Failed to extract certificate or private key from pfx file

installed hybridCRT msi installer on windows 11 22H2 x64 but declined to install development headers. used identical command line to that used on MacOS, failed to extract certificate or private key correctly from a pfx generated by exporting a wildcard domain SSL certificate from IIS running on windows 2012 server with export-private-key enabled.

d:\tmp>openssl pkcs12 -in c2.pfx -clcerts -nokeys -out syn.crt
Enter Import Password:

Error outputting keys and certificates
640C0000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto\evp\evp_fetch.c:376:Global default library context, Algorithm (RC2-40-CBC : 0), Properties (<null>)
640C0000:error:030000A0:digital envelope routines:EVP_PBE_CipherInit_ex:unknown cipher:crypto\evp\evp_pbe.c:127:RC2-40-CBC

d:\tmp>openssl pkcs12 -in c2.pfx -nocerts -out synenc.key
Enter Import Password:

Enter PEM pass phrase:

Verifying - Enter PEM pass phrase:

Error outputting keys and certificates
2C170000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto\evp\evp_fetch.c:376:Global default library context, Algorithm (RC2-40-CBC : 0), Properties (<null>)
2C170000:error:030000A0:digital envelope routines:EVP_PBE_CipherInit_ex:unknown cipher:crypto\evp\evp_pbe.c:127:RC2-40-CBC

Reproduce the two openssl pkcs12 commands on Windows 11 22H2 x64 with the reported c2.pfx file, then inspect how the installer exposes support for the RC2-40-CBC algorithm. Done means the certificate and private key can be extracted successfully from this PFX without the reported errors.