keytool

The Java command-line tool that creates and inspects keystores and truststores.

It generates key pairs, imports certificates and lists what a store holds. Kafka brokers and Java clients read the stores it writes through their ssl.keystore and ssl.truststore settings.