.pem转换成.crt
openssl x509 -outform der -in xuhongfei.pem -out xuhongfei.crt
sign
openssl smime -sign -in unsigned.mobileconfig -out signed.mobileconfig -signer xuhongfei.crt -inkey xuhongfei.key -certfile ca.crt -outform der -nodetach
备注
xuhongfei.crt xuhongfei.key 对应域名https证书文件