Cannot import existing CA cert into AD CS

Question

Hi,

I am trying to import my root CA into AD CS. It is originally in PEM format generated by OpenSSL on Linux. I then knew through google seaches that in order to import it into Windows Server 2012 R2, I would have to use OpenSSL 1.1.1 because of the format of the private key password being incompatible in later versions of OpenSSL.

So I downloaded such a version implementation from :

http://wiki.overbyte.eu/wiki/index.php/ICS_Download

I generated the pfx file using the command :

openssl pkcs12 -export -out tretanetRootCA.pfx -inkey tretanetRootCA.key -in tretanetRootCA.crt

When I try to import the pfx file in the wizard it throws the error in the attached screen shot.

How can I convert the original cert into the correct format ?

Thanks,

Regards