{"id":8080,"date":"2016-05-27T09:05:08","date_gmt":"2016-05-27T07:05:08","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/"},"modified":"2016-05-27T09:05:08","modified_gmt":"2016-05-27T07:05:08","slug":"pki-ssl-certificates-management-with-java-keytool-and-openssl","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/","title":{"rendered":"PKI – SSL certificates management with Java keytool and OpenSSL"},"content":{"rendered":"

\"java\"<\/a><\/p>\n

In this blog, we will cover all steps to enable SSL encryption for a particular server. The procedure described here applies mostly for Java based servers and applications, with usage of a keystore<\/strong>.<\/p>\n

In the case the organization into which the certificate has to be deployed has its own PKI, usage of OpenSSL is not necessary. In this case Java keytool<\/strong> usage will be enough.<\/p>\n

In the case you have to sign by yourself, server certificate with the Root CA key, and\/or create your own Root certificate, then usage of OpenSSL is mandatory.<\/p>\n

In real case, most of the times, servers have to be reachable from at least 2 DNS names. For instance, its short host name, and its FQND. The developed scenario will cover this situation as well.<\/p>\n

Refer to “subjectAltName<\/strong>” certificate attribute documentation for more information.<\/p>\n

It is recommended to use keytool<\/strong> application binary of the Java Runtime Environment used for the application execution. It is located under bin folder.<\/p>\n

Consider \u201chostname<\/strong>\u201d and \u201chostname.fqdn.com<\/strong>\u201d as DNS aliases of the server.<\/p>\n

Consider changing passwords<\/strong> (*****) and values of \u201cCN<\/strong>\u201d, \u201cOU<\/strong>\u201d, \u201cO<\/strong>\u201d, \u201cL<\/strong>\u201d, \u201cS<\/strong>\u201d, and \u201cC<\/strong>\u201d certificate attributes for both CA and server certificates.<\/p>\n

Refer to keytool<\/strong> documentation for more information.<\/p>\n

 <\/p>\n

1 – Create keystore and certificate<\/strong><\/p>\n\n\n\n
keytool -genkeypair -keystore keystore.jks -dname “CN=hostname.fqdn.com<\/strong>, OU=IT<\/strong>, O=Company<\/strong>, L=City<\/strong>, S=Country<\/strong>, C=CountryAcronym<\/strong>” -keypass\u00a0*****<\/strong> -storepass *****<\/strong> -keyalg RSA -alias server -validity 731 -ext SAN=dns:hostname<\/strong>,dns:hostname.fqdn.com<\/strong>\u00a0 -ext KU=digitalSignature,keyEncipherment -ext EKU=serverAuth<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u00a0<\/strong><\/p>\n

2 – Create a certificate request for signature to the certification authority<\/strong><\/p>\n\n\n\n
keytool -certreq -keystore keystore.jks -keypass *****<\/strong> -storepass *****<\/strong> -alias server -file hostname<\/strong>.csr<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

3 -Server certificate signature<\/strong><\/p>\n

In the case your organization has its own PKI, just send the CSR and wait for the signed server certificate.<\/p>\n

In the case you want to manage or create a new PKI, go to 3-1 section for Root CA certificate creation, and\/or server certificate signature with OpenSSL.<\/p>\n

 <\/p>\n

4 – Import provided Root CA and signed certificate of the server from certification authority<\/strong><\/p>\n

–\u00a0\u00a0 Import of root CA:<\/p>\n\n\n\n
\n

keytool -import -alias cert1 -file root.pem -keystore keystore.jks -storepass *****<\/strong><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

->> trust the certificate when prompted<\/p>\n

–\u00a0\u00a0 Eventually import other mid-certificate in the chain (repeat and change alias for all intermediate certificates in the chain)<\/p>\n\n\n\n
\n

keytool -import -alias cert2 -file sub.pem -keystore keystore.jks -storepass *****<\/strong><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

–\u00a0\u00a0 Finally import signed certificate<\/p>\n\n\n\n
\n

keytool -import -trustcacerts -alias server -file hostname<\/strong>.cer -keystore keystore.jks -storepass *****<\/strong><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

*******************************************************<\/p>\n

Create Root CA and sign server certificate with OpenSSL<\/p>\n

3-1 – Generate key for Root CA<\/strong><\/p>\n\n\n\n
\n

openssl genpkey -algorithm RSA -out rootkey.pem -pkeyopt rsa_keygen_bits:4096<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

3-2 – Generate certificate CSR for Root CA self-signing<\/strong><\/p>\n\n\n\n
\n

openssl req -new -key rootkey.pem -days 5480 -extensions v3_ca -batch -out root.csr -utf8 -subj ‘\/C=CountryAcronym<\/strong>\/O=Company Root CA<\/strong>\/OU=IT<\/strong>\/CN=Company Root CA<\/strong>‘<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

3-3 – Create an extension file (openssl.root.cnf) with following content<\/strong><\/p>\n\n\n\n
\n

basicConstraints = critical, CA:TRUE<\/p>\n

keyUsage = keyCertSign, cRLSign<\/p>\n

subjectKeyIdentifier = hash<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

