Keytool error: java.lang.Exception: Public keys in reply and keystore don't match

Hi @rg305 and @ahaw021,thanks for your replies but I don't understand. The links that you shared don't explain where the private key .pem files comes from!

The steps in the original link Configuring Let's Encrypt with Tomcat 6.x and 7.x resulted in 5 files in my folder:

  1. my.keystore (contains private key? how do I export it?)
    2, request.csr (sent to letsencrypt via certbot)

Resulting files from my certbot request:

certbot-auto certonly --csr request.csr

  1. 0000_cert.pem (signed cert?)
  2. 0000_chain.pem (?)
  3. 0001_chain.pem (?)

a) Where is the private key .pem file that I need to combine with my cert to generate a PFX?
b) Is the original link wrong/old?