Installing e-CNPJ A1 certificates on Linux

Export the Private Key

$ openssl pkcs12 -in KEENIX_CONSULT_NEW_CERT1000406015.pfx -nocerts -out KEENIX_CONSULT_NEW_CERT1000406015.pem -nodes
Enter Import Password:

Export the Certificate

$ openssl pkcs12 -in KEENIX_CONSULT_NEW_CERT1000406015.pfx -nokeys -out KEENIX_CONSULT_NEW_CERT1000406015.crt -nodes
Enter Import Password:

Import Root Certificate

$ sudo cp KEENIX_CONSULT_NEW_CERT1000406015.crt /usr/local/share/ca-certificates/

$ sudo update-ca-certificates
Updating certificates in /etc/ssl/certs…
rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
1 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d…
done.

In the browser you need to install the Lacuna Software The Web PKI

Source: https://helloitsliam.com/2016/03/30/installing-certificate-pfx-into-debian-linux/