txt into that but change .bat to .cer, then the 3files will appear on your computer. Install the certificate and add it to profile on Apple TV and move the pem file to the certificates folder in plex connect

Here are the commands to use .


C:\OpenSSL-Win32\bin\openssl.exe req -new -nodes -newkey rsa:2048 -out C: railers.pem -keyout C: railers.key -x509 -days 7300 -subj “/C=US/CN=trailers.apple.com” -config C:\OpenSSL-Win32\bin\openssl.cfg


C:\OpenSSL-Win32\bin\openssl.exe x509 -in C: railers.pem -outform der -out C: railers.der


type C: railers.key >> C: railers.pem

The second one should be;


C:\OpenSSL-Win32\bin\openssl.exe x509 -in C: railers.pem -outform der -out C: railers.cer

Sorry i meant

C:\OpenSSL-Win32\bin\openssl.exe x509 -in C: railers.pem -outform cer -out C: railers.cer

Sorry i meant
C:\OpenSSL-Win32\bin\openssl.exe x509 -in C: railers.pem -outform cer -out C: railers.cer


Isn't the change to .cer only required for windows 8, I have used the .der file on win 7 successfully and only when I upgrade to windows 8 did require to use a .cer certificate

If you are trying to put it on the ATV via the network option (Which he said he is doing) then Plexconnect WIKI says cer.  If you use the iPhone Config Util then the der works.

Or thats my understanding.

We changed the wiki to .cer to try and reduce confusion around it being named differently on Windows.

Thanks for the clarification f00b4r, however if he has used the old Der instructions then he should be adding the profile to ye ATV via the network option using


http://192.168.0.249/trailers.der not http://192.168.0.249/trailers.cer as he has listed in one of his posts

thanks for alll!!!!! its working now ... but  i can navigate in plex but when i try a channel (ex. pbs) i can chose something  s01e12, clic enter and after ino responce from plex media server. i will search what to do but if you have some idea for that !!1

by the way

i prefer the installation with note pad and shift left clic

C:\OpenSSL-Win32\bin\openssl.exe req -new -nodes -newkey rsa:2048 -out C:. railers.pem -keyout C:. railers.key -x509 -days 7300 -subj "/C=US/CN=trailers.apple.com" -config C:\OpenSSL-Win32\bin\openssl.cfg

C:\OpenSSL-Win32\bin\openssl.exe x509 -in C:. railers.pem -outform der -out C:. railers.cer

type C:. railers.key >> C:. railers.pem

trailers.der