OK, I am tired of forgetting this information and having to re-research it.
A PEM file is an X.509 digital certificate, specifically a “Base64 encoded DER certificate” (thank you Wikipedia). The components are concatenated in the following format:
- Private key (optional)
- Server certificate
- Intermediate certificate (optional)
- Root certificate (optional)
or, in other words,
cat server.key server.crt ca-bundle.crt >> server.pem.
That is my final word on the subject. This evening did not involve attending our intended Peter Mulvey concert, but did involve hanging out at home with various friends and drinking a Bourble; I hadn’t previously encountered this cocktail, but rather mixed it in an attempt to finish off a bottle of triple sec. It wasn’t bad; I found the lemon juice a bit too strong and will use less next time, or maybe lime juice, or maybe a Meyer lemon if I have one handy.