View the certs:

keytool -v -list -keystore /apps/software/jdk1.8.0_92/jre/lib/security/cacerts

Add new cert:

keytool -importcert -alias TESTNAME -keystore /apps/software/jdk1.8.0_92/jre/lib/security/cacerts -file /tmp/test-public-cert.crt

Confirm the addition:

keytool -list -keystore /apps/software/jdk1.8.0_92/jre/lib/security/cacerts -alias TESTNAME

Note: default password for cacerts file in tomcat is “changeit”