I have a certificate in der format, from it with this command I generate a public key:
der
openssl x509 -inform der -in ejbcacert.cer -noout -pubkey
ssh-keygen -i -m PKCS8 -f public-key.pem
ssh-keygen -f private.pem -y > public.pub