[root@ldap] cd /etc/dirsrv/slapd-ldap
[root@ldap] pk12util -o cert.p12 -n 'server-cert' -d .
Enter Password or Pin for "NSS Certificate DB":
Enter password for PKCS12 file:
Re-enter password:
pk12util: PKCS12 EXPORT SUCCESSFUL
[root@ldap] openssl pkcs12 -in cert.p12 -out cert.pem -nodes -clcerts
Enter Import Password:
MAC verified OK
[root@ldap] cat cert.pem
Bag Attributes
friendlyName: server-cert
localKeyID: 10 F4 C2 F6 01 3C 66 AA 72 35 C9 A7 DA B9 12 3F 11 A1 98 F6
Key Attributes:
-----BEGIN PRIVATE KEY-----
MIICdwIBADANBgkqhkiG9w0BAQEFAASCAmEwggJdAgEAAoGBALA7rSWdSk4CVHef
...
BnevX/uQwZ3L1Qo=
-----END PRIVATE KEY-----
Bag Attributes
friendlyName: server-cert
localKeyID: 10 DD CC EE BB 3C 33 AC 72 35 C9 A7 DA B9 12 3F 11 A1 98 F6
subject=/C=US/ST=Any State/L=Any Town/O=Example/CN=ldap.example.com
issuer=/C=US/ST=Any State/L=Any Town/O=Example/CN=certmaster.example.com
-----BEGIN CERTIFICATE-----
ChMcSW5zdGl0dXRlIGZvciBBZHZhbmNlZCBTdHVkeTEeMBwGA1UECxMVU2Nob29s
...
gIP23WbaOw4DygMwXfbJwF5K0xxv+NALlpoaZw==
-----END CERTIFICATE-----
using fedora-ds/redhat-ds it creates cert8.db and key3.db to store the certs. I wanted to extract the private key as PEM so I could import it elsewhere.