.bdl file = target.crt + AddTrust_External_CA_Root or AAA_Certificate_Services.crt or GoGetSSL_RSA_DV_CA.crt + USERTrust_RSA_Certification_Authority.crt

.pem file = key + crt