I have created one keystore from two certificates(both of the certiifcates are from same cerficate signing request but from different CAs) using the command --> openssl pkcs12 -export -passout pass: password -in test1.crt -inkey test.key -out TEST.p12 -name "tomcat" -certfile test2.crt -caname myCA The problem is it always get the certificate used in -in filename(here test1.crt) option. How can i create a keystore from more than one certificates using openSSL?