$> openssl x509 -text -noout -in newreq.pem
$> openssl s_client -connect www.test.com:443
$> openssl s_client -connect www.test.com:443 -showcerts
$> keytool -list -v keystore cacerts -storepass changeit
$> keytool -importcert -keystore cacerts -storepass changeit -alias TEST -file test.pem