Try this post, it shows the command that works with the .pem files that Certbot produces.
It does produce a pfx archive rather than jks as in your attempt, but Tomcat is happy to use both formats.
1 Like