Self signed root certificate
makecert -r -pe -n "CN=RootCA" -a sha1 -sky signature -cy authority -sv rootca.pvk rootca.cer

Make certificate signed by CA
makecert -cy end -n "CN=example.com" -ic rootca.cer -iv rootca.pvk -a sha1 -sky exchange -pe -sv example.com.pvk example.com.cer

Export private and public keys into pxf certificate
pvk2pfx -pvk example.com.pvk -spc example.com.cer -pfx example.com.pfx