Also, I'm using Keystore Explorer to manage all my keys/certs becaues it's very nice, but most HOWTOs don't cover this use case so I kind of have to read between the lines to do the equivalent of the openssl commands.