sudo certbot certonly --csr request.csrchoose 1
sudo /usr/bin/keytool -import -trustcacerts -alias tomcat -file 0001_chain.pem -keystore /home/ubuntu/keystore.p12enter password . you will get a notice that the certificate was successfully added . reboot . enjoy.