Generate binary PKCS12 bundle (PEM, KEY, CHAIN) → PKCS12
openssl pkcs12 -export -in MY.CRT -inkey MY.KEY -chain -CAfile CA-FILE.CRT -name "MY-DOMAIN.COM" -out my.p12
keytool -importkeystore -deststorepass CHANGEIT -destkeystore KEYSTORE.JKS -srckeystore my.p12 -srcstoretype PKCS12