crt转pem openssl x509 -inform der -in xxx.crt -out xxx.pem pfx转pem openssl pkcs12 -in xxx.pfx -nocerts -out xxx.pem