openssl pkcs12 -in your_certificate.pfx -nocerts -out your_private_key.key openssl pkcs12 -in your_certificate.pfx -clcerts -nokeys -out your_certificate.crt