criar certificado openssl

openssl x509 -inform der -in servicos.crt -out servicosCA.pem
   openssl x509 -inform der -in COMODORSAOrganizationValidationSecureServerCA.crt -out servicosCA.pem
   openssl x509 -inform der -in COMODORSAAddTrustCA.crt -out servicosCA.pem
   openssl x509 -inform der -in AddTrustExternalCARoot.crt -out servicosCA.pem

   openssl genrsa -des3 -out sql.key 2048
   openssl req -new -key sql.key -out sql.csr

   openssl x509 -req -in sql.csr -days 7300 -signkey sql.key -out sql.pem
   openssl x509 -in sql.pem -inform PEM -out sql.cer -outform DER
   openssl rsa -in sql.pem -outform PVK -pvk-strong -out sql.pvk
   openssl rsa -in sql.key -outform PVK -pvk-strong -out sql