KEY and CRT from PFX:
openssl pkcs12 -in [yourfile.pfx] -nocerts -out [keyfile-encrypted.key]openssl pkcs12 -in [yourfile.pfx] -clcerts -nokeys -out [certificate.crt]
Encrypted KEY to decrypted KEY: openssl rsa -in [keyfile-encrypted.key] -out [keyfile-decrypted.key]
PEM from key: openssl rsa -in [keyfile-encrypted.key] -outform PEM -out [keyfile-encrypted-pem.key]