Enable ssl and set configuration file

Ops and Admin
1

hello everyone,
i need a help to enabling ssl in mongo, I followed the following steps:

$openssl pkcs12 -in first_name.pfx -clcerts -nokeys -out second_name.crt
$openssl pkcs12 -in first_name.pfx -out fouth_name.pem

is right how i extracted from pfx the crt and pem files?

is right how i set the conf file for enable ssl?

net:
  port: 27017
  bindIp: 127.0.0.1  # Enter 0.0.0.0,:: to bind to all IPv4 and IPv6 addresses or, alternatively, use the net.bindIpAll setting.
  ssl:
    CAFile: /data/certs/server/second_name.crt
    PEMKeyFile: /data/certs/server/fouth_name.pem
    mode: allowSSL

thank in advice.

2

@Stennie_X or @steevej any idea or suggestion about it?