# enter password and pass phrase used to encrypt when prompted
openssl pkcs12 -in [yourfile.pfx] -nocerts -out [cert_encr.key]
openssl pkcs12 -in [yourfile.pfx] -clcerts -nokeys -out [cert.crt]
# decrypt the key file
openssl rsa -in [cert_encr.key] -out [cert.key]