Open and convert Java keystores (JKS, JCEKS)
Open a Java keystore with its password to list every alias, see each certificate and key, check the keystore's integrity, and convert it to a PFX/P12 file or PEM. It replaces common keytool commands and runs entirely in your browser.
What you can do
- Reads JKS and JCEKS keystores, and Java PKCS#12 stores
- Lists aliases with entry type, dates and fingerprints
- Verifies the keystore integrity check
- Converts to PFX/P12 or PEM, and PFX to JKS
- Shows the equivalent keytool commands
Frequently asked questions
Which keytool commands does this replace?
keytool -list -v -keystore to inspect entries, and keytool -importkeystore to convert between JKS and PKCS#12. The equivalent commands are shown next to each result.
Should I still use JKS keystores?
Since Java 9 the default keystore type is PKCS#12. JKS is Java-only and protects keys with weaker algorithms, so converting to PKCS#12 is usually recommended.
What is the difference between JKS and JCEKS?
JCEKS can also store secret (symmetric) keys and protects private keys with stronger encryption than JKS.
Related tools
- PFX to PEM — Extract certificate, key and chain from a PFX/P12
- PEM to PFX — Combine certificate, key and chain into a PFX/P12
- Converter — All conversions: PEM, DER, PFX, PKCS#1/PKCS#8, chains, key passwords
- Viewer — Inspect and debug certificates, PFX files, keys, CSRs and CRLs