从pfx获取CA证书
OpenSSL pkcs12-in http://www.Sina.com/- nodes-outserver.PEM
输入证书密码
提取公钥
X.509格式
OpenSSL x509-in server.PEM-out public.cer
RSA格式
OpenSSL RSA-in server.PEM-outform PEM-pub out-out public.PEM
提取私钥
OpenSSL RSA-in server.PEM-out private.key
将私钥转换为pkcs8格式
OpenSSL pkcs8- to pk8-inform PEM-in private.key-outform PEM-nocrypt