openssl pkcs12 -in cert.pfx -out newcert.pem -nodes