key转pem
openssl pkcs8 -topk8 -in client.key -out client.pem -nocrypt
crt转pem
openssl x509 -in mycert.crt -out mycert.pem -outform PEM