For those playing at home. Here's the openssl commands to make the key / csr.
I used an Active Directory PKI to make my 2048 cert and then the last openssl command to convert from p7b to cut:
openssl genrsa -out ucspm2.key 2048
openssl req -new -key ucspm.key2 -out ucspm2.csr
openssl pkcs7 -print_certs -in ucspm2.p7b -out ucspm2.cer
Used the console interface and pasted into Putty and no problem.