1. openssl pkcs12 -in certificate.pfx -clcerts -nokeys -out cert.crt
  2. openssl pkcs12 -in cert.pfx -nocerts -out encrypted.key
  3. openssl rsa -in encrypted.key -out cert.key