I buy one from my host (1and1) control panel, they give me a .p10 file, later I get an email that has the cert text. And eventually on that control panel I can use these things to generate a .pfx file ...