openssl pkcs12 -in MonCertificat.pfx -chain -nokeys -out MonCertificat.crt