Self Signed Certificates + JavaKeyStore

# Run the following OpenSSL command to generate your private key and public certificate. Answer the questions and enter the Common Name when prompted.
openssl req -newkey rsa:2048 -nodes -keyout key.pem -x509 -days 365 -out certificate.pem

# Review the created certificate:
openssl x509 -text -noout -in certificate.pem

# Combine your key and certificate in a PKCS#12 (P12) bundle:
openssl pkcs12 -inkey key.pem -in certificate.pem -export -out certificate.p12

# Validate your P12 file.
openssl pkcs12 -in certificate.p12 -noout -info

# Import the .p12 file to a keystore (.jks) by executing the following command:
keytool -importkeystore -deststorepass [password] -destkeystore [filename-new-keystore.jks] -srckeystore [filename-new-PKCS-12.p12] -srcstoretype PKCS12

# Rename the default alias (1) to a more convenient alias (server's hostname):
keytool.exe  -changealias -keystore [keystore.jks] -alias 1 -destalias [hostname]

# Add to JDK cacerts
keytool -import  -keystore <%JAVA_HOME%>/jre/lib/security/cacerts -storepass changeit -noprompt -alias [servername] -file certificate.cer