Generate certificate chain pem file (root ca on the top) openssl pkcs12 -in my.pfx -out ca.pem -cacerts -nokeys Generate client certificate pem file openssl pkcs12 -in my.pfx -out key.pem -nocerts
