Delete a certificate from a keystore with keytool

It might be necessary to remove a certificate, e.g. if it was added by accident, from a keystore. To do so, follow these instructions:

• Make a work copy of your keystore on which we're going to make modifications.
• Identify the alias of the wrong certificate using the following command:

keytool -list -v -keystore keystoreCopy.jks

• Delete the alias of the wrong certificate:

keytool -delete -alias aliasARetirer -keystore copieKeystore.jks

• Replace your server's keystore by your copy.