You create the P12 externally to PMS first.
My cert is from Let’s Encrypt, managed by Pfsense and the ACME management software in PfSense
openssl pkcs12 -export -out my-domain.p12 -inkey my-domain-production.key -in my-domain-production.crt \
-certfile Acme-LE.crt \
-password pass:password
I put the p12 where PMS can read it