1.把PEM转成PKCS12格式1openssl pkcs12 -export -out ca.p12 -in ca.pem -inkey ca.key -passin pass:'whatever' -passout pass:'whatever' 2. 把pem转成crt(包含私钥)1openssl pkcs12 -expo