Set a global variable, NODE_EXTRA_CA_CERTS, and set it to a copy of the certs stored locally in a directory.
Create a Azure API Management service instance with custom domain (SSL cert) using PowerShell script in Azure Devops using Release Pipelines
When you create an Azure API Management service instance, Azure assigns it a subdomain of azure-api.net. you can expose your API Management endpoints using your own custom domain name, such as contoso.com.
If you have already created pfx certificate then there are 2 ways to generate .CER certificate. As you know pfx certificate will have both private and public key whereas authentication certificate (.CER) will have the public key only.