IIS To Tomcat SSL

Export your Certificate.

# convert IIS to Tomcat
keytool -importkeystore -srckeystore noodle.pfx -srcstoretype pkcs12 -destkeystore noodle.jks -deststoretype JKS
# rename the alias for SNI
keytool -changealias -keystore noodle.jks -alias automd5 -destalias domain.tld
# double check
keytool -list -keystore noodle.jks

If the alias is a single digit number use

-srcalias 1 -destalias domain.tld

If the trust chain can't be established import root and chain:

keytool -keystore noodle.jks -importcert -file gdroot-g2.crt -alias root
keytool -keystore noodle.jks -importcert -file gdig2.crt -alias chain

If the keystore password is not matching the key password

keytool -keypasswd -keystore noodle.jks -alias your.domain.tld