1. pfx -> pem

penssl pkcs12 -in xxx.pfx -nodes -out server.pem

2. pem -> key

openssl rsa -in server.pem -out server.key

3. pem -> crt

openssl x509 -in server.pem -out server.crt