use a linux distro off your choice or download the unix tools to a microsoft machine
openssl pkcs12 -in site.domain.com.pfx -nocerts -out site.domain.com.key.pem
openssl pkcs12 -in site.domain.com.pfx -clcerts -out site.domain.com.pem
openssl rsa -in site.domain.com.key.pem -out site.domain.com.server.key
An SSL bridge configured on the NetScaler appliance enables the appliance to bridge all secure traffic between the SSL client and the SSL server. The appliance does not offload or accelerate the bridged traffic, nor does it perform encryption or decryption. Only load balancing is done by the appliance. The SSL server must handle all SSL-related processing. Features such as content switching, SureConnect, and cache redirection do not work, because the traffic passing through the appliance is encrypted.