cacerts vs keystore

'cacerts' is a truststore. A trust store is used to authenticate peers. A keystore is used to authenticate yourself.

cacerts is where Java stores public certificates of root CAs. Java uses cacerts to authenticate the servers.

Keystore is where Java stores the private keys of the clients so that it can share it to the server when the server requests client authentication.