Importing the certificate

The signing authority would send you two files, the actual certificate and chain certificates.

Importing the certificate into JAVA keystore

  1. Use the following command to import the chain certificate:
    keytool -import -alias root -keystore <your_keystore_filename>
        -trustcacerts -file <filename_of_the_chain_certificate>
  2. Use the following command to import the public certificate:
    keytool -import -alias tomcat -keystore <your_keystore_filename>
        -file <your_certificate_filename>

Importing the certificate for AWS beanstalk

You need to update an SSL certificate for an HTTPS load balancer:

  1. Open the Amazon EC2 console at
  2. In the navigation pane, under LOAD BALANCING, click Load Balancers.
  3. Select your load balancer.
  4. In the Listeners tab, click Change in the SSL Certificate column for the certificate.
  5. In the Select Certificate dialog box, do one of the following:
    • If you have already uploaded an SSL certificate using IAM, select Choose an existing SSL Certificates, select the certificate from Certificate Name, and then click Save.
    • If you have an SSL certificate to upload, select Upload a new SSL Certificate. Enter a name for the certificate, copy the required information to the form, and then click Save. Note that the certificate chain is not required if the certificate is a self-signed certificate.