This is the simplest way to convert a pfx ssl certificate to a Java keystore that I have found. keytool -importkeystore -srckeystore website.pfx -destkeystore website.jks -srcstoretype pkcs12 View the certificate: keytool -list -v -keystore website.jks | less