1) cat CORP_HOSTNAME.pem CORP_interCA.pem CORP_rootCA.pem > CORP_all.pem
2) openssl pkcs12 -export -in CORP_all.pem -inkey CORP_HOSTNAME_privkey.pem -out CORP_HOSTNAME_cert_and_key.p12 -name tomcat -CAfile CORP_interCA.pem -caname CORPInterCA
3) ../java/bin/keytool -importkeystore -deststorepass PASS -destkeypass PASS -destkeystore CORP_HOSTNAME_CNAME.jks -srckeystore CORP_HOSTNAME_cert_and_key.p12 -srcstoretype PKCS12 -srcstorepass PASS -alias tomcat
4) ../java/bin/keytool -import -trustcacerts -alias CORPInterCA -file CORP_interCA.pem -keystore CORP_HOSTNAME_CNAME.jks -storepass PASS
5) server.xml adjusted to
keystoreFile="/some/where/keystore.p12"
keystorePass="PASS"