PKCS12
A standard file format that holds a private key with its certificate chain, protected by a password.
It is the default keystore type in current Java and Kafka, set with ssl.keystore.type=PKCS12. One file can carry the key and certificates a broker or client presents.