certificate format for cacerts

[James Ellis]

I have a website that uses a self signed certificate and some java code that needs to use HttpsUrlConnection to access the site.

I know I need to get the certificate imported into cacerts but I am not sure exactly which certificate I should be importing. Rather, I have an export problem. In firefox, there is a plugin that lets you export the certificate in all sorts of formats:

X.509 Certificate (PEM) .crt extension

X.509 Certificate with chain (PEM) .crt extension

X.509 Certificate (DER) .der extension

X.509 Certificate (PKCS#7) .p7c extension

X.509 Certificate with chain (PKCS#7) .p7c extension


Which one should I choose if I want to then use keytool to import the certificate into cacerts?

Thanks,
Jim

[James Ellis]

It looks like this is the winner:

X.509 Certificate (PEM) .crt extension