Package a private key and certificate chain into a PKCS#12 (.p12 or .pfx) that Java, OpenSSL, Windows and macOS read, take one apart, or convert JKS to PKCS#12.