A basic configuration.

<IfModule mod_pkcs12.c>
<Location /pkcs12>
  SetHandler pkcs12
  Pkcs12SubjectRequest CN
  Pkcs12SubjectRequest 2.5.4.5
  Pkcs12SubjectRequest O
  Pkcs12SubjectRequest C
  Pkcs12SubjectSet OU "Terms and Conditions Apply"
  Pkcs12SubjectAltNameRequest rfc822Name
  Pkcs12Digest sha256
  Pkcs12Iterate 2048
  CASimpleCertificate /etc/pki/certs/ca-cert.pem
  CASimpleKey /etc/pki/certs/ca-key.pem
  CASimpleSerialRandom on
  CASimpleTime on
  CADiskCertificateSignRequestPath /etc/pki/ca/
  CADiskCertificateByTransactionPath /etc/pki/ca/
</Location>
</IfModule>