Check TLS, analyze PEM, convert formats (PEM, DER, PKCS#12) — OpenSSL how-tos.
Keys and passwords are processed in RAM for conversions and not stored.