.pem转换成.crt

openssl x509 -outform der -in xuhongfei.pem -out xuhongfei.crt

sign

openssl smime -sign -in unsigned.mobileconfig -out signed.mobileconfig -signer xuhongfei.crt -inkey xuhongfei.key -certfile ca.crt -outform der -nodetach

备注

xuhongfei.crt xuhongfei.key 对应域名https证书文件