OpenSSL
openssl x509 -req -days 999 -in stage.csr -signkey p522.key -out stage.crt
openssl req -new -key p522.key -out vdev.csr
# Convert from p12 format to crt with OpenSSL
openssl pkcs12 -in keyname.p12 -nocerts -out keyname.privatekey.key
openssl pkcs12 -in keyname.p12 -clcerts -nokeys -out keyname.crt