You can create PEM-format certificates by downloading the certificate from the CA's Web site or by exporting the certificates from a host system.

For example, you can download certificates for Verisign from the Symantec Web site at https://www.symantec.com/page.jsp?id=roots.