Certain devices are only able to accept certificate in PEM format whereas certain Certificate Authorities are not delivering such formats. Example: WLC, CCA need certficates in PEM format, whereas Windows Server 2003 Enterprise- CA provides only PKCS#12 (PFX format). WinOpenSSL allows converting certificate between different formats.