openssl pkcs12 -in cert.pfx -nocerts -nodes -out private.key
openssl pkcs12 -in cert.pfx -clcerts -nokeys -out cert.pem
openssl pkcs12 -in cert.pfx -cacerts -nokeys -out ca-chain.pem
cat cert.pem ca-chain.pem > fullchain.pem