0. Prepare cert.pfx and its password, verify_sign_acp.cer
1. Get Private Key
$ openssl pkcs12 -in cert.pfx -nocerts -nodes | openssl rsa -out private_key.pem
2. Public key is verify_sign_acp.cer
3. Get Cert ID
$ openssl pkcs12 -in cert.pfx -clcerts -nokeys | openssl x509 -serial -noout // result hex eg: XXXXXXXXXX
visit https://lokielse.github.io/hex2dec //Convert hex to decimal online How to get PrivateKey, PublicKey, Cert ID:
原文：http://www.cnblogs.com/wangxusummer/p/7891049.html