PEM -> JKS

 openssl x509 -in client.pem -out client.der -outform DER
 keytool -storepass changeit -keystore client.jks -importcert -alias client -file client.der -trustcacerts