• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to footer

Mister PKI

SSL Certificates * SSL Tools * Certificate Decoder

  • Home
  • OpenSSL
  • Keytool
  • SSL Tools
  • Donate
  • Cookie Policy (EU)
  • Sponsored Cybersecurity Guest Posts & Technical Contributions
  • PKI for DevOps Engineers (Free Training)
  • SSL Certificate Consulting & TLS Troubleshooting
  • Apereo CAS Consulting

keytool

March 6, 2026

How to Install Keytool on Windows, Ubuntu, RHEL, and Rocky Linux

The Java keytool is a command line utility provided with Java, and this article will guide you through the process of how to install keytool on both Windows and Linux. Keytool is used to manage keystores, symmetric and asymmetric keys, and certificates. Many applications and application servers use … [Read more...] about How to Install Keytool on Windows, Ubuntu, RHEL, and Rocky Linux

java,  keytool

keytool list certs

February 24, 2026

keytool -list: Use keytool to List Certificates and in a Java Keystore

The keytool list ( keytool -list ) command displays the contents of a Java keystore. It is used to inspect certificates stored in JKS or PKCS12 files and verify: If you are managing HTTPS in Java, importing a certificate, renewing a certificate, or debugging a TLS issue, keytool -list is … [Read more...] about keytool -list: Use keytool to List Certificates and in a Java Keystore

java,  keytool,  linux

convert pem

February 20, 2025

Convert PEM to other formats

Before covering how to convert to pem from different certificate formats let us define what each of the certificate file extensions means. .pem - Privacy Enhanced Mail Certificate. A PEM file is Base64 encoded and may be an X.509 certificate file, a private key file, or any other key material. … [Read more...] about Convert PEM to other formats

keytool,  linux,  openssl,  SSL Certificates

java keystore pkcs12 legacy

June 5, 2023

java keystore pkcs12 legacy

This article will detail how to troubleshoot and correct the java keystore pkcs12 legacy issues with keystores generated with newer cryptographic algorithms and older versions of Java. If you have encountered these issues with OpenSSL instead of the Java keytool, read our article specifically for … [Read more...] about java keystore pkcs12 legacy

java,  keytool,  SSL Certificates

pkcs12

April 14, 2023

pkcs12

A pkcs12 keystore is commonly used for both S/MIME User Certificates and SSL/TLS Server Certificates. The keystore may contain both private keys and their corresponding certificates with or without a complete chain. The keystore’s purpose is to store the credential of an identity, being a person, … [Read more...] about pkcs12

keytool,  openssl,  SSL Certificates

pfx password

December 1, 2022

pfx password

A pfx password protects your private key stored in your keystore. The private key in the keystore also has a password and its password should be the same as the pfx keystore password. When creating the keystore and protecting it with a password the passwords will originally match. The place to be … [Read more...] about pfx password

keytool,  openssl

keytool change password

April 1, 2022

Change keystore password with Java keytool

What is Java keytool? The Java keytool is a command-line utility used to manage keystores in different formats containing keys and certificates. You can use the java keytool to change a keystore password, key password, or both. In many respects, it’s a competing utility with openssl for keystore, … [Read more...] about Change keystore password with Java keytool

keytool

import keystore

March 23, 2022

Import keystore into another keystore with Java keytool

What is Java keytool? The Java keytool is a command-line utility used to manage keystores in different formats containing keys and certificates. You can use the java keytool to import a keystore into another keystore. In many respects, the java keytool is a competing utility with openssl for … [Read more...] about Import keystore into another keystore with Java keytool

keytool

  • Page 1
  • Page 2
  • Page 3
  • Go to Next Page »

Primary Sidebar

Popular Posts

PKCS12

openssl s_client

Keytool

Keytool list

ECDSA vs RSA

OpenSSL

PKCS7

Certificate Decoder

PKI for DevOps Engineers – Free Training Series

PKI for DevOps Training Hub

Lesson 1 – How TLS and PKI Work

Lesson 2 – Understanding X.509 Certificates

Lesson 3 – Certificate Chains Explained

Lesson 4 – Debug TLS with OpenSSL

Lesson 5 – Verify Certificate Chains

Lesson 6 – Creating CSRs with OpenSSL

Lesson 7 – Working with PKCS12 Certificates

Lesson 8 – Java Keystores and keytool

Lesson 9 – Certificate Expiration Monitoring

Lesson 10 – Automating Certificate Renewal

Lesson 11 – Common TLS Errors

Lesson 12 – PKI Architecture for DevOps

Recent Posts

  • Configure OpenID Connect (OIDC) in Apereo CAS 7.3 and 8
  • Certificate Ownership Is an Operating Model Problem, Not a Tooling Problem
  • OpenSSL dgst: Create Checksums and Verify Digital Signatures
  • OpenSSL crl: Check Certificate Revocation Lists and Revoked Certificates
  • OpenSSL crl2pkcs7: Create PKCS#7 and P7B Certificate Bundles

Footer

  • Twitter
  • YouTube

Copyright © 2026