openssl pkcs12 -in test.p12 -out test.crt -clcerts -nokeys openssl pkcs12 -in test.p12 -out test.key -nodes -nocerts openssl pkcs12 -in test.p12 -out cacerts.crt -nokeys -cacerts