Extracting the certificate and keys from a .pfx file

Extract certificate

openssl pkcs12 -in example-coop.pfx -clcerts -nokeys -out example-coop.crt

Extract private key

openssl pkcs12 -in example-coop.pfx -nocerts -out example-coop.key

Decrypt private key

openssl rsa -in example-coop.key -out example-coop.key

Extract CA chain

openssl pkcs12 -in example-coop.pfx -cacerts -nokeys -chain -out example-coop.chain

Combine certificate and chain for use with Nginx

cat example-coop.crt example-coop.chain > example-coop.chained

Links