openssl pkcs12 -in file.p12 -out newfile.crt.pem -clcerts -nokeys
openssl pkcs12 -in file.p12 -out newfile.key.pem -nocerts -nodes