CREATE MASTER KEY ENCRYPTION BY PASSWORD = '密碼';

CREATE CERTIFICATE john_ase_128
FROM FILE='D:\john.CER'
WITH PRIVATE KEY (FILE = 'D:\john.PVK',
DECRYPTION BY PASSWORD='密碼')