вырезаем из всего выхлопа только фуллчейн и ключ. нормализуем.
cat ./response.json |jq .data[].fullchain |tr -d \" |sed -s 's/\\r\\n/\n/g' |sed 's/\\r\\n/\n/g' |sed 's/\\n-----BEGIN CERTIFICATE-----/-----BEGIN CERTIFICATE-----/' > ./cert.chain cat ./response.json |jq '.data[].privateKeyEncrypted.key' |tr -d \" |base64 -d > ./enc.private.pem
распароливаем
openssl rsa -in ./enc.private.pem -out ./private.pem Enter pass phrase for ./enc.private.pem: writing RSA key
или однострочником
cat ./response.json |jq .data[].root |tr -d \" |sed 's/\\r\\n/\n/g' > ./cert.chain && cat ./response.json |jq .data[].fullchain |tr -d \" |sed 's/\\r\\n/\n/g' |sed 's/\\n-----BEGIN CERTIFICATE-----/-----BEGIN CERTIFICATE-----/' >> ./cert.chain && cat ./response.json |jq '.data[].privateKeyEncrypted.key' |tr -d \" |base64 -d > ./enc.private.pem && openssl rsa -in ./enc.private.pem -out ./private.pem && cat ./private.pem >> ./cert.chain