# make new key
openssl req -new -newkey rsa:2048 -nodes -keyout botcompany.key -out botcompany.csr

# export private key (.pem)
openssl pkcs12 -in keystore.p12 -nodes -nocerts -out botcompany.pem

# use existing key?
openssl req -new -key botcompany.pem -out agiblue.csr