- Extract CA Cert(s)
openssl pkcs12 -in myapp.pfx -cacerts -nokeys -out myapp-ca.crt- Extract Server Cert
openssl pkcs12 -in myapp.pfx -clcerts -nokeys -out myapp-server.crt- Create Chain Cert
cat myapp-server.crt myapp-ca.crt > myapp-chain.crt- Extract Private Key
openssl pkcs12 -in myapp.pfx -nocerts -out myapp.key -nodes