openssl pkcs12 -in foo.pfx -nocerts -out key.pem openssl pkcs12 -in foo.pfx -clcerts -nokeys -out cert.pem
openssl pkey -in foo-key.pem -out foo.key