# Extract CA openssl pkcs12 -in ${cert}.pfx -nodes -nokeys -cacerts -out ${cert}-ca.crt # Extract Key openssl pkcs12 -in ${cert}.pfx -nocerts -out ${cert}.key # Extract Cert openssl pkcs12 -in ${cert}.pfx -clcerts -nokeys -out ${cert}.crt # Remove Password openssl rsa -in ${cert}.key -out ${cert}.key # Generate Bundle cat ${cert}.crt ${cert}-ca.crt > ${cert}-bundle.crt