Export smtp ssl cert private key

[itssbh]

I need to do smtp ssl inbound decryption on my firewall (Palo Alto). That for I should export the private key from EFA.
So I simply tried to take the pem file out of /etc/postfix/ssl according to enties in /etc/postfix/main.cf and import it to the firewall.
But this file is only recognized as CA and not as KEY after the import.
How can I do this. Can someone point me to the right direction?
Thanks a lot.

[shawniverson]

Maybe need to separate the key and the cert into two files?

[itssbh]

Thank you, I have alreay tried this. The private key isn't recognized as valid certificate. It works only with the certificate.
But this is seen as CA-Certificate in this firewall...?

Can I generate complete new postfix certificates? Or will this lead to different problems (updates...)?

[shawniverson]

Yep, sure can.