Common Java Keytool Keystore Commands

If you need to check the information within a certificate, or Java

keystore, use these commands.



Check a stand-alone certificate

keytool -printcert -v -file mydomain.crt



Check which certificates are in a Java keystore

keytool -list -v -keystore keystore.jks



Check a particular keystore entry using an alias

keytool -list -v -keystore keystore.jks -alias mydomain



Other Java Keytool Commands

Delete a certificate from a Java Keytool keystore

keytool -delete -alias mydomain -keystore keystore.jks



Change a Java keystore password

keytool -storepasswd -new new_storepass -keystore keystore.jks



Export a certificate from a keystore

keytool -export -alias mydomain -file mydomain.crt -keystore keystore.jks



List Trusted CA Certs

keytool -list -v -keystore $JAVA_HOME/jre/lib/security/cacerts



Import New CA into Trusted Certs

keytool -import -trustcacerts -file /path/to/ca/ca.pem -alias CA_ALIAS

-keystore $JAVA_HOME/jre/lib/security/cacerts