If we export the root certificate in Certificate Menu -> Export -> As PEM format, the certificate is invalid. Thus, we could not import it to iOS Simulator. The preliminary investigation shows that ...
I was playing around and noticed that binwalk will outright ignore PEM private keys if they are encrypted or in PKCS8.