cd /etc/letsencrypt/live/exampledomain.com
ls
openssl pkcs12 -export -out bundle.pfx -inkey privkey.pem -in cert.pem
ls
mv bundle.pfx /opt/tomcat/bundle.pfx
ll /opt/tomcat/bundle.pfx
ll /opt/tomcat/
cd /opt/tomcat/conf
nano server.xml
<Connector protocol="org.apache.coyote.http11.Http11NioProtocol"
port="8443" maxThreads="2048" scheme="https"
secure="true" acceptCount="2048"
SSLEnabled="true" clientAuth="false"
keystoreType="PKCS12" keystoreFile="/opt/tomcat/bundle.pfx"
keystorePass="YOURPASSWORD" sslProtocol="TLS" />
chown tomcat:tomcat /opt/tomcat/bundle.pfx
systemctl restart tomcat