keytool -list -v -keystore ./demo.jks keytool -export -alias "上面的alias" -keystore ./demo.jks | base64 openssl x509 -inform der -in ./demo.cer -pubkey -noout > out.pem