Convert a pfx file to a crt and a key:
openssl pkcs12 -in root.pfx -nocerts -out root.key
openssl pkcs12 -in root.pfx -clcerts -nokeys -out root.crt
Create a private key:
openssl genrsa -out private.key 2048
Create a CSR:
openssl req -new -key private.key -out csr.csr
Create a signed SSL certificate:
openssl x509 -req -in csr.csr -CA root.crt -CAkey root.key -CAcreateserial -out ssl_certificate.crt -days 365