Quick Links
Server Types
Installing your Certificate on Java Based Web Servers
The certificates you receive will be:
- AddTrustExternalCARoot.crt
- UTNAddTrustServerCA.crt
- OptimumSSLCA.crt
- YourDomain.crt
These must be imported in the correct order:
- AddTrustExternalCARoot.crt
- UTNAddTrustServerCA.crt
- OptimumSSLCA.crt
- YourDomain.crt
Please replace the example keystore name 'domain.key' with your keystore name
Use the keytool command to import the root certificates as follows:
keytool -import -trustcacerts -alias root -file AddTrustExternalCARoot.crt -keystore domain.key
The password is then requested.
Enter keystore password: (This is the one used during CSR creation)
The information will be displayed about the certificate and you will be asked if you want to trust it (the default is no so type 'y' or 'yes'):
Once you type "Y" or "YES" an information message will display as follows:
Certificate was added to keystore
Use the same process for the UTNAddTrustServerCA.crt intermediate certificate using the keytool command:
keytool -import -trustcacerts -alias addtrust -file UTNAddTrustServerCA.crt -keystore domain.key
Use the same process for the OptimumSSLCA.crt intermediate certificate using the keytool command:
keytool -import -trustcacerts -alias OptimumSSL -file OptimumSSLCA.crt -keystore domain.key
Use the same process for the site certificate using the keytool command, if you are using an alias then please include the alias command in the string.
Example:
keytool -import -trustcacerts -alias yyy (where yyy is the alias specified during CSR creation) -file (your domain).crt -keystore domain.key
Once this is done all the certificate are now loaded and the correct root certificate will be presented and the store should now be ready to use.
