Every so often I hear of someone who needs to convert their openssl-generated certificate and key (typically in PEM or DER format) into a Java Secure Socket Extension (JSSE) keystore. This process is complicated, but it can be done. Here are a few links that may help. OpenSSL generated certificates and keys are encoded in PEM format by default. This format is base64-encoded. The other type used is