openssl enc -aes-256-cbc -pbkdf2 -d -in ${FILE} -out ${FILE%%.*}.crt -k ${PASS}