- Generate Certificate from Certbot likewise
- Open Keytool 
- create new keystore name after the domain
- save
- open up the fullchain.pem directory and run cmd from there and run `openssl pkcs12 -export -in fullchain.pem -out fullchain.pkcs12 -inkey priv.key`
- from the keytool , import the key then select the pkcs12 file that we just created, then enter empty password. 
- once certificate chain is updated, save the key with your desired password.