Markup for https://aebian.org/story/ssl-apache-tomcat-pkcs12

command.cmd

keytool -genkeypair -alias <ServerName> -keyalg RSA -keysize 2048 -keystore "D:\3rdParty\SSLCert\<FileName>.pfx" -validity 1825 -storetype PKCS12 -dname "CN=<fqdn>, OU=<Department>, O=<Enterprise Corp>, L=<City>, ST=<State>, C=CA" -ext SAN=dns:<ServerName1>,dns:<ServerName2>

command1.cmd

keytool -certreq -alias <FQDN> -file <FileName>.csr -storepass <Password> -keystore "D:\3rdParty\SSLCert\<FileName>.pfx" -ext SAN=dns:<ServerDNS1>,dns:<ServerDNS1>

command2.cmd

keytool -importcert -alias <FQDN> -file <FileName>.cer -storepass <Password> -keystore D:\3rdParty\SSLCert\<FileName>.pfx

command3.cmd

keytool -importcert -alias <alias or FQDN> -trustcacerts -file <FileName>.cer -storepass <Password> -keystore D:\3rdParty\SSLCert\<FIleName>.pfx

command4.cmd

keytool -list -keystore D:\3rdParty\SSLCert\<FileName>.pfx -storepass "<Password>" -storetype PKCS12

server.xml

<Connector port="8090" protocol="org.apache.coyote.http11.Http11Protocol" SSLEnabled="true"
           scheme="https" secure="true" clientAuth="false"
           disableUploadTimeout="true" enableLookups="false" 
           sslProtocol = "TLS"
           maxHttpHeaderSize="65536" maxThreads="200" acceptCount="100"
           keystoreType="PKCS12"           
           keystoreFile="D:\3rdParty\SSLCert\<FileName>.pfx"
            keyAlias="<fqdn>"
            keystorePass="<password_here>"  URIEncoding="UTF-8"/>