openssl pkcs12 -in mycert.p12 -out ca.pem -cacerts -nokeys openssl pkcs12 -in mycert.p12 -out client.pem -clcerts -nokeys openssl pkcs12 -in mycert.p12 -out key.pem -nocerts