openssl pkcs12 -export -in client-cert.pem -inkey client-key.pem -out my-cert.p12

keytool -importkeystore  -srckeystore D:my-cert.p12 -destkeystore ./cacerts -srcstoretype PKCS12 -deststorepass changeit

openssl x509 -in server-ca.pem -inform pem -out server-ca.der -outform der

spring.datasource.url= jdbc:mysql://xxx.xxx.xxx.xxx:3306/xxx?useUnicode=true&characterEncoding=utf8&useSSL=true&requireSSL=true