• zrusenie hesla pre GPG kluc

$ gpg --edit-key KEY_ID
> passwd
> save

• export sukromneho GPG kluca do OpenSSH/OpenSSL formatu

$ gpg --export-secret-keys KEY_ID | openpgp2ssh KEY_ID > id_rsa

• vygenerovanie CRS certifikatu - dolezite je vyplnit parameter Email Address

$ openssl req -new -key id_rsa -out id_rsa.csr

• vygenerovanie certifikatu

$ openssl x509 -req -days 3650 -in id_rsa.csr -signkey id_rsa -out id_rsa.crt

• export certifikatu do formatu PKCS#12

$ openssl pkcs12 -export -in id_rsa.crt -inkey id_rsa -out id_rsa.p12

• export certifikatu z formatu P12/PFX do PEM formatu

$ openssl pkcs12 -in certificate.pfx -out certificate.pem -clcerts -nodes