Package a private key and certificate chain into a portable PKCS#12 (.p12/.pfx) keystore, extract an existing one back to PEM, or convert between JKS and PKCS#12. AES-256, readable by Java, OpenSSL, Windows and macOS.