# Jar signing **URL:** \ **Category:** Classic Servoy\ **Created:** [September 24, 2013, 9:42am UTC](https://forum.servoy.com/t/jar-signing/17483 "2013-09-24T09:42:09Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![Marco\_R](https://avatars.discourse-cdn.com/v4/letter/m/a6a055/32.png) [@Marco\_R](https://forum.servoy.com/u/Marco_R)\ **Post date:** [September 24, 2013, 9:42am UTC](https://forum.servoy.com/t/jar-signing/17483/1 "2013-09-24T09:42:09Z")
Hi all, I’ve always used a keystore with a self-signed certificate. Now I’ve bought a certificate from a CA. The CA had sent me 3 certificates, I suppose that 1 is my own certificate, 1 is the authority, and 1 is an intermediate certificate. Watching on your wiki page, I’ve found this phrase: > The signed certificate (+ any required intermediate certificate) received from the SSL supplier need to be imported into the keystore. > The signed .crt file can be imported into the keystore using the following command: > > ```auto > keytool -import -alias MyPlugins -keystore mykeystore.ks -trustcacerts -file mykeystore.crt > > ``` Now my questions are: 1 - Is there a specific order in wich I have to import these certificates into my keystore? Because I’ve imported just one certificate. 2 - The keystore was created AFTER the certificate request from CA (this because initially the Certificates would be used to sign our website), this could be a problem (I’m thinking about the CSR)? I’m making these questions because I’ve tried to import our website-certificate into the keystore sucefully, but once I’ve used the signed jar under the application server, I’ve received a warning for not trusted certificate (I suspect for the point 1 because I’ve imported just one certificate). Sorry but I’m new in this argument ![:)]( "Smile") Thanks in advance Marco Rossi ---
**Author:** ![IT2Be](https://avatars.discourse-cdn.com/v4/letter/i/dc4da7/32.png) [@IT2Be](https://forum.servoy.com/u/IT2Be)\ **Post date:** [September 24, 2013, 9:52am UTC](https://forum.servoy.com/t/jar-signing/17483/2 "2013-09-24T09:52:02Z")
Hi Marco, Are you using a code signing certificate for Java jars? I ask because you are talking bout the certificate for your website… ---
**Author:** ![Marco\_R](https://avatars.discourse-cdn.com/v4/letter/m/a6a055/32.png) [@Marco\_R](https://forum.servoy.com/u/Marco_R)\ **Post date:** [September 26, 2013, 9:11am UTC](https://forum.servoy.com/t/jar-signing/17483/3 "2013-09-26T09:11:33Z")
That’s it. I’ve made confusion between this two kind of certificate. Thanks Marcel, I’ll buy a “signing certificate”. Just to don’t buy others useless certificates: Is that the kind of certificate I need: [http://www.instantssl.com/code-signing/ … 3goduEwAFA](http://www.instantssl.com/code-signing/index.html?ap=InstantSSLJun12&key1sk5=3159&key1sk1=sem&gclid=CMK57trb6LkCFc7C3goduEwAFA) ? Would anyone suggest me other cheapest vendor? Thanks Marco ---
**Author:** ![IT2Be](https://avatars.discourse-cdn.com/v4/letter/i/dc4da7/32.png) [@IT2Be](https://forum.servoy.com/u/IT2Be)\ **Post date:** [September 26, 2013, 9:23am UTC](https://forum.servoy.com/t/jar-signing/17483/4 "2013-09-26T09:23:41Z")
Hmm, I don’t know. When I bought it GlobalSign was the cheapest but not anymore I believe. Please make sure that their documentation is ok, it is a troublesome process in any case but without good documentation even worse.