Tomcat with PFX files

have a look at Tutorial - Java KeyStores (JKS) With Let's Encrypt

walk step by step