3-4 – Self sign Root CA certificate and append extensions<\/strong><\/p>\n\n\n\n
\n

openssl x509 -req -sha256 -days 3650 -in root.csr -signkey rootkey.pem -set_serial 1 -extfile openssl.root.cnf -out root.pem<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

3-5 – Sign server certificate request with Root key<\/strong><\/p>\n\n\n\n
\n

openssl\u00a0 x509\u00a0 -req\u00a0 -CA root.pem -CAkey rootkey.pem -in hostname<\/strong>.csr -out hostname<\/strong>.cer -days 731\u00a0 -CAcreateserial<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

3-6 \u2013Trust Root CA certificate<\/strong><\/p>\n

Eventually import \u201croot.pem<\/strong>\u201d Root CA certificate to you browser\u2019s CA and\/or into your Java Runtime Environment lists.<\/p>\n","protected":false},"excerpt":{"rendered":"

In this blog, we will cover all steps to enable SSL encryption for a particular server. The procedure described here applies mostly for Java based servers and applications, with usage of a keystore. In the case the organization into which the certificate has to be deployed has its own PKI, usage of OpenSSL is not… <\/p>\n","protected":false},"author":40,"featured_media":8082,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","neve_meta_reading_time":"","_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[4134],"tags":[],"class_list":["post-8080","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-application-server"],"yoast_head":"\nPKI - SSL certificates management with Java keytool and OpenSSL - dbi services | Blog<\/title>\n<meta name=\"description\" content=\"PKI management with Java keytool and OpenSSL including subject alternative names\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PKI - SSL certificates management with Java keytool and OpenSSL\" \/>\n<meta property=\"og:description\" content=\"PKI management with Java keytool and OpenSSL including subject alternative names\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi services | Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/dbiservices\/\" \/>\n<meta property=\"article:published_time\" content=\"2016-05-27T07:05:08+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/2022\/04\/java-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"258\" \/>\n\t<meta property=\"og:image:height\" content=\"195\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Middleware Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@dbiservices\" \/>\n<meta name=\"twitter:site\" content=\"@dbiservices\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Middleware Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/pki-ssl-certificates-management-with-java-keytool-and-openssl\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/pki-ssl-certificates-management-with-java-keytool-and-openssl\\\/\"},\"author\":{\"name\":\"Middleware Team\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/8a0bfec3c3bd1f27d3d452eaa592bfb8\"},\"headline\":\"PKI – SSL certificates management with Java keytool and OpenSSL\",\"datePublished\":\"2016-05-27T07:05:08+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/pki-ssl-certificates-management-with-java-keytool-and-openssl\\\/\"},\"wordCount\":593,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/pki-ssl-certificates-management-with-java-keytool-and-openssl\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/java-1.jpg\",\"articleSection\":[\"Application Server\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/pki-ssl-certificates-management-with-java-keytool-and-openssl\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/pki-ssl-certificates-management-with-java-keytool-and-openssl\\\/\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/pki-ssl-certificates-management-with-java-keytool-and-openssl\\\/\",\"name\":\"PKI - SSL certificates management with Java keytool and OpenSSL - dbi services | Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/pki-ssl-certificates-management-with-java-keytool-and-openssl\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/pki-ssl-certificates-management-with-java-keytool-and-openssl\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/java-1.jpg\",\"datePublished\":\"2016-05-27T07:05:08+00:00\",\"description\":\"PKI management with Java keytool and OpenSSL including subject alternative names\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/pki-ssl-certificates-management-with-java-keytool-and-openssl\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/pki-ssl-certificates-management-with-java-keytool-and-openssl\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/pki-ssl-certificates-management-with-java-keytool-and-openssl\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/java-1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/java-1.jpg\",\"width\":258,\"height\":195},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/pki-ssl-certificates-management-with-java-keytool-and-openssl\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"PKI – SSL certificates management with Java keytool and OpenSSL\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/\",\"name\":\"dbi services Blog\",\"description\":\"#BeSharing\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#organization\"},\"alternateName\":\"dbi Blog\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#organization\",\"name\":\"dbi services\",\"alternateName\":\"dbi\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/dbi-services-logo.png\",\"contentUrl\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/dbi-services-logo.png\",\"width\":512,\"height\":512,\"caption\":\"dbi services\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/dbiservices\\\/\",\"https:\\\/\\\/x.com\\\/dbiservices\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/dbi-services\\\/\",\"https:\\\/\\\/www.youtube.com\\\/user\\\/dbiservices\"],\"description\":\"Swiss IT consulting and services company specialised in efficient data infrastructures and platforms: databases, application servers, cloud, DevOps, digitalization, analytics, data quality and monitoring. Headquartered in Del\u00e9mont with offices in Nyon, Basel, Bern and Zurich.\",\"email\":\"info@dbi-services.com\",\"telephone\":\"+41 32 422 96 00\",\"legalName\":\"dbi services SA\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/8a0bfec3c3bd1f27d3d452eaa592bfb8\",\"name\":\"Middleware Team\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ddcae7ba0f9d1a0e7ae707f0e689e4a9c95bb48ec49c8e6d9cc86d43f4121cb6?