bash: openssl extract certificate privkey