1 test.crt: self signed certificated
2 % gpgsm --gen-key # needs gpgsm 2.1
4 key+cert.pem: cert + unencryped private
5 % gpsm --import test.crt
6 % gpgsm --export-private-key-p12 -out foo.p12 (no passphrase)
7 % openssl pkcs12 -in ns.p12 -clcerts -nodes > key+cert.pem