Still Renewing Tomcat and Spring Boot Certificates by Hand? How to Automate Renewal and Deployment

With Nginx, a renewed certificate is two PEM files and a reload. Tomcat and Spring Boot usually load a keystore instead (.jks or .p12), so each renewal also means downloading the Tomcat-format certifi