#!/bin/bash # This command will generate DER ".cer" files for each of the db,KEK,dbx files for key_type in PK KEK db dbx; do openssl x509 -outform DER -in ${key_type}.crt -out ${key_type}.cer ; done