title: How to update a Tomcat keystore with a renewed SSL certificate?
body: <p>About a year ago I got an SSL certificate from GoDaddy and installed it on a Tomcat server following their instructions. No issues.</p>
  
  <p>The certificate is about to expire so I renewed it. GoDaddy sent me three .cer files. I can't figure out what to do with them.</p>
  
  <p>If I generate a brand new keystore and try to import the files into it like I did the first time, it doesn't work. I assume this is because the new keystore doesn't have my original private key.</p>
  
  <p>If I try to import the new certificates into the old file, it doesn't allow this.</p>
  
  <p>If I take the old keystore and delete some or all of the old certificates and replace them with the new ones, keytool allows this, but the keystore doesn't work when I install it on my server.</p>
  
  <p>I don't know what to do next.</p>