HTTPS

openssl x509 -inform PEM -in <certname>.cer -out <certname>.crt 
where
 -inform arg : - input format - default PEM (one of DER, NET or PEM))

openssl x509 -in <certname>.crt -text

Prepare the cert
1. create keystore =>location
2. create CSR using keystore
3. generated cert + CA's ROOT cert
4. import certs of step 3 to keystore

View cert
> keytool -v -list -keystore pxxx.jks

Import cert to keystore
> keytool -import -trustcacerts -alias xxx-dev.com.hk -file xxxdevcomhk.crt -keystore target.jks