in Chrome, chrome://settings/certificates
select -> Your Certificates tab -> "Import and Bind to Device" .pfx
select -> Authorities tab -> import (ex: Deet.cer)

In Chrome settings, under Internet Connection, Add Connection
Join wifi (Advanced), insert SSID and identity, and proxy details if needed.