openssl pkcs12 -export \
	 -in /etc/letsencrypt/live/tomcat.syninf.net/cert.pem \
	 -inkey /etc/letsencrypt/live/tomcat.syninf.net/privkey.pem \
	 -out /tmp/keystore.p12 \
	 -name tomcat.syninf.net \
	 -CAfile /etc/letsencrypt/live/tomcat.syninf.net/fullchain.pem \
	 -caname "Let's Encrypt Authority X3" \
	 -password pass:tomcat