OK, got a workaround to make it work. Basically I had to use certificate PEM files convert to PFX and then create keystore file using PFX which can directly be passed to tomcat. Reference URL
Thanks @JuergenAuer for response. Still I believe the old technique of requesting certificate using CSR should be implemented for windows client same as certbot allows.