For anyone else who may run into this problem: it looks like as if Windows/OpenSSL is not the right combination to generate p12 files, as we could solve this issue by creating p12 file on a Mac device (Keychain....), although then mobileprovision file needs to be regenerated accordingly. I could get IPA file finally and hopefully it can be successfully executed on iPhone device and then distributed via Testflight.