Keytool

openssl x509 -in domainRootCAcert.pem -outform DER -out domainRootCAcert.der keytool -importcert -trustcacerts -alias DomainActiveDirectory -file domainRootCAcert.der -keystore cacerts

[someone@hostname security]$ ../../bin/keytool -list -keystore cacerts | grep Enter keystore password: [someone@hostname security]$ ../../bin/keytool -list -keystore cacerts | grep -i Enter keystore password: [someone@hostname security]$ ../../bin/keytool -list -keystore cacerts | grep Enter keystore password: [someone@hostname security]$ ../../bin/keytool -list -keystore /opt/jboss/certs/cacerts | grep Enter keystore password: alias3rootca, May 25, 2010, trustedCertEntry, /opt/bea/jdk150_06/jre/lib/security