====== Certificates - Split a .pem file ======

<code bash>
cat $file|awk 'split_after==1{n++;split_after=0} /-----END CERTIFICATE-----/ {split_after=1} {print > "cert" n ".pem"}'
</code>

This can leave an empty file if there's a blank line at the end, such as with 

<code bash>
openssl pkcs7 -outform PEM -in my-chain-file -print_certs
</code>

To prevent that, check the length of the line before printing:

<code bash>
cat $file|awk 'split_after==1{n++;split_after=0}
   /-----END CERTIFICATE-----/ {split_after=1}
   {if(length($0) > 0) print > "cert" n ".pem"}' 
</code>

<WRAP info>
**NOTE:**  The awk snippet works for extracting the different parts, but you still need to know which section is the key / cert / chain.
</WRAP>


----

===== Using csplit =====

<code bash>
csplit -f cert- $file '/-----BEGIN CERTIFICATE-----/' '{*}'
</code>