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ddcae7ba0f9d1a0e7ae707f0e689e4a9c95bb48ec49c8e6d9cc86d43f4121cb6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ddcae7ba0f9d1a0e7ae707f0e689e4a9c95bb48ec49c8e6d9cc86d43f4121cb6?s=96&d=mm&r=g\",\"caption\":\"Middleware Team\"},\"description\":\"Posts published under the Middleware Team account are collective contributions by the dbi services middleware and enterprise content management consultants. The practice covers ECM platforms such as OpenText Documentum, Alfresco, and M-Files, as well as application servers and integration technologies including WebLogic, JBoss, Tomcat, and the Elastic Stack, from architecture and deployment to operations under service level agreements.\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/author\\\/middleware-team\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"PKI - SSL certificates management with Java keytool and OpenSSL - dbi services | Blog","description":"PKI management with Java keytool and OpenSSL including subject alternative names","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/","og_locale":"en_US","og_type":"article","og_title":"PKI - SSL certificates management with Java keytool and OpenSSL","og_description":"PKI management with Java keytool and OpenSSL including subject alternative names","og_url":"https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/","og_site_name":"dbi services | Blog","article_publisher":"https:\/\/www.facebook.com\/dbiservices\/","article_published_time":"2016-05-27T07:05:08+00:00","og_image":[{"width":258,"height":195,"url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/2022\/04\/java-1.jpg","type":"image\/jpeg"}],"author":"Middleware Team","twitter_card":"summary_large_image","twitter_creator":"@dbiservices","twitter_site":"@dbiservices","twitter_misc":{"Written by":"Middleware Team","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/"},"author":{"name":"Middleware Team","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/8a0bfec3c3bd1f27d3d452eaa592bfb8"},"headline":"PKI – SSL certificates management with Java keytool and OpenSSL","datePublished":"2016-05-27T07:05:08+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/"},"wordCount":593,"commentCount":0,"publisher":{"@id":"https:\/\/www.dbi-services.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/2022\/04\/java-1.jpg","articleSection":["Application Server"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/","url":"https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/","name":"PKI - SSL certificates management with Java keytool and OpenSSL - dbi services | Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/#primaryimage"},"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/2022\/04\/java-1.jpg","datePublished":"2016-05-27T07:05:08+00:00","description":"PKI management with Java keytool and OpenSSL including subject alternative names","breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/#primaryimage","url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/2022\/04\/java-1.jpg","contentUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/2022\/04\/java-1.jpg","width":258,"height":195},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/pki-ssl-certificates-management-with-java-keytool-and-openssl\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"PKI – SSL certificates management with Java keytool and OpenSSL"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi services Blog","description":"#BeSharing","publisher":{"@id":"https:\/\/www.dbi-services.com\/blog\/#organization"},"alternateName":"dbi Blog","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.dbi-services.com\/blog\/#organization","name":"dbi services","alternateName":"dbi","url":"https:\/\/www.dbi-services.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/2026\/09\/dbi-services-logo.png","contentUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/2026\/09\/dbi-services-logo.png","width":512,"height":512,"caption":"dbi services"},"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/dbiservices\/","https:\/\/x.com\/dbiservices","https:\/\/www.linkedin.com\/company\/dbi-services\/","https:\/\/www.youtube.com\/user\/dbiservices"],"description":"Swiss IT consulting and services company specialised in efficient data infrastructures and platforms: databases, application servers, cloud, DevOps, digitalization, analytics, data quality and monitoring. Headquartered in Del\u00e9mont with offices in Nyon, Basel, Bern and Zurich.","email":"info@dbi-services.com","telephone":"+41 32 422 96 00","legalName":"dbi services SA"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/8a0bfec3c3bd1f27d3d452eaa592bfb8","name":"Middleware Team","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/ddcae7ba0f9d1a0e7ae707f0e689e4a9c95bb48ec49c8e6d9cc86d43f4121cb6?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/ddcae7ba0f9d1a0e7ae707f0e689e4a9c95bb48ec49c8e6d9cc86d43f4121cb6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ddcae7ba0f9d1a0e7ae707f0e689e4a9c95bb48ec49c8e6d9cc86d43f4121cb6?s=96&d=mm&r=g","caption":"Middleware Team"},"description":"Posts published under the Middleware Team account are collective contributions by the dbi services middleware and enterprise content management consultants. The practice covers ECM platforms such as OpenText Documentum, Alfresco, and M-Files, as well as application servers and integration technologies including WebLogic, JBoss, Tomcat, and the Elastic Stack, from architecture and deployment to operations under service level agreements.","url":"https:\/\/www.dbi-services.com\/blog\/author\/middleware-team\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/8080","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/40"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=8080"}],"version-history":[{"count":0,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/8080\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media\/8082"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=8080"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=8080"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=8080"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}