for i in telekom dfn cacert
do
  openssl x509 -inform DER -in $i.crt -outform PEM $i.pem
done
cp iukca3.crt iukca3.pem