If the CSR for a certificate was created on a Sophos firewall, the private key cannot be exported directly. A tutorial on how to export without using any shell black magic.