Tomcat CSR generation and CRT import (Java Keystore .JKS), Matrify, GlassFish, Wildfly ...

keytool -genkey -alias server -keyalg RSA -keysize 2048 -keystore
keytool -certreq -alias server -file csr.txt -keystore
cat csr.txt

When it asks for first and last name, this is NOT your first and last name, but rather it is your Fully Qualified Domain Name for the site you are securing (example: If you are ordering a Wildcard Certificate this must begin with the * character. (example: *

After you have placed the CSR in the interssl account and the certificate has been validated and issued, you can import it into the keystore, e.g. 

keytool -import -trustcacerts -alias server -file your_site_name.p7b -keystore your_site_name.jks

In case you didn't receive a .p7b file, you can also import the .ca-bundle and .crt files like this:  
keytool -import -trustcacerts -keystore -alias ca-bundle -file
keytool -import -trustcacerts -keystore -alias server -file www_domain_com.crt


You may find further details please on the COMODO CSR generation page:

For GlassFish specific details please have a look at:

Was this answer helpful?

 Print this Article

Also Read

Can you issue SSL certificates for .krd / (Kurdistan - Iraq) domains?

YES, the TLD has been added by GeoTrust / RapidSSL on our request for one of our customers. ;-)

Where can i get a Wildcard EV (Extended Validation) SSL certificate?

Unfortunately EV certificates cannot be Wildcard due to CA/B Forum policies, so the only option...

How to obtain a SSL certificate? How does e-mail authentication work?

After ordering a SSL certificate with InterSSL, you have to place a CSR (Certificate Signing...

Multidomain SAN Upgrade: is it possible to purchase additional SAN slots later?

Yes, it is possible to increase the SAN slot count for an existing multi-domain SSL certificate....

How do i create a CSR (Certificate Sign Request) in Microsoft Exchange 2010? How do i install my SSL certificate in Exchange 2010 server?