Since you mentioned pkcs12, my impression is that while it in theory supports multiple keys I thought there were some issues making that work. Could be those were more OpenSSL limitations than Java, but I haven't ever explored it much. I use pkcs12 for SSL keys but only one at a time, and stuck to JCEKS for the secret keys. -- Scott