Braucht man z.B. für Firefox:
openssl pkcs12 -inkey certificate.key -export -in certificate.crt -out certificate.pfx -certfile sub_ca.